How to Find the Dark Web: A Step-by-Step Guide

What "Finding the Dark Web" Actually Means

The dark web is not a single website or hidden folder you stumble upon—it's a collection of sites with .onion addresses that exist only when you route your connection through Tor, a network of volunteer-run relays[4][5]. You won't find these addresses through Google or by typing random URLs; they require Tor Browser to resolve and load. The phrase "finding the dark web" really means installing the right software and knowing where to look for .onion links, not discovering a secret portal.

People often confuse three layers of the internet:

Most of the internet sits in the deep web—password-protected and mundane. The dark web is a small subset that uses onion routing to anonymize both the server and the visitor[6][7].

This guide focuses on Tor Browser because it's the consensus entry point: free, maintained by the Tor Project, and designed to prevent common mistakes like plugin leaks[2]. Other tools exist—I2P, Freenet—but Tor has the largest user base and the clearest documentation. If you're starting out, Tor Browser is the path to follow; once you understand how .onion routing works, you can explore alternatives if your threat model requires them[5].

For detailed setup instructions, see How to Download Tor: A Step-by-Step Guide.

Before You Start: Tools and Precautions

You need three things: an updated operating system, Tor Browser downloaded directly from torproject.org, and a clear understanding of what not to do. The minimum setup takes about 10 minutes, but skipping any step—especially signature verification—can expose you before you even connect[3][1].

Essential setup:

• Updated OS: Windows, macOS, or Linux with the latest security patches installed. Tor Browser runs on all three, but an outdated system can leak information through unpatched vulnerabilities[1].

• Tor Browser from the official source: Download only from torproject.org. The current stable release is version 16.0[1]. Third-party mirrors, app stores, and torrent sites often distribute modified versions that log your activity or inject malware. After downloading, verify the '.asc' signature file against the developer's key to confirm the package matches what the Tor Project published[3]. If the signature check fails, delete the file and download again—never skip this step.

• Optional VPN positioning: You can route Tor through a VPN ('VPN before Tor') to hide the fact you're using Tor from your internet provider, or use a VPN after Tor ('Tor over VPN') to mask your exit traffic. Neither setup is required for basic anonymity, and both add complexity; most beginners should start without a VPN and add one only if their threat model demands it[4][5].

The most common beginner mistake is downloading Tor from unofficial sources. A modified browser can log every .onion address you visit, capture passwords, or disable the relay network entirely, leaving you exposed while you believe you're anonymous[3]. Always download from torproject.org and verify the signature.

Pre-flight checklist before connecting:

• Close all personal accounts—email, social media, banking—in other browsers. Logging into these services through Tor links your anonymous session to your real identity.

• Disable or remove browser extensions. Tor Browser blocks plugins like Flash by design because they can reveal your IP address[2]. Adding extensions reintroduces that risk.

• Use a non-admin user account on your computer if possible. If malware does get through, it will have limited system access.

• Confirm your OS firewall is active and that you're not torrenting over Tor, which the Tor Project explicitly warns against because it exposes your IP[2].

If you're in a country that blocks or penalizes Tor use—China, Russia, Iran, Belarus, or North Korea—simply connecting to the network could result in fines or detention[8]. In those regions, consider whether the risk justifies your need before proceeding.

Step 1: Download and Install Tor Browser Safely

The actual download and installation steps appear in the walkthrough above, so here we'll cover the variations, edge cases, and what to do when things go wrong. Most users will install Tor Browser on Windows, macOS, or Linux without issue, but understanding the differences between platforms—and knowing how to respond when your antivirus flags the installer—will save you time and prevent mistakes that compromise anonymity.

Desktop platforms: The current stable release is version 16.0, with builds for Windows (x86_64 and i686), macOS (Universal), and GNU/Linux (x86_64 and aarch64)[1]. Download the correct build for your architecture; if you're unsure, x86_64 covers most modern machines. The installer is a standard executable on Windows, a disk image on macOS, and a compressed archive on Linux. Each file on the download page includes a '.asc' OpenPGP signature file that lets you verify the package matches what the developers published[3]. If the signature doesn't validate, the file may have been modified in transit—delete it and download again from torproject.org.

Mobile options: An official Tor Browser exists for Android, available through the Play Store or as a direct APK download from the Tor Project site. iOS users face more limited choices because Apple restricts low-level networking; third-party browsers like Onion Browser attempt to replicate Tor's protections but cannot offer the same guarantees as the desktop or Android versions. If you need mobile access, Android is the safer bet.

When your antivirus blocks the installer: Many security suites flag Tor Browser as suspicious because it encrypts traffic and routes it through volunteer relays—behaviour that resembles malware to signature-based scanners. This is usually a false positive. To distinguish it from a genuine threat, verify the '.asc' signature before running the installer[3]. If the signature checks out, the file is legitimate; you can add an exception in your antivirus settings or temporarily disable real-time scanning during installation. If the signature fails or you downloaded from anywhere other than torproject.org, treat the file as compromised and delete it immediately.

Tor Browser will block plugins like Flash and QuickTime because they can be manipulated to reveal your IP address[2]. The browser enforces this by default—you don't need to configure it—but adding extensions or changing security settings can reintroduce those risks. Install once, verify the signature, and leave the defaults in place; customisation is where most leaks happen.

Step 2: Connect to the Tor Network

Once you launch Tor Browser, you'll see a connection screen with a single 'Connect' button. Click it, and the browser will automatically build a circuit through three volunteer-run relays scattered around the world[4][5]. Each relay knows only its immediate predecessor and successor—never the full path—so no single point in the chain can link your real IP address to the .onion site you're visiting[5]. The process usually completes in 10 to 20 seconds on an unrestricted network; when successful, you'll land on a 'Congratulations' page confirming you're connected to Tor.

Standard connection versus bridges: Most users can connect directly to Tor's public relay network without extra configuration. Your internet provider will see encrypted Tor traffic leaving your device, but it won't know which sites you visit[4]. If you're in a country that blocks Tor—or if your workplace firewall drops connections to known Tor relays—you'll need a bridge. Bridges are unlisted relays that aren't published in Tor's main directory, making them harder to block[8]. Tor Browser offers automatic bridge configuration: if the standard connection fails, the browser will prompt you to try a built-in bridge or request a custom one from the Tor Project. Pluggable transports like obfs4 disguise Tor traffic as ordinary HTTPS, which can bypass some censorship systems.

When Tor fails to connect: If the progress bar stalls or you see an error message, first check that your system clock is accurate—Tor's cryptography requires correct time synchronisation. Close the browser, verify your clock against an online source, then relaunch and try again. If the connection still fails and you suspect network restrictions, open the Tor Browser settings before connecting, enable 'Tor is censored in my country', and let the browser select a bridge automatically. In regions like China, Russia, or Iran, where Tor use can result in fines or detention, even bridge connections may be monitored[8]. Weigh the legal risk before proceeding.

Check your result: Once connected, visit check.torproject.org in the Tor Browser address bar. The page will display 'Congratulations. This browser is configured to use Tor' and show an IP address that differs from your real one[4]. Click the onion icon in the address bar to view your circuit; you should see three relays listed, each in a different country[5]. If check.torproject.org shows your actual IP or warns that you're not using Tor, close all tabs, restart the browser, and verify again before visiting any .onion addresses. A correct result means your traffic is routing through the relay network and your location is masked.

For a complete walkthrough from download to first .onion visit, see How to Access the Dark Web: A Step-by-Step Guide.

Step 3: Finding Your First .onion Sites

You've connected to Tor, but the browser opens to a blank search page with no obvious directory of .onion addresses. That's by design—Tor doesn't index the dark web the way Google indexes the surface internet. Instead, you'll rely on a handful of directories and search engines maintained by volunteers, most of which contain a mix of legitimate resources, dead links, and outright scams. Your job is to verify each address before you click, start with known-safe examples, and treat every unfamiliar link as potentially hostile.

Directories and search engines you can use:

• The Hidden Wiki: The most widely cited starting point, a wiki-style list of .onion links organised by category. Multiple versions exist under different addresses, and many are clones seeded with phishing sites. If you find a Hidden Wiki link, cross-check it against recent mentions in privacy forums before trusting any address listed there.

• Ahmia: A clearnet search engine (ahmia.fi) that indexes .onion sites and filters out known illegal content. You can search from the regular web, then copy the .onion address into Tor Browser. Ahmia also operates its own .onion mirror for direct access.

• DuckDuckGo's .onion version: DuckDuckGo offers an onion service that lets you search the surface web and some indexed .onion sites from within Tor Browser. It won't find every hidden service, but it's a safer entry point than most link aggregators.

• The Tor Project's own .onion site: The safest first example is the Tor Project's official onion address, which mirrors the main torproject.org site. You'll find it listed on the clearnet Tor Project homepage under 'Onion Services'. Visiting it confirms your browser is working and gives you a known-good .onion address to bookmark.

Most dark web link lists are outdated within weeks. Onion services move, shut down, or get seized by law enforcement—federal actions in November 2014 took down more than 400 .onion addresses in a single sweep, including dozens of illicit marketplaces[9]. A link that worked last month may now point to a phishing clone or a law enforcement honeypot. Never assume a directory is current, and never enter credentials or payment details on a site you reached through an unverified link.

How to verify a link before clicking:

• Check multiple sources: If you see an .onion address in The Hidden Wiki, search for the same address in Ahmia or a privacy-focused forum. Legitimate services are usually mentioned in several places; scam sites appear in only one or two lists.

• Look for HTTPS indicators: Some .onion sites use HTTPS certificates issued by recognised authorities. Tor Browser will show a padlock icon in the address bar if the certificate is valid. This doesn't guarantee the site is safe, but it confirms the operator controls the domain and hasn't been replaced by an impersonator.

• Start with read-only resources: Your first visits should be to directories, news sites, or documentation mirrors—places where you're not asked to log in, upload files, or make payments. The Tor Project's onion mirror is the clearest legal starting example; it's maintained by the same developers who built the browser, and visiting it carries no legal risk in jurisdictions where Tor itself is legal[8].

Browsing the dark web is not illegal in most countries, including the United States and the United Kingdom, but you become a criminal the moment you download illegal content or purchase prohibited goods[10][8]. In China, Russia, Iran, Belarus, and North Korea, simply connecting to Tor can result in fines or detention[8]. If you're uncertain about your jurisdiction, consult local legal resources before proceeding.

The FBI does not maintain a unified dark web strategy and instead relies on operational units and private intelligence firms to monitor .onion services[11][12]. This means law enforcement presence is uneven—some marketplaces operate for years, others are seized within weeks—but you should assume any .onion site offering illegal goods is under surveillance. Stick to legal, privacy-focused resources: the Tor Project's mirror, Ahmia's index, and directories that explicitly exclude illegal content. That approach keeps you within the law and reduces the chance you'll land on a phishing page designed to capture your credentials or infect your system.

Step 4: Verifying You're Safe and Anonymous

You've connected to Tor and visited your first .onion site, but that doesn't mean you're fully anonymous. Tor protects you by bouncing your communications through a distributed network of relays, preventing someone watching your connection from learning which sites you visit and stopping those sites from learning your physical location[4]. Each circuit is built over three relays, and every relay knows only its predecessor and successor—never the full path[5]. This design means no single point can link your real IP to the .onion address you're viewing, but it doesn't protect against every mistake you might make inside the browser.

Check your circuit before doing anything sensitive: Click the onion icon in Tor Browser's address bar to see the three relays handling your current connection[5]. You'll see a country code next to each relay name. If all three relays are in the same country or operated by the same organisation, your anonymity is weaker—though Tor's path selection algorithm tries to avoid this. You can click 'New Circuit for This Site' to force the browser to rebuild the path through different relays. Do this if you notice unusual behaviour or if the circuit feels too concentrated in one jurisdiction.

What Tor does and does not protect:

• Tor hides your IP address and location from the sites you visit and from anyone monitoring your connection[4].

• Tor does not encrypt the content of your traffic after it leaves the exit relay. If you visit an HTTP .onion site, the final relay can see what you send. HTTPS .onion sites add end-to-end encryption, so even the exit relay sees only encrypted data.

• Tor does not protect you if you log into real-world accounts. Signing into your personal email, social media, or any service tied to your identity links that session to you, even if your IP is masked. If you must access a personal account, do it in a regular browser outside Tor—never in the same session where you're visiting .onion sites.

• Tor does not stop you from downloading malware. Files from untrusted .onion pages can contain exploits that reveal your real IP or compromise your system. The Tor Project explicitly advises against torrenting over Tor, because torrent clients often bypass the browser and leak your actual IP[2]. Apply the same caution to any file download: if you don't trust the source, don't open it.

JavaScript risks and the security slider: Tor Browser blocks plugins like Flash and QuickTime by default because they can be manipulated to reveal your IP[2], but JavaScript—the scripting language that powers most modern websites—is enabled at the 'Standard' security level. JavaScript can fingerprint your browser, track mouse movements, and in rare cases exploit vulnerabilities to unmask users. To reduce this risk, open the Tor Browser menu, select 'Settings', then 'Privacy & Security', and adjust the security slider. 'Safer' disables JavaScript on HTTP sites and limits features on HTTPS sites; 'Safest' disables JavaScript entirely, which breaks many .onion services but offers the strongest protection. Start at 'Standard' for general browsing, switch to 'Safer' when visiting unfamiliar .onion addresses, and reserve 'Safest' for high-risk situations where anonymity matters more than functionality.

Common mistake—assuming Tor alone hides everything: Tor masks your IP and location, but it doesn't erase your behaviour. If you use the same username across the clearnet and dark web, post identifying details in a forum, or upload a document with metadata, you've linked your Tor session to your real identity. Law enforcement and private intelligence firms monitor .onion services[12], and they build cases by correlating behaviour across sessions—not by breaking Tor's encryption. Keep your Tor activity separate from your everyday online life: different usernames, no personal details, no file uploads that contain your name or location. One slip connects everything.

Visit check.torproject.org after every new circuit to confirm you're still routing through Tor[4]. If the page shows your real IP or warns that Tor is not in use, close all tabs, restart the browser, and check again before continuing. Anonymity is not a one-time setup—it's a habit you maintain in every session.

Legal Status and Law Enforcement Monitoring

Using Tor and browsing public .onion sites is legal in most countries, including the United States, the United Kingdom, and across the European Union. No federal law in the United States criminalises downloading Tor Browser or visiting .onion addresses[8]. Germany's Federal Office for Information Security confirms that browsing the dark web alone is not illegal[10]. Criminal liability arises from what you do once you're there—buying drugs, downloading exploitative material, or purchasing prohibited goods turns a legal browsing session into a prosecutable offence[10][8]. The tool itself is neutral; the law cares about your actions.

Does the FBI monitor the dark web? Yes, but not in the way most people imagine. A 2021 audit by the U.S. Department of Justice found that the FBI does not maintain a unified dark web strategy and instead relies on operational units to execute individual investigative efforts[11]. Federal law enforcement also contracts a network of private dark web intelligence firms to monitor .onion services, providing a 'more comprehensive map' of suspicious domains and illegal marketplaces[12]. In November 2014, federal agencies took action against more than 400 .onion addresses in a single coordinated sweep, including dozens of illicit marketplaces[9]. For ordinary users visiting legal resources—Tor Project mirrors, privacy-focused directories, or news sites—this monitoring poses no practical risk. Law enforcement targets operators and repeat buyers of illegal services, not casual browsers reading documentation.

Jurisdictions with restrictions on Tor:

• China, Russia, Iran, Belarus, and North Korea have all implemented measures to block Tor or penalise its use[8]. Simply connecting to the Tor network in these countries can result in fines or detention, regardless of what you browse.

• If you're uncertain about your jurisdiction, consult local legal resources or privacy advocacy groups before downloading Tor Browser.

Anonymity is not immunity. Tor hides your location and IP address[4], but it does not make illegal activity legal, and it does not prevent law enforcement from building cases through behaviour correlation, undercover operations, or server seizures[12]. Stay within the law, and your use of Tor remains a protected privacy choice.

Common Mistakes That Get Beginners in Trouble

Most newcomers compromise their anonymity or break the law not through sophisticated attacks, but through simple, avoidable errors. Each mistake below has been documented in law enforcement seizures, security audits, or Tor Project warnings. We've listed the consequence and the correct alternative so you can avoid them from your first session.

Why these mistakes persist: Tor protects you by routing your communications through three relays, and each relay knows only its predecessor and successor—never the full path[5]. This design hides your IP and location from the sites you visit[4], but it doesn't protect against behaviour that links your Tor session to your real identity. If you use the same username across the clearnet and dark web, post identifying details, or log into a personal account, you've connected everything—and Tor's encryption can't undo that link.

One conditional example: imagine you visit a forum on Tor, then log into your personal email in the same browser session to verify an account. The email provider now knows your Tor circuit's exit relay IP, and if law enforcement later requests logs, they can correlate the timing of your forum posts with your email login. You've handed them the link Tor was designed to hide.

Start every session by checking your circuit (click the onion icon in the address bar[5]), keep the security slider at 'Safer' or 'Safest' for unfamiliar .onion sites, and never mix Tor browsing with personal accounts. For a detailed walkthrough of safe setup and verification steps, see How to Access the Dark Web: A Step-by-Step Guide. Anonymity is a habit you maintain in every session, not a one-time configuration.

What to Do If Something Goes Wrong

Even careful users encounter technical hiccups or moments of uncertainty. Tor Browser won't always connect on the first try, .onion sites can time out without explanation, and a misclick on an unfamiliar link can leave you wondering whether you've compromised your system. Most problems have straightforward fixes, and knowing when to stop and reset gives you more control than pushing forward blindly.

Tor won't connect: If the browser displays 'Tor is not ready' or hangs on the connection screen, your network may be blocking Tor traffic, or the initial relay selection failed. Close the browser completely, restart it, and wait two minutes—the network needs time to build a circuit through three relays[5]. If the problem persists, open 'Connection Settings' from the startup screen and enable 'Use a bridge'. Bridges are unlisted relays that help you connect when standard entry points are blocked. Select 'obfs4' from the built-in options and try again. In countries that actively restrict Tor[8], bridges are often the only way to establish a connection.

A .onion site won't load: Onion services go offline frequently—they're run by volunteers, not commercial hosting providers. If a page times out, click the onion icon in the address bar and select 'New Circuit for this Site'. This forces Tor to rebuild the path through different relays[5], which often resolves routing issues. Wait thirty seconds and refresh. If the site still doesn't load, it may be permanently offline. Check the address against a directory like Ahmia or the Hidden Wiki to confirm it's still listed. Don't keep retrying the same broken link for more than five minutes—you're wasting time on a dead service.

You clicked a suspicious link: If you landed on a page that looked malicious—unexpected pop-ups, requests to download a file, or a site asking for personal information—close the tab immediately. Open the Tor Browser menu, go to 'History', and select 'Clear Recent History'. Choose 'Everything' from the time range, tick all boxes, and confirm. Then click the onion icon and select 'New Identity'. This clears all cookies, cache, and session data, then restarts Tor with a fresh circuit[4][5]. Visit check.torproject.org to confirm you're still routing through Tor before continuing. If the suspicious page triggered a download, do not open the file. Delete it from your Downloads folder and run a full antivirus scan on your system outside Tor Browser.

You suspect malware: If your computer behaves strangely after a Tor session—unexpected slowdowns, new programs you didn't install, or your regular browser showing unfamiliar toolbars—disconnect from the internet and run a complete scan with updated antivirus software. Tor Browser blocks plugins that can reveal your IP[2], but it doesn't stop you from downloading malicious files if you choose to open them. If the scan finds threats, follow your antivirus software's removal instructions, then change passwords for any accounts you accessed on that machine (do this in a regular browser after the malware is removed, never in Tor). If you're unsure whether the infection is cleared, consult a professional technician before reconnecting to Tor or logging into sensitive accounts.

If you accidentally exposed personal information: Imagine you posted a comment on a .onion forum and included a detail that could identify you—your city, workplace, or a username you use elsewhere. You can't delete what others have already archived, but you can limit further exposure. Stop using that Tor session immediately. Close the browser, clear all history as described above, and do not return to that forum under the same identity. If you logged into a personal account during the same session, assume that session is now linked to your real identity. Create new, unconnected usernames for future Tor activity, and never reuse credentials across the clearnet and dark web. Law enforcement and private intelligence firms monitor .onion services by correlating behaviour across sessions[12]—one identifying detail can connect everything.

When to stop and seek help: If Tor won't connect after trying bridges, if a .onion site repeatedly triggers security warnings, or if you suspect your system is compromised and antivirus scans don't resolve it, stop browsing and consult the Tor Project's official support channels or a trusted technician. Pushing forward when something feels wrong increases risk without solving the underlying problem. Anonymity depends on the network functioning correctly[4]—if you can't verify that it is, don't assume it will protect you.

What to Do If It Didn’t Work

You’ve followed the setup steps, but Tor won’t connect, a .onion link won’t load, or something feels off. Most failures have a specific cause you can check in under ten minutes. Work through the problems below in order—each one lists the likely reason and the concrete fix.

Tor Browser won’t start after installation

Cause: You downloaded the installer from an unofficial mirror, or your operating system blocked the file because it didn’t recognize the publisher.

Fix: Delete the file you downloaded and get a fresh copy only from torproject.org. On Windows, right-click the installer, select ‘Properties’, and check ‘Unblock’ if it appears. On macOS, open ‘System Settings’ → ‘Privacy & Security’ and click ‘Open Anyway’ for the Tor installer. If the file came from anywhere other than torproject.org, assume it’s unsafe and start over[3][1].

Tor connects, but every .onion site times out

Cause: Your exit relay is overloaded, or the specific onion service you’re trying to reach is offline. Onion services run on volunteer infrastructure, so individual sites disappear without warning.

Fix: Click the onion icon in the address bar and choose ‘New Circuit for this Site’. Wait 30 seconds, then refresh once. If the page still fails, check the address against a directory like Ahmia to confirm it’s currently listed. Don’t retry the same link for more than five minutes—you’re refreshing a dead service.

You see a warning that JavaScript is enabled

Cause: You changed the security level to ‘Standard’, or a site prompted you to enable scripts and you accepted. JavaScript can be used to deanonymize Tor users through browser fingerprinting or exploit delivery.

Fix: Open the shield icon next to the address bar and set the security level to ‘Safest’. This disables JavaScript on all sites, including .onion pages. If a specific legal site won’t render without scripts, ask yourself whether you trust that site enough to lower the setting for that one tab only. Most directories and mirrors work fine with scripts off.

You can’t find the .onion address you were given

Cause: The link is mistyped, or the service moved to a new address. Onion addresses are long strings of letters and numbers with no meaningful words, so one wrong character leads nowhere.

Fix: Copy the full address from a directory listing rather than typing it by hand. Compare the first and last four characters against the source you’re using. If the address came from a forum post or chat message, verify it through a second independent directory before visiting. A link that only appears in one place may be a phishing attempt.

You’re on mobile and nothing works the way the desktop guide says

Cause: iOS does not have an official Tor Browser. The Tor Project’s browser is available for Android, Windows, macOS, and Linux only. Apps on the iOS App Store that claim to be ‘Tor Browser’ are third-party and not verified by the Tor Project.

Fix: On Android, install Tor Browser from the Google Play Store and check that the developer is ‘The Tor Project’. On iOS, use the official Onion Browser app if you need onion access, but understand that it does not offer the same fingerprinting protections as Tor Browser on desktop. For a first session where you’re learning the basics, use a computer—mobile adds limitations you don’t need while you’re still checking your circuit and security level.

You’re not sure whether what you’re about to click is legal

Cause: The dark web hosts both legal privacy resources and illegal marketplaces, and the difference isn’t always obvious from a link name. In the UK, accessing illegal content or purchasing prohibited goods is an offense regardless of whether you use Tor.

Fix: Before clicking, ask one question: would this action be legal if you did it in a regular browser without Tor? If the answer is no, don’t do it through Tor either. Tor hides your IP address and location[4], but it does not change the law, and law enforcement builds cases through behaviour correlation and undercover operations[12]. If you’re uncertain about a specific site or activity, close the tab and consult a UK legal resource or privacy advocacy group before proceeding.

If none of these fixes resolve your problem, stop and reset: close Tor Browser completely, clear all history, and start a fresh session with the security level at ‘Safest’. A failed session where you verify each step is safer than a working session where you’ve skipped the checks.

Conclusions

• Finding the dark web starts with one tool: Tor Browser from torproject.org. Any other download source is a risk you don’t need to take.

• Verify your connection before visiting anything. Open check.torproject.org and confirm the page says you’re using Tor—if it doesn’t, stop and fix the connection first.

• Use directories like Ahmia or the Hidden Wiki to find .onion addresses. Typing links by hand or trusting a single forum post leads to dead ends or phishing pages.

• Keep the security level at ‘Safest’ for your first sessions. JavaScript off is the default that protects you from fingerprinting and exploit delivery.

• If something feels wrong—a site won’t load, a warning appears, or you’re unsure whether a link is legal—close the tab and reset. A failed session where you verify each step is safer than a working one where you skipped checks.

Start with the step-by-step walkthrough in How to Access the Dark Web: A Step-by-Step Guide to set up Tor and check your first circuit correctly.