What is the Dark Web? An In-Depth Explanation

What Is the Dark Web? A Clear Definition

The dark web is a deliberately hidden section of the internet that requires specific software—most commonly Tor Browser—to access[7][2]. Unlike the websites you find through Google, dark web sites do not appear in search engine results and use '.onion' addresses instead of standard domain names[1]. The defining feature is anonymity: both the people who run these sites and the people who visit them can hide their real location and identity[1][2].

This anonymity comes from onion routing, a technique developed by the U.S. Naval Research Laboratory in 2002[8]. When you connect through Tor, your traffic passes through at least three volunteer-operated relays, each adding or removing a layer of encryption[9]. No single relay knows both where you are and where you are going, which makes tracing very difficult.

The dark web is not the same as the deep web. The deep web includes everything not indexed by search engines—your Gmail inbox, online banking, private social media posts—and makes up roughly 90% of web content[3]. The dark web is a smaller, intentionally hidden portion of the deep web, estimated at around 6% of total web content[3][4]. While the deep web requires only a password or login, the dark web requires specialized software like Tor, I2P, or Freenet[8][4][5].

Accessing the dark web itself is legal in the UK and the US; running a Tor relay is also legal under U.S. law[6]. The technology was created to protect privacy and human rights, and many journalists, activists, and whistleblowers rely on it[7]. Criminality is not the defining feature—anonymity is—but that same anonymity does enable illegal marketplaces alongside legitimate privacy tools.

For a deeper look at how '.onion' addresses work and what they mean for security, see Dark Web Onion Links: What You Need to Know.

Surface Web, Deep Web, and Dark Web: The Real Differences

The internet has three distinct layers, and most people spend their entire online life in just one of them. Understanding the difference matters because each layer works differently, requires different tools, and carries different expectations of privacy and accessibility.

The surface web is everything you can find through Google, Bing, or any other search engine—news sites, Wikipedia, online shops, public blogs. This layer is indexed, which means search engines can catalogue and rank it. It accounts for only about 4% of all web content[3]. When you type a query into a search engine and click a result, you are on the surface web.

The deep web is far larger—roughly 90% of web content—but it is not hidden in any sinister sense[3]. It includes anything a search engine cannot or should not index: your email inbox, online banking portal, medical records, subscription paywalls, private social media posts, and company intranets[3]. You access the deep web every day with a standard browser and a password. There is no encryption layer or special software required; the content is simply behind a login screen or excluded from search engine crawlers by the site operator.

The dark web is a small, intentionally hidden subset of the deep web, making up around 6% of total web content[3][4]. It requires specialized software—most commonly Tor, but also I2P or Freenet—to access[8][4][5]. Dark web sites do not use standard domain names; instead, they use '.onion' addresses that cannot be opened in a regular browser[1]. Both the people who run these sites and the people who visit them can hide their real location and identity[1][2].

Here is a simple comparison:

Think of it as an iceberg: the surface web is the visible tip, the deep web is the vast bulk below the waterline, and the dark web is a small, deliberately concealed chamber within that bulk. The deep web is not dangerous—it is just private. The dark web is not automatically illegal—it is just anonymous.

For more detail on how '.onion' addresses function and what they mean for your security, see Dark Web Onion Links: What You Need to Know.

How the Dark Web Works: Onion Routing and Anonymity

When you visit a dark web site, your connection does not travel directly from your computer to the server hosting that site. Instead, it passes through at least three volunteer-operated relays in a process called onion routing[9]. Each relay knows only the relay immediately before it and the relay immediately after it, but never both your location and your final destination[9]. This design makes it extremely difficult for anyone—including the relays themselves—to trace the full path of your traffic.

Here is how the process works in practice:

1. You open Tor Browser and request a .onion site. Your computer builds a circuit through three Tor relays: an entry relay, a middle relay, and an exit relay (or, for .onion sites, a rendezvous point)[9].

2. Your request is encrypted in multiple layers. Before your traffic leaves your computer, Tor wraps it in three layers of encryption—one for each relay in the circuit[9].

3. Each relay removes one layer of encryption. The entry relay peels off the first layer and sees only the middle relay's address. The middle relay removes the second layer and sees only the exit relay's address. The exit relay (or rendezvous point) removes the final layer and forwards your request to the destination[9].

4. The reply travels back through the same circuit. Each relay adds a layer of encryption on the way back, so only your computer can read the final response[9].

This layered encryption is why the system is called 'onion routing'—each relay peels away one layer, just as you would peel an onion. The result is that no single relay ever knows both who you are and what you are accessing[9].

Tor is the dominant network for accessing the dark web, developed by the Tor Project, a US nonprofit that advances human rights and defends privacy online[7]. The technology was originally created by the U.S. Naval Research Laboratory in 2002 and released as The Onion Routing project[8]. Two other networks—I2P (Invisible Internet Project) and Freenet—also provide access to dark web content, though they are far less widely used[8][5]. Each network operates on similar principles but with different architectures and trade-offs in speed, anonymity, and ease of use.

Running a Tor relay, including an exit relay that allows people to send and receive traffic anonymously, is legal under U.S. law[6]. However, law enforcement sometimes misattributes illegal traffic to relay operators; in 2016, Seattle police mistakenly raided the home of a privacy activist running a Tor exit relay[6]. The confusion arises because exit relays are the last hop before traffic reaches the surface web, making them appear as the source of the request.

Onion routing hides both your location and the location of the site you visit, but it does not make you invisible. Your internet service provider can see that you are using Tor, though not what you are accessing. The entry relay can see your real IP address but not your destination. The exit relay (or rendezvous point) can see your destination but not your real IP address. Only by compromising all three relays in your circuit could an attacker link you to your activity—a scenario that is difficult but not impossible.

For a detailed look at how .onion addresses work and what they mean for your security, see Dark Web Onion Links: What You Need to Know.

What Is Actually on the Dark Web?

The dark web hosts both legal privacy tools and illegal marketplaces, and understanding the full picture matters if you want an honest view rather than a sensational one. The same anonymity that protects journalists and whistleblowers also shields criminals, and both types of content exist side by side on the same networks.

Legal and legitimate content includes privacy-focused email services, whistleblower submission platforms, forums for activists in repressive countries, mirrors of censored news sites, and academic archives. SecureDrop, for example, is an open-source whistleblower submission system used by major news organisations to receive documents anonymously[2]. Journalists and human rights workers rely on .onion sites to communicate securely when surveillance or censorship makes the surface web unsafe[1][7]. Some libraries and academic institutions also maintain dark web mirrors of their collections to ensure access in countries where their main sites are blocked.

Illegal content is also widespread. Marketplaces for drugs, stolen credit card data, counterfeit documents, hacking tools, and worse have operated on the dark web for over a decade. Silk Road, launched in 2011, was the first major dark web marketplace and facilitated millions of pounds in drug sales before the FBI shut it down in 2013. AlphaBay, which succeeded Silk Road, became even larger before law enforcement took it offline in 2017. These takedowns are documented and verifiable, but new marketplaces continue to appear.

You will also find forums trading stolen data, ransomware toolkits, and services offering illegal hacking. The anonymity that makes the dark web valuable for privacy also makes it difficult to police, and criminals exploit that gap.

The dark web is not a single category of content—it is a technology that enables both protection and harm. Most .onion sites are small, niche forums or personal projects; the illegal marketplaces attract attention, but they do not represent the majority of dark web activity. If you choose to explore, you will encounter both, and distinguishing between them requires the same caution you would apply to any unfamiliar corner of the internet.

For a broader look at the range of content and how to navigate it safely, see What Can You Find on the Dark Web?.

Is the Dark Web Illegal? Legal Status and Common Misconceptions

Using Tor or visiting the dark web is legal in most countries, including the United States and the United Kingdom. The Tor Project itself is a registered 501(c)(3) US nonprofit organisation that advances human rights and defends privacy online[7]. Running a Tor relay—even an exit relay that allows people to send and receive traffic anonymously—is legal under U.S. law, and federal law 47 U.S.C. § 230 (Section 230) provides legal immunity for online intermediaries that host or republish speech[6]. Simply downloading Tor Browser and connecting to the network does not break any law.

What determines legality is what you do once you are there. Accessing a whistleblower platform or reading a censored news site is legal. Buying drugs, stolen data, or counterfeit documents is not, and the same laws that apply on the surface web apply on the dark web. Anonymity does not grant immunity, and law enforcement agencies have successfully prosecuted dark web criminals by exploiting operational security failures, infiltrating marketplaces, and tracing cryptocurrency transactions.

Common Misconceptions

'The dark web is only for criminals.' This is false. Journalists, activists, whistleblowers, and ordinary people in repressive countries use the dark web to communicate securely and access information without surveillance[1][7]. SecureDrop, a widely used whistleblower submission system, operates as a .onion service and is used by major news organisations[2]. The technology was originally created by the U.S. Naval Research Laboratory as a tool for anonymously communicating online[8]. Illegal marketplaces exist, but they do not represent the majority of dark web activity.

'Everything on the dark web is untraceable.' This is also false. Tor hides your location and the location of the site you visit, but operational security failures—reusing usernames, logging in to personal accounts, or mishandling cryptocurrency—have led to numerous arrests. In 2016, Seattle police mistakenly raided the home of a privacy activist operating a Tor exit relay, illustrating how law enforcement sometimes misattributes illegal traffic to relay operators[6]. Criminals have been caught because they made mistakes, not because Tor itself failed.

'The dark web is huge.' The dark web is actually quite small. It makes up around 6% of total web content, compared to 90% for the deep web and 4% for the surface web[3]. Most .onion sites are small forums, personal projects, or niche services. The illegal marketplaces attract attention, but they are a fraction of the dark web, which is itself a fraction of the internet.

Your internet service provider can see that you are using Tor, though not what you are accessing. Tor does not make you invisible; it makes tracing your activity difficult, but not impossible. If you visit the dark web, you are not breaking the law—but you are responsible for what you do there.

How People Access the Dark Web Safely

Accessing the dark web requires Tor Browser, which you download from the official Tor Project website[7]. The browser is free, open-source, and available for Windows, macOS, Linux, and Android. You install it like any other application, open it, and connect to the Tor network—no special configuration is needed for basic access. Once connected, you can visit .onion sites by typing their addresses directly into the browser's address bar[1][2].

Here is what you need to know before you start:

• Download only from the official source. Fake versions of Tor Browser exist, and some contain malware. The legitimate version comes from the Tor Project, a 501(c)(3) US nonprofit that develops the software[7]. Verify the URL before you download.

• Use a VPN for additional privacy. A VPN hides the fact that you are using Tor from your internet service provider, though it does not make you anonymous. Your ISP can see that you are connecting to Tor without a VPN; with a VPN, it sees only that you are connecting to the VPN server. The Tor network itself still provides the anonymity—the VPN is an extra layer, not a replacement.

• Never download files from .onion sites. Files can contain malware or tracking code that compromises your anonymity. If you must download something, do so on a separate, isolated computer that is not connected to your personal accounts.

• Never share personal information. Do not log in to your email, social media, or any account tied to your real identity while using Tor. A single login can link your anonymous session to your real-world identity.

• Verify .onion links through trusted directories. There is no central index of .onion sites, and many addresses are scams or phishing attempts. Trusted directories and forums maintain lists of verified links, but even these require caution. For more on how .onion addresses work and what they mean for your security, see Dark Web Onion Links: What You Need to Know.

Law enforcement monitors certain dark web spaces, particularly illegal marketplaces and forums trading stolen data. Tor hides your location, but operational security failures—reusing usernames, mishandling cryptocurrency, or visiting the same site from both Tor and the surface web—have led to arrests. Anonymity is not the same as invincibility, and you remain responsible for your actions.

Tor Browser is a tool for privacy, not a guarantee of safety. If you visit the dark web, treat every link, file, and interaction as potentially hostile until you have verified otherwise.

Typical Mistakes and How to Avoid Them

People new to the dark web often make predictable errors that compromise their privacy, expose them to scams, or lead them to misunderstand what the technology actually does. Here are four practical mistakes and how to avoid each one.

Confusing the Deep Web with the Dark Web

Many people panic when they hear that their personal data is 'on the dark web', believing that the dark web is a vast criminal database containing everyone's private information. This confusion stems from mixing up the deep web and the dark web. The deep web is everything not indexed by general-purpose search engines—social media posts behind privacy controls, emails, banking content, and anything a website operator would rather search engines not focus on[3]. It makes up around 90% of web content[3]. The dark web is a much smaller subset—around 6% of total web content—that requires specialised software like Tor to access[3][4].

Your email inbox is on the deep web, not the dark web. Your medical records are on the deep web. When a data breach occurs, stolen credentials may be sold on dark web marketplaces, but that does not mean your everyday online accounts are automatically 'on the dark web'. If you want to check whether your credentials have been exposed in a known breach, use a verifiable service like Have I Been Pwned, which searches public breach databases—not the dark web itself.

Assuming Tor Alone Makes You Anonymous

Tor hides your location and the location of the site you visit, but it does not make you invisible if you leak identifying information through your behaviour. Your browser settings, plugins, or personal habits can undo Tor's protections. For example, logging in to your personal email or social media account while using Tor links your anonymous session to your real identity. Enabling browser plugins like Flash or JavaScript on untrusted sites can expose your real IP address. Reusing the same username across Tor and the surface web allows anyone to connect your anonymous activity to your public profile.

The Tor Project documentation[7] explains that Tor Browser is configured to block many of these leaks by default, but you can still override those protections. If you maximise the browser window, your screen resolution becomes a fingerprint. If you download a file and open it outside Tor, it may contain tracking code that contacts a server with your real IP address. Anonymity depends on both the technology and your operational security—Tor provides the former, but you are responsible for the latter.

Clicking Unverified .onion Links

There is no central directory of .onion sites, and many addresses you encounter are phishing pages, honeypots, or scams. A .onion link that claims to offer a legitimate service may instead steal your credentials, install malware, or be operated by law enforcement. Because .onion addresses are long strings of random characters[1][2], you cannot tell from the URL alone whether a site is trustworthy.

Before you visit any .onion site, verify the address through a trusted source—an official announcement from the organisation that runs the service, a reputable directory maintained by privacy advocates, or a forum with a track record of vetting links. Even then, treat every link as potentially hostile until you have confirmed otherwise. Do not enter personal information, download files, or make payments unless you have independently verified the site's legitimacy. For more on how .onion addresses work and what they mean for your security, see Dark Web Onion Links: What You Need to Know.

Believing Dark Web Marketplaces Are Safe Because They Use Escrow

Some people assume that dark web marketplaces are trustworthy because they offer escrow services—holding funds until a buyer confirms receipt of goods. Escrow reduces the risk of individual scams, but it does not protect you from exit scams, where marketplace operators disappear with all escrowed funds, or from law enforcement takedowns. AlphaBay, one of the largest dark web marketplaces, was seized by law enforcement in 2017, and users lost access to their funds and their anonymity if they had made operational security mistakes. Silk Road was shut down by the FBI in 2013, and its founder was sentenced to life in prison.

Court records and security research document these takedowns and the methods law enforcement used to identify users—tracing cryptocurrency transactions, exploiting operational security failures, and infiltrating marketplace staff. Escrow protects you from a dishonest seller, but it does not protect you from the marketplace itself or from the legal consequences of illegal activity. If you choose to use a dark web marketplace, understand that you are taking a legal and financial risk, and that anonymity is not the same as immunity.

What Is Dark Web Monitoring and Why It Matters

Dark web monitoring services scan known breach data dumps and paste sites for exposed credentials—not the entire dark web. When a company suffers a data breach, stolen email addresses, passwords, and other personal information often end up posted on dark web forums or sold on marketplaces. Monitoring services check these documented breach databases to see whether your information has appeared. They do not crawl every .onion site or intercept live criminal activity; they search collections of already-leaked data.

Here is what these services can and cannot do:

• They alert you to known breaches. If your email and password appear in a public dump, the service notifies you so you can change your credentials before someone uses them.

• They do not prevent breaches. Monitoring tells you after your data has been exposed, not before. It is a detection tool, not a protection tool.

• They do not monitor the entire dark web. The dark web is not a single searchable database. Monitoring services focus on paste sites, forums, and marketplaces where stolen data is commonly posted, but they cannot access private communication channels or encrypted file-sharing networks.

• They cannot remove your data. Once your credentials are leaked, they remain in circulation. Monitoring services can tell you where your information has appeared, but they cannot delete it from the sites that host it.

You do not need a paid service to check whether your credentials have been exposed. Have I Been Pwned is a free, verifiable breach database that lets you search your email address against hundreds of documented breaches. It does not scan the dark web in real time—it compiles data from publicly disclosed breaches and allows you to check whether your information is included. You enter your email, and the site tells you which breaches have included that address. If your credentials appear, you change your password immediately on every site where you used that combination.

Dark web monitoring is useful if you want automated alerts, but it is not a substitute for strong, unique passwords and two-factor authentication. Your best protection is to assume that any password you reuse across multiple sites will eventually be compromised, and to act accordingly.

Frequently Asked Questions About the Dark Web

What's in a dark web?

The dark web contains websites and services that require specialised software like Tor Browser to access[7]. You will find privacy tools such as SecureDrop, which journalists use to receive anonymous tips, alongside illegal marketplaces selling drugs, stolen data, and counterfeit documents. Forums discussing politics, technology, and whistleblowing exist next to spaces hosting illegal content. The dark web is not a single category—it reflects the full range of human activity, both legal and illegal, in an environment designed for anonymity[1].

Is Tor legal or illegal in the US?

Tor is legal in the United States. The Tor Project is a registered 501(c)(3) nonprofit organisation[7], and running a Tor relay—including an exit relay that allows people to anonymously send and receive traffic—is legal under U.S. law[6]. Federal law 47 U.S.C. § 230 provides legal immunity for online intermediaries that host or republish speech, which the Electronic Frontier Foundation cites as relevant protection for Tor relay operators[6]. Tor was originally created by the U.S. Naval Research Laboratory in 2002 as a tool for anonymously communicating online[8]. Using Tor to access the dark web is legal; what you do once you are there determines whether you break the law.

Does the dark web still exist?

Yes. The dark web consists mostly of services on the Tor network, along with smaller networks like I2P and Freenet[5]. It cannot be found using traditional search engines or visited with traditional web browsers[5]. Onion services—websites accessible only through Tor—continue to operate, offering location hiding, end-to-end authentication, and end-to-end encryption[2]. The dark web does not use the Domain Name System; instead it uses Tor's hidden service names delegated from .onion, a special-use top-level domain[1]. Law enforcement has shut down individual marketplaces, but the infrastructure and networks remain active.

What is the deep web?

The deep web is everything that isn't indexed by general-purpose search engines[3]. This includes social media posts hidden behind privacy controls, emails, banking content, and anything a website operator would rather search engines not focus on. The deep web makes up around 90% of web content worldwide[3], while the surface web—pages indexed by Google, Bing, and similar engines—makes up only about 4%[3]. Your email inbox, medical records, and online banking portal are all part of the deep web. The deep web is not the same as the dark web, which is a much smaller subset requiring specialised software to access[4].

Is the dark web real?

Yes. The dark web is a real part of the internet that relies on anonymised networks like Tor and I2P[8]. It uses encryption and onion routing to protect users from surveillance and traceability[1]. A Tor circuit is built over a sequence of relays—typically three—and every relay in the circuit knows only its predecessor and successor, but no other relays in the circuit[9]. Each relay removes a single layer of encryption before passing traffic on[9]. The dark web is not a myth or a marketing term—it is a functioning network with documented infrastructure, legal uses, and illegal activity.

What is the dark web used for?

The dark web is used for both legal and illegal purposes. Journalists and activists use it to communicate securely in countries with government surveillance. Whistleblowers use platforms like SecureDrop to share information anonymously. Privacy advocates use Tor to avoid tracking by advertisers and data brokers. At the same time, illegal marketplaces sell drugs, stolen credentials, and counterfeit documents. Forums trade hacking tools and discuss illegal activity. The dark web is a tool—what happens there depends on who is using it and why. For a detailed breakdown of what you can find, see What Can You Find on the Dark Web?.

Common Mistakes and Misconceptions

Confusing the deep web with the dark web

People often use ‘deep web’ and ‘dark web’ as if they mean the same thing, usually because both sound hidden and technical. The deep web is everything that isn’t indexed by general-purpose search engines—your email inbox, online banking portal, and social media posts behind privacy controls are all deep web[3]. The dark web is a much smaller subset of the deep web that requires specialised software like Tor Browser to access[4]. If you can reach a page with a normal browser and a login, you are on the deep web, not the dark web.

You can check the distinction yourself without any tools: the surface web is roughly 4% of web content, the deep web around 90%, and the dark web about 6%[3]. Those numbers show why calling everything ‘dark web’ is misleading—most of what you cannot search on Google is just private or unindexed, not criminal or anonymous. The dark web does not use the Domain Name System; it uses .onion addresses that only resolve inside Tor[1].

Assuming Tor makes you completely anonymous

Tor is often presented as a guarantee of anonymity, which leads people to treat it as a shield against all tracking. A Tor circuit is built over a sequence of relays—typically three—and every relay knows only its predecessor and successor[9]. Each relay removes a single layer of encryption before passing traffic on[9]. That design hides your IP address from the destination site, but it does not hide everything about you.

Browser fingerprinting, maximised windows, and downloaded files opened outside Tor can reveal identifying information. Tor Browser includes specific protections against these leaks, but they only work if you follow its guidance: never maximise the window, never open downloaded documents while still connected, and avoid installing extensions. Anonymity on Tor is a practice, not a property of the software.

Believing the dark web is only for criminals

Media coverage tends to focus on marketplaces and arrests, which creates the impression that everything on the dark web is illegal. The Tor Project, which develops the most widely used dark web access software, is a 501(c)(3) US nonprofit organisation advancing human rights and defending privacy online[7]. Tor was originally created by the U.S. Naval Research Laboratory in 2002 as a tool for anonymously communicating online[8]. Journalists, activists, and whistleblowers use onion services for legitimate purposes, including SecureDrop for anonymous tips[2].

Running a Tor relay—including an exit relay that allows people to anonymously send and receive traffic—is legal under U.S. law[6]. Federal law 47 U.S.C. § 230 provides legal immunity for online intermediaries that host or republish speech, which the Electronic Frontier Foundation cites as relevant protection for Tor relay operators[6]. The dark web is infrastructure; what you do on it determines legality, not the network itself.

Thinking the dark web is a single searchable place

People imagine the dark web as one giant database you can browse like Google. The dark web consists mostly of services on the Tor network but also includes other networks like I2P, Freenet, and small peer-to-peer ones[5]. There is no central directory, and .onion addresses are random character strings that cannot be found using traditional search engines[5]. You cannot type a query into a normal search engine and get dark web results.

This fragmentation has practical consequences. Dark web monitoring services do not scan the entire dark web—they check known breach data dumps and paste sites for exposed credentials. They cannot access private communication channels or encrypted file-sharing networks. When a service claims to monitor ‘the dark web’, it means it monitors specific, documented locations where stolen data commonly appears, not the whole network.

Assuming dark web monitoring prevents breaches

Monitoring services are marketed as proactive protection, which leads people to believe they will stop their data from being stolen. Monitoring tells you after your data has been exposed, not before. It is a detection tool, not a protection tool. Once your credentials are leaked, they remain in circulation; monitoring services cannot delete them from the sites that host them.

You do not need a paid service to check whether your credentials have been exposed. Have I Been Pwned is a free, verifiable breach database that lets you search your email address against hundreds of documented breaches. It compiles data from publicly disclosed breaches and allows you to check whether your information is included. If your credentials appear, you change your password immediately on every site where you used that combination.

Confusing legal Tor use with legal immunity for illegal activity

Some people assume that because Tor is legal, anything they do on the dark web is also legal. Tor is legal in the United States, and running a relay is legal under U.S. law[6]. That legality covers the tool and the infrastructure, not the actions taken through it. Using Tor to access the dark web is legal; what you do once you are there determines whether you break the law.

Law enforcement has shut down individual marketplaces and prosecuted users, as documented in court records. In 2016, Seattle police mistakenly raided the home of a privacy activist operating a Tor exit relay, illustrating how law enforcement sometimes misattributes illegal traffic to Tor relay operators[6]. That case shows both that legal relay operation can attract suspicion and that legal infrastructure does not shield illegal activity from investigation.

Key Takeaways

• The dark web is a small, software-specific subset of the deep web, not a single searchable place. You reach it through Tor or I2P, and most of what you cannot Google is simply private or unindexed content.

• Tor is legal infrastructure, but it does not make you anonymous by itself. Anonymity depends on how you use the browser: never maximize the window, never open downloaded files outside Tor, and avoid installing extensions.

• Dark web monitoring detects leaked credentials after exposure, not before. Treat it as a notification tool, not protection; strong unique passwords and two-factor authentication do more to prevent harm.

• Marketplace escrow protects against individual seller scams, not against exit scams or law enforcement seizures. Funds lost to a marketplace operator are rarely recoverable.

• The legality of your activity depends on what you do, not on the network you use. Legal Tor use does not grant immunity for illegal actions.

Start by checking whether your email address appears in known breaches using the free Have I Been Pwned database. For a clear breakdown of what the term actually covers, see Dark Web Definition: What You Should Know.