How to Access the Dark Web: A Step-by-Step Guide

What the Dark Web Is (and What It Isn't)

The dark web is a collection of web services that exist behind layers of encryption, cannot be found using traditional search engines like Google, and cannot be visited with regular browsers[6]. It consists mostly of services on the Tor network, plus smaller networks like I2P and Freenet. The key technical feature is the .onion domain: onion services use this special-use top-level domain instead of .com or .org, and they are only accessible through the Tor network[2]. These addresses are automatically generated strings of random characters, so you will not find memorable names like 'example.onion'[5].

The dark web is not the same as the deep web. The deep web describes any site on the normal web that is hidden from search engines, such as your email inbox, online banking portal, or documents behind a login[6]. The dark web is a much smaller subset that requires specific software to access.

Accessing the dark web is legal in most countries, including the United Kingdom and the United States. The Electronic Frontier Foundation states that there is nothing illegal about using Tor in the U.S., and notes that government agencies themselves depend on it — for example, the CIA hosts a website within Tor[7]. Tor was developed as a tool for free expression, privacy, and human rights, not as a tool designed to break the law[8]. Running a Tor relay, including an exit relay, is also legal under U.S. law, and the EFF is not aware of any individual being prosecuted for operating one[8].

Your local network administrator or ISP can see that you are using Tor, but not what you are doing with it[4]. Using Tor alone may raise suspicion if you are the only person on your network doing so, but it does not constitute illegal activity. If you log into a personal account or fill out forms with identifying information while using Tor Browser, that website will know who you are and may know you are using Tor[4].

Onion services provide end-to-end encryption between you and the website even without HTTPS, because both you and the site remain inside the Tor network throughout the connection[5]. Regular search engines cannot index .onion addresses because these services are not exposed to the public internet and do not respond to crawlers outside Tor.

For a deeper look at navigating onion services once you are connected, see our guide on How to Find the Dark Web: A Step-by-Step Guide.

Before You Start: Prerequisites and Risk Check

Before you open Tor Browser, check that your device and environment meet basic security conditions. You need a computer or laptop running an updated operating system: Tor Browser 16.0 supports Windows (i686 and x86_64), macOS (Universal), and GNU/Linux (x86_64 and aarch64)[3]. Mobile devices have separate Tor apps, but this guide focuses on desktop setup. Update your OS to the latest stable release to close known vulnerabilities that could compromise anonymity even inside Tor.

Close all other applications before launching Tor Browser, especially browsers with active sessions, messaging apps, and file-sharing tools. These can leak identifying information or create network activity that correlates with your Tor usage. If your system has multiple user accounts, use a non-administrator account for Tor browsing: this limits the damage if malware exploits a browser vulnerability.

Decide whether to use a VPN alongside Tor. A VPN hides Tor usage from your ISP, which can see that you are using Tor but not what you are doing with it[4]. In countries without widespread censorship, such as the United Kingdom, a VPN is optional. If you choose one, connect to the VPN first, then launch Tor Browser. Do not route Tor through a proxy or VPN that logs your activity, as this shifts trust from your ISP to the VPN provider.

Understand the legal boundaries in your jurisdiction. Using Tor is legal in the United States and the United Kingdom, and government agencies themselves depend on it[7]. Tor was developed for free expression, privacy, and human rights, not to break the law[8]. Your ISP can see that you are using Tor, and using it alone may raise suspicion if you are the only person on your network doing so[4]. If you log into personal accounts or fill out forms with your real name while using Tor Browser, that website will know who you are and may know you are using Tor[4].

Pre-flight checklist:

• Operating system updated to the latest stable release

• All other applications closed, especially browsers and messaging apps

• Non-administrator user account active (if available)

• VPN connected (optional, but connect before launching Tor if using one)

• Clear understanding that your ISP can see Tor usage, but not your activity within it

Download Tor Browser only from the official Tor Project site at https://download.torproject.org/, where HTTPS makes tampering much harder[1]. If the official site is blocked on your network, use the GetTor service or official mirrors hosted by EFF or La Cebolla to receive verified download links via email or platforms like Dropbox, Google Drive, and GitHub[1]. Never download from third-party sites, app stores, or torrent trackers: tampering is common and can compromise your anonymity before you even start.

Step 1: Install the Tor Browser from the Official Source

The safest download route is https://download.torproject.org/, where HTTPS makes tampering much harder[1]. Tor Browser 16.0 is the current stable release, available for Windows (i686 and x86_64), macOS (Universal), and GNU/Linux (x86_64 and aarch64)[3]. The installer is a standalone package that does not integrate with your system browser or change system settings, so you can run it alongside your regular browser without conflicts.

If the official site is blocked on your network, use the GetTor service or official mirrors hosted by EFF or La Cebolla[1]. GetTor responds with download links hosted on Dropbox, Google Drive, and GitHub, which are less likely to be blocked. Send an email to [email protected] with your operating system in the subject line, and you will receive verified links within minutes. Official mirrors use the same HTTPS protection as the main site, but always check that the domain matches the Tor Project's published list before downloading.

Why third-party sources are dangerous: Tor Browser is open-source, but modified versions circulate on app stores, torrent trackers, and download portals. These copies can include surveillance code, keyloggers, or backdoors that compromise your anonymity before you connect. Even a single altered file can leak your real IP address or log the .onion sites you visit. Stick to the official source or GetTor, and never trust a download link from a forum post or social media.

Installation paths by operating system:

• Windows: Run the .exe installer and choose an installation folder. You do not need administrator rights if you install to a user directory. The installer creates a desktop shortcut and a folder containing the Tor Browser application.

• macOS: Open the .dmg file and drag the Tor Browser icon to your Applications folder. macOS may warn that the app is from an unidentified developer; right-click the icon and select 'Open' to bypass Gatekeeper on first launch.

• GNU/Linux: Extract the .tar.xz archive to a folder in your home directory, then run start-tor-browser.desktop from the extracted folder. No root access is required, and the browser runs entirely from the folder you choose.

Verify the file size matches the official listing on the download page before opening the installer. If the size differs by more than a few kilobytes, delete the file and download again. Signature verification (checking the PGP signature of the installer) adds another layer of trust, but it requires installing GnuPG and importing the Tor Project's signing key — most beginners can skip this step if they download directly from the official HTTPS site.

For step-by-step installation instructions tailored to each operating system, see our guide on How to Install Tor Browser: A Step-by-Step Guide.

Step 2: Connect to the Tor Network

When you first launch Tor Browser, it attempts to connect to the Tor network automatically. You will see a connection progress window showing 'Connecting to the Tor network' with a percentage counter. This process typically takes 10–30 seconds on an uncensored network with a stable internet connection. Once connected, the browser opens to a start page with a search bar and a confirmation that you are now using Tor.

What happens during connection: Tor Browser contacts a set of directory servers to download a list of available relays, then builds a circuit through three randomly selected relays — an entry (guard) node, a middle node, and an exit node. This circuit changes every ten minutes or when you request a new identity. The circuit display (a small onion icon in the address bar) shows the three relays currently in use for the active tab. Click the icon to see the IP addresses and countries of each relay, though you cannot choose specific relays in the standard browser without advanced configuration.

Onion routing in plain terms: Your connection passes through three relays in sequence. The entry node knows your real IP address but not your destination; the middle node knows neither; the exit node knows your destination but not your real IP. Each relay decrypts one layer of encryption (like peeling an onion), so no single relay sees both your identity and your activity. Onion services use .onion addresses and remain entirely inside the Tor network, so even the exit node is not involved — you connect directly to the service through the circuit, and both ends stay encrypted[2][5].

Common connection failures and fixes:

• Clock synchronisation error: Tor requires your system clock to be accurate within a few minutes. If the connection stalls at 10% or 50% with a message about clock skew, close Tor Browser, sync your system time (Windows: Settings → Time & Language → Set time automatically; macOS: System Preferences → Date & Time → Set date and time automatically; Linux: sudo timedatectl set-ntp true), then relaunch the browser.

• Blocked ports: Some networks block the default Tor ports (9001, 9030, 443). If the connection fails repeatedly, click 'Configure Connection' on the startup screen and enable 'Use a bridge'. Bridges are unlisted relays that help you connect when direct access is blocked. Select 'obfs4' from the built-in bridge options — this makes Tor traffic look like random encrypted data rather than recognisable Tor protocol.

• Censored networks: If you are on a network that actively blocks Tor (common in workplaces, universities, or countries with internet restrictions), request a bridge via email. Send a message to [email protected] from a Gmail or Riseup address (other providers are often blocked) with 'get bridges' in the body. You will receive a list of bridge addresses to paste into the 'Provide a bridge' field in Tor Browser's connection settings.

Why your ISP can see Tor usage: Your local network administrator or ISP can see that you are connecting to the Tor network, because the IP addresses of public Tor relays are published[4]. They cannot see what you are doing inside Tor — which sites you visit or what data you send — but the fact of using Tor may be visible. Using Tor alone may raise suspicion if you are the only person on your network doing so, though it is not illegal in the United Kingdom or the United States[7][4]. If this is a concern, use a bridge or connect through a VPN before launching Tor Browser, so your ISP sees only encrypted VPN traffic rather than a direct Tor connection.

If the connection succeeds but websites do not load, check that you are not behind a captive portal (a login page on public Wi-Fi). Open a regular browser, complete the portal login, then return to Tor Browser and request a new circuit by clicking the onion icon in the address bar and selecting 'New Circuit for this Site'. If problems persist, close Tor Browser completely, delete the TorBrowser/Data/Tor folder (this resets connection state without affecting bookmarks or settings), and restart the browser.

Step 3: Navigate .onion Sites Safely

Once you are connected to the Tor network, you need to find .onion addresses to visit. Onion services use the special-use top-level domain .onion and are only accessible through the Tor network[2]. Unlike regular websites, .onion addresses are automatically generated strings of random characters — there is no need to purchase a domain name, and you cannot register a memorable address without generating millions of keys[5]. This makes onion addresses difficult to remember and easy to mistype, so you must find links from trusted sources rather than guessing or using random search engines.

Where to find verified .onion links: Start with curated directories maintained by organisations with a reputation to protect. The Hidden Wiki (multiple versions exist, so verify the address through a trusted forum or guide) lists categories of onion services, but many links are outdated or lead to scam copies. The Tor Project's own list of onion services (available on their clearnet site) includes verified addresses for Facebook, ProPublica, BBC News, and DuckDuckGo. The /r/onions subreddit and forums like Dread (an onion-hosted Reddit alternative) publish community-vetted links, though you should cross-check any address with at least two independent sources before visiting.

Why random search engines are dangerous: Many onion search engines index sites automatically without verification, so results include phishing clones, honeypots, and scam markets. A search for a popular marketplace may return dozens of fake addresses designed to steal login credentials or cryptocurrency. If you must use a search engine, stick to DuckDuckGo's onion service or Ahmia (which filters illegal content and known scams), and always verify the address against a trusted directory before entering any personal information or making a payment.

What to do if a site is slow or unreachable: Onion services are slower than regular websites because your connection routes through six relays (three for you, three for the site) rather than a direct path[5]. A page that loads in one second on the clearnet may take five to fifteen seconds over Tor. If a site does not load after thirty seconds, click the onion icon in the address bar and select 'New Circuit for this Site' to route through a different set of relays. If the site still fails, it may be offline — onion services are often hosted on home connections or low-budget servers, and uptime is unpredictable. Bookmark the address and try again in a few hours rather than repeatedly refreshing, which wastes relay bandwidth.

Critical rules for entering credentials: If you log into a website using Tor Browser or fill out forms with personally identifying information, that website will be able to identify you and may know you are using Tor[4]. This applies to onion services as well as clearnet sites accessed through Tor. Never log into your real Facebook, Gmail, or banking account while using Tor Browser unless you explicitly want that service to know you are using Tor. Create separate accounts with pseudonyms and disposable email addresses for any activity you want to keep private. Even onion services can log your behaviour, correlate visits, and share data with other parties — end-to-end encryption protects your connection from eavesdroppers, but it does not make the site itself trustworthy[5].

Script and plugin warnings: Tor Browser disables JavaScript by default on the 'Safest' security level, and enables it only for HTTPS sites on 'Standard'. Many onion services require JavaScript to function, but enabling scripts on an unknown site can expose your real IP address through WebRTC leaks, canvas fingerprinting, or malicious code. If a site demands that you enable JavaScript, check the security level in the shield icon (top-left of the address bar) and consider whether you trust the operator. For marketplaces, forums, and news sites, 'Safer' or 'Safest' is usually sufficient. For interactive services (webmail, file uploads), you may need 'Standard', but never lower the security level for a site you have not verified through multiple sources.

For a broader overview of finding and verifying onion addresses, see our guide on How to Find the Dark Web: A Step-by-Step Guide.

Common Mistakes That Compromise Your Anonymity

Even with Tor Browser installed and connected, a handful of common errors can expose your real identity or link your Tor activity to your regular browsing. Each mistake creates a different type of risk — some reveal your IP address, others connect your anonymous session to your real-world accounts, and a few make your traffic stand out to observers. Understanding the specific threat behind each error helps you avoid it in practice.

Logging into personal accounts: If you log into a website using Tor Browser or fill out forms with personally identifying information, that website will be able to identify you and may know you are using Tor[4]. This applies to any service — Facebook, Gmail, your bank, or even an onion forum where you reuse a username from your clearnet life. The site operator sees your login, can correlate your visits across sessions, and may flag your account for using Tor. Create separate accounts with pseudonyms and disposable email addresses for any activity you want to keep private. Never mix real credentials with anonymous browsing in the same session.

Maximising the Tor Browser window: Tor Browser opens in a fixed window size (usually 1,000 × 800 pixels) to prevent websites from fingerprinting your screen resolution. If you maximise the window or manually resize it, your unique screen dimensions become part of your browser fingerprint, making you easier to track across sites. Keep the window at its default size, even if it feels small. If you need more space, zoom in using Ctrl/Cmd + '+' rather than stretching the frame.

Enabling JavaScript on unknown sites: Tor Browser disables JavaScript by default on the 'Safest' security level and restricts it on 'Safer'. Enabling scripts on an untrusted site can expose your real IP address through WebRTC leaks, canvas fingerprinting, or malicious code that bypasses Tor's protections. If a site demands JavaScript, check the security level in the shield icon (top-left of the address bar) and consider whether you trust the operator. For news sites and forums, 'Safer' or 'Safest' is usually sufficient. Only use 'Standard' for verified services where you need interactivity, and never lower the security level for a site you have not cross-checked with multiple sources.

Downloading files and opening them offline: Files downloaded through Tor Browser may contain embedded trackers, scripts, or metadata that phone home when you open them outside Tor. A PDF with a remote image, a Word document with macros, or a video file with an embedded URL can all leak your real IP address the moment you double-click. If you must download a file, open it inside a virtual machine with no network connection, or use a dedicated offline computer. Better still, avoid downloading files from onion services unless you have a specific reason and understand the risk.

Using Tor over public Wi-Fi without a VPN: Your local network administrator or ISP can see that you are using Tor, though they cannot see what you are doing inside it[4]. On public Wi-Fi — in a café, library, or airport — the network operator can log the fact that your device connected to Tor relays, and may correlate this with other activity (your email login, payment for Wi-Fi access, or CCTV footage). If you want to hide Tor usage itself, connect through a VPN before launching Tor Browser, so the Wi-Fi provider sees only encrypted VPN traffic. Choose a VPN that does not log connection timestamps or IP addresses, and pay with a method that does not link to your identity.

Mixing Tor with regular browsing in the same session: Opening Tor Browser alongside your regular browser on the same device creates opportunities for cross-contamination. A script in your regular browser might detect that Tor is running; a malicious site in Tor might exploit a vulnerability that affects both browsers; or you might accidentally paste a link from one into the other, linking your anonymous and identified activity. Close all other browsers before launching Tor, and restart your device if you need to switch back. Treat each session as isolated: one identity, one browser, one purpose.

Why these mistakes matter more than technical attacks: Most beginners worry about sophisticated attacks — traffic analysis, relay compromise, zero-day exploits — but the vast majority of de-anonymisations happen because someone logged into Facebook over Tor, maximised the window on a 4K monitor, or opened a PDF on their main desktop. Operational discipline — sticking to the rules above, every time — protects you far better than any advanced configuration. Tor provides strong technical anonymity, but it cannot protect you from your own habits.

How to Verify Your Setup Is Working

Before you visit any onion service or enter sensitive information, you need to confirm that Tor Browser is routing your traffic correctly and not leaking your real identity. A proper verification checks three things: your IP address has changed, DNS queries are not leaking outside Tor, and the browser security level is set to protect you from scripts. Each test addresses a different failure mode — a misconfigured connection, a system-level leak, or a setting you forgot to adjust.

Check your Tor connection status: Open Tor Browser and navigate to https://check.torproject.org/. If Tor is working, you will see a green banner stating 'Congratulations. This browser is configured to use Tor' along with the IP address of your current exit relay. If the page shows a red banner or displays your real IP address (the one assigned by your ISP), close Tor Browser, restart it, and check again. A failed connection usually means Tor could not reach the network — this happens if your ISP blocks Tor relays or if you are behind a corporate firewall. In that case, configure a bridge in Tor Browser's connection settings before proceeding.

Verify your IP address differs from your real IP: Before launching Tor Browser, visit a site like https://www.whatismyipaddress.com/ in your regular browser and note your IP address and location. Then open Tor Browser, visit the same site, and compare the results. Your Tor IP should be completely different — often in another country — and should change each time you request a new circuit (click the onion icon in the address bar and select 'New Circuit for this Site'). If the IP matches your real address, Tor is not routing your traffic. Close the browser, check your system proxy settings to ensure no other VPN or proxy is interfering, and restart Tor.

Test for DNS leaks: DNS leaks occur when your system sends domain-name lookups outside Tor, revealing which sites you are trying to visit even if the connection itself is encrypted. Visit https://www.dnsleaktest.com/ in Tor Browser and run the extended test. The results should show IP addresses belonging to Tor exit relays, not your ISP's DNS servers. If you see your ISP's name or your real location, your operating system is bypassing Tor for DNS queries. On Windows, disable IPv6 in your network adapter settings. On macOS and Linux, check that no custom DNS servers are configured in your network preferences. Restart Tor Browser and test again.

Confirm the security level is set to Safest: Click the shield icon in the top-left corner of Tor Browser's address bar. A menu will show the current security level — 'Standard', 'Safer', or 'Safest'. For your first sessions, set it to 'Safest', which disables JavaScript on all sites, blocks some fonts and icons, and prevents media from playing automatically. Many onion services will look broken or fail to load interactive features, but this setting protects you from the most common attacks. You can lower the level to 'Safer' for specific trusted sites later, but never use 'Standard' on an unknown onion service.

If any of these three checks fail, do not proceed to onion services. A partial Tor connection is more dangerous than no connection at all, because you may believe you are anonymous when you are not.

Legal and Safety Context: What You Need to Know

Using Tor Browser to access the dark web is legal in most countries, but the line between lawful browsing and criminal activity depends on what you do once you are connected. In the United States, the Electronic Frontier Foundation states that running a Tor relay, including an exit relay, is legal under U.S. law, and that it is not aware of any individual being sued, prosecuted, or convicted for running a Tor relay[8]. The Freedom of the Press Foundation confirms there is nothing illegal about using the Tor anonymity network in the United States, noting that government actors depend on it — for example, the CIA hosts a website within Tor[7]. The EFF notes that Tor was developed as a tool for free expression, privacy, and human rights, and is not a tool designed or intended to be used to break the law[8]. The same principle applies in the UK, EU, and Australia: accessing the network itself is not a crime, but buying drugs, sharing illegal content, or engaging in fraud remains illegal regardless of the technology you use.

Your ISP can see that you use Tor, but not what you do inside it: Your local network administrator or ISP can see that you are using Tor (but not what you are using it for), and using Tor alone may be enough to raise suspicion, especially if you are the only one using it[4]. This visibility does not make Tor illegal, but it can draw attention. If you connect from a workplace, university, or public Wi-Fi network, the operator may flag your traffic or block Tor relays entirely. Some countries — including China, Iran, and Turkmenistan — actively block Tor connections at the ISP level, requiring users to configure bridges to reach the network. If you live in a jurisdiction where Tor is restricted, check whether bridges are necessary before you connect.

Law enforcement focuses on marketplaces and illegal content, not casual browsing: Authorities monitor Tor exit nodes and infiltrate onion marketplaces to identify users engaged in drug trafficking, weapons sales, and child sexual abuse material. Browsing news sites, forums, or whistleblowing platforms does not attract the same scrutiny. However, if you log into a website using Tor Browser or fill out forms with personally identifying information, that website will be able to identify you and may know you are using Tor[4]. This means a site operator — whether a journalist, a marketplace admin, or an undercover officer — can link your session to your real identity if you provide it.

Where to check current laws: Legal frameworks change, and what is permitted in one country may be restricted in another. The Electronic Frontier Foundation publishes country-specific guides on Tor legality and digital rights at https://www.eff.org/. For UK-specific advice, consult the Open Rights Group. In the EU, check your national data protection authority. In Australia, refer to the Office of the Australian Information Commissioner. Always verify the current legal status in your jurisdiction before connecting, and remember that using Tor to access legal content is not the same as using it to commit a crime.

Frequently Asked Questions

Is it illegal to browse on Tor?
No. Using Tor Browser to access the dark web is legal in most countries, including the United States, United Kingdom, and European Union. The Freedom of the Press Foundation confirms there is nothing illegal about using the Tor anonymity network in the United States, noting that government actors depend on it — for example, the CIA hosts a website within Tor[7]. The Electronic Frontier Foundation states that running a Tor relay, including an exit relay, is legal under U.S. law, and that it is not aware of any individual being sued, prosecuted, or convicted for running a Tor relay[8]. Tor was developed as a tool for free expression, privacy, and human rights, and is not a tool designed or intended to be used to break the law[8]. Browsing itself is lawful; what matters is what you do once connected. Buying illegal goods, sharing prohibited content, or engaging in fraud remains a crime regardless of the technology you use.

Can I use Tor on iPhone?
Yes, but with limitations. The official Tor Browser is not available for iOS, because Apple's platform restrictions prevent the full Tor client from running. Instead, the Tor Project recommends Onion Browser, a third-party app that routes traffic through the Tor network. Onion Browser provides basic anonymity but lacks some protections built into desktop Tor Browser, such as the Safest security level and automatic circuit isolation for each site. If you need stronger anonymity, use Tor Browser on a desktop or laptop instead.

Can I download Tor Browser for Mac?
Yes. The current stable release of Tor Browser is version 16.0, available for Windows, macOS (Universal), and GNU/Linux, with a 16.0a14 alpha also published[3]. The safest and simplest way to download Tor Browser is from the official Tor Project website at https://download.torproject.org/, where the connection is secured using HTTPS to make tampering much harder[1]. If the official Tor Project website is blocked on your network, Tor Project recommends using its official mirrors (hosted by EFF or La Cebolla) or the GetTor service, which responds with download links hosted on Dropbox, Google Drive, and GitHub[1]. After downloading, verify the file signature before installing to confirm it has not been modified.

Do I need a VPN to access the dark web?
No, but a VPN can hide the fact that you are using Tor. Your local network administrator or ISP can see that you are using Tor (but not what you are using it for), and using Tor alone may be enough to raise suspicion, especially if you are the only one using it[4]. Connecting through a VPN before launching Tor Browser means your ISP sees only encrypted VPN traffic, not Tor relay connections. This is useful on public Wi-Fi or in workplaces that monitor network activity. Choose a VPN that does not log connection timestamps or IP addresses, and pay with a method that does not link to your identity. A VPN does not make Tor more anonymous once you are inside the network, but it does protect you from local surveillance of Tor usage itself.

What is the safest way to access the dark web?
Download Tor Browser from the official Tor Project website, verify the file signature, and set the security level to Safest before visiting any onion service. Onion services use the special-use top-level domain .onion (instead of .com, .net, or .org) and are only accessible through the Tor network[2]. They provide end-to-end encryption between visitor and website even without HTTPS, because both the visitor and the site remain inside the Tor network[5]. Never log into accounts that reveal your identity, never maximise the browser window, and never download files unless you open them in an isolated virtual machine. If you log into a website using Tor Browser or fill out forms with personally identifying information, that website will be able to identify you and may know you are using Tor[4]. For a detailed walkthrough of finding and verifying onion services, see How to Find the Dark Web: A Step-by-Step Guide.

What to Do If Something Goes Wrong

You see your real IP address in the check

This happens when Tor Browser is not routing your traffic through the Tor network, often because another VPN or proxy is intercepting the connection before Tor starts. Close Tor Browser completely, then open your operating system's proxy settings and remove any manual proxy or VPN configuration that might be active. Restart Tor Browser and run the IP check again — the displayed address should now belong to a Tor exit relay, not your ISP.

Your DNS test shows your ISP's servers

A DNS leak means your system is sending domain-name lookups outside the Tor network, which reveals which sites you are trying to visit even though the connection itself is encrypted. On Windows, disable IPv6 in your network adapter settings and clear any custom DNS servers. On macOS and Linux, check your network preferences for manually configured DNS addresses and remove them. Restart Tor Browser and run the extended DNS leak test again — the results should show only Tor exit relay IP addresses.

Onion sites will not load at all

This is usually caused by the 'Safest' security level, which disables JavaScript and blocks many interactive features that onion services rely on. If a specific site you trust requires JavaScript, you can click the shield icon and lower the level to 'Safer' for that session only. Never switch to 'Standard' on an unknown onion service, because that re-enables the most common attack vectors. If the site still does not load, it may be offline — many onion services are run by volunteers and have irregular uptime.

You cannot find a working .onion address

Random link collections and search-engine results often point to phishing sites or services that disappeared months ago. Instead, use a trusted directory that verifies onion addresses and updates them regularly, such as the Tor Project's official list of known onion services. If you are looking for a specific organization, check whether it publishes its onion address on its regular website or official social media accounts. Avoid clicking .onion links from forums or chat rooms where anyone can post an address without verification.

Your connection is extremely slow or times out

Tor routes your traffic through three relays in different countries, so every page load takes longer than a normal browser. If a site times out, wait a few seconds and try again rather than refreshing repeatedly — each refresh builds a new circuit and adds more delay. You can also request a new circuit from the Tor Browser menu if the current one is unusually slow. Persistent slowness may mean your network is throttling Tor traffic, in which case a bridge can help you connect.

You are asked to log in or provide personal information

Any onion site that asks for your real name, email address, or phone number can link that information to your Tor session. Do not provide it. If a site requires an account, create one with a username that has no connection to your real identity and a password you do not use anywhere else. Remember that logging into any website while using Tor Browser means that website can identify you, even if the connection itself is anonymous[4].

Conclusions

• Download Tor Browser only from the official Tor Project website at https://download.torproject.org/, then verify the file signature before you install it[1].

• Set the security level to ‘Safest’ before visiting any onion service, and never log into accounts that reveal your identity[4].

• A VPN is optional: it hides the fact that you are using Tor from your ISP, but it does not make you more anonymous inside the network.

• If something goes wrong, check your IP address and DNS results first — both should show Tor exit relays, not your ISP.

• Treat every .onion link from forums or chat rooms as unverified until you confirm it through a trusted directory.

Your next step is to find a verified onion address from an organization you already trust. Start with How to Find the Dark Web: A Step-by-Step Guide.