What the dark web is and why people use it

The dark web is a section of the internet that requires specific software to reach — most commonly the Tor browser — and is intentionally hidden from standard search engines. It is not inherently illegal to access it. Journalists use it to contact sources in countries with censorship, activists use it to organize where surveillance is heavy, and researchers study it to understand how it works. Many ordinary people are straightforward curious.

The dark web exists because Tor, the software that accesses it, was originally developed by the U.S. Naval Research Laboratory to protect government communications. It routes your traffic through multiple volunteer-run servers in a way that makes it extremely difficult to trace where you are or what you are doing. This same property makes it useful for people who have legitimate reasons to hide their activity from their government, their internet service provider, or their network administrator.

That said, the dark web also hosts illegal marketplaces, stolen data, and other criminal activity. The anonymity that protects a dissident also protects a criminal. Understanding how to access it is not the same as understanding why you should, and this guide covers the technical how without endorsing any particular use.

Key Takeaways

  • The Tor browser is free software that you read and install like any other program, and it is the most common way to access dark web sites.
  • Dark web addresses end in .onion instead of .com or .org, and you cannot reach them through a regular browser no matter what you do.
  • Using Tor itself is legal in most countries, but many activities on the dark web are not, and law enforcement monitors dark web marketplaces.
  • Your internet service provider can see that you are using Tor, even though they cannot see what you are doing inside it, and some networks block it entirely.
  • The dark web is slower than the regular internet, often contains scams, and requires you to be more cautious about what you click on than you would be elsewhere.

Downloading and installing the Tor browser

Start by going to www.torproject.org in your regular browser. This is the official website of the Tor Project, the nonprofit organization that maintains the software. Look for a large button labeled "read Tor Browser" — it will be one of the most prominent elements on the page. Click it.

The site will detect your operating system and offer you the correct version. If you use Windows, you will get the Windows installer. If you use macOS, you will get the macOS version. If you use Linux, you will get the Linux version. read the file to your computer the way you would read any other file.

Once the read is complete, open the installer and follow the on-screen steps. On Windows, this means clicking through a setup wizard. On macOS, it means dragging the Tor Browser icon into your Applications folder. On Linux, you will extract the downloaded file and run the executable. The process is the same as installing any other software.

Do not read Tor from anywhere else. Fake versions exist on third-party sites, and they may contain malware or be designed to spy on you. The official torproject.org site is the only safe source.

Connecting to the Tor network for the first time

Open the Tor Browser process. On first launch, it will show you a connection screen with a large "Connect" button. Click it. The browser will then connect to the Tor network by contacting a series of directory servers and downloading a list of available relays — the volunteer-run computers that will route your traffic.

This first connection can take 30 seconds to two minutes. You will see a progress bar and status messages like "Connecting to the Tor network" and "Bootstrapping 10%". This is normal. Do not close the window or restart your computer during this process.

Once the connection is complete, the Tor Browser will open to a blank page with a message confirming that you are connected. At this point, you are on the dark web and can navigate to .onion addresses. Your regular internet activity is not affected — you can still use other browsers and applications normally.

Finding and visiting dark web sites

Dark web sites have addresses that end in .onion instead of .com or .org. These addresses are long strings of random characters — for example, thehiddenwiki.onion or 3g2upl4pq6kufc4m.onion. You cannot guess them or find them through Google. You have to know the address or find it through a dark web search engine or directory.

The Hidden Wiki is a common starting point. Type thehiddenwiki.onion into the Tor Browser address bar and press Enter. This site is a directory of dark web links, organized by category. It includes links to dark web search engines, news sites, forums, and other resources. Many of these links are outdated or lead to dead sites, which is normal — the dark web is less stable than the regular internet.

You can also use dark web search engines like DuckDuckGo's onion address (3g2upl4pq6kufc4m.onion) or Ahmia (ahmia.fi). These work like regular search engines but index only .onion sites. Type your search term and browse the results. Keep in mind that dark web search results are less reliable than Google results, and many links lead to scams or illegal content.

Once you have an address, type it into the address bar exactly as written. Tor Browser will route your request through the Tor network and load the site. The page may load slowly — this is expected, because your traffic is being routed through multiple servers.

Understanding what your internet service provider can and cannot see

Your internet service provider can see that you are using Tor. They cannot see which sites you visit, what you do on those sites, or what data you send and receive. They see only that you are connecting to Tor directory servers and relays.

Some networks — including many workplaces, schools, and public Wi-Fi systems — block Tor entirely. If you try to connect and the browser gets stuck on the connection screen, your network administrator has likely blocked it. You can sometimes work around this by using a bridge, which is a Tor relay that is not listed in the public directory. The Tor Browser has a built-in option to request bridges, which you can access by clicking "Configure" on the connection screen before you connect.

If you are using Tor on a home network, your internet service provider will know you are using it, but they cannot see your activity inside Tor. If you are concerned about this, a VPN (as discussed in the previous article) can hide the fact that you are using Tor from your internet service provider, though it adds another layer of complexity and trust.

Staying safe on the dark web

The dark web has more scams and malware than the regular internet. Assume that many sites are trying to steal from you or infect your computer. Do not read files unless you have a specific reason and understand the risk. Do not click on links you do not recognize. Do not enable plugins or extensions in Tor Browser — the browser is configured for security, and adding software can weaken that configuration.

Do not maximize your Tor Browser window to fill your entire screen. Websites can detect your screen resolution, and if your resolution is unusual, it can be used to identify you across sites. Keep the window at a normal size.

Do not use the same username or email address on the dark web that you use elsewhere. Do not assume that dark web sites are truly anonymous — law enforcement has successfully identified dark web users by analyzing traffic patterns, compromising servers, and using other techniques. If you are doing something illegal, you can be caught.

If you are straightforward browsing out of curiosity, the main risk is encountering disturbing content. The dark web hosts illegal marketplaces, stolen data, and worse. You may stumble onto things you did not expect. Close the browser tab and move on.

When to close Tor Browser and return to the regular internet

Close Tor Browser the same way you close any other process. On Windows, click the X button. On macOS, press Command+Q or click the Tor Browser menu and select Quit. Your connection to the Tor network will end when ready.

Once you close Tor Browser, your regular browser and other applications will use your normal internet connection again. Your internet service provider will see your regular traffic. There is no lingering connection or background activity.

If you want to use Tor again, straightforward open Tor Browser and click Connect. Each session is independent. You do not need to uninstall and reinstall the software.

Frequently Asked Questions

Is it illegal to use Tor?

No. Using Tor is legal in most countries, including the United States, Canada, and most of Europe. Some countries restrict or ban it, including China, Russia, and Iran, though even in those places the legal status is complicated. What you do on the dark web may be illegal, but accessing it is not.

Can the government track me if I use Tor?

Tor makes tracking very difficult, but not impossible. Law enforcement has identified dark web users by compromising Tor relays, analyzing traffic patterns, and using other techniques. If you are doing something illegal, assume you can be caught. If you are doing something legal, Tor provides strong protection against casual surveillance.

Why is the dark web so slow?

Your traffic is being routed through multiple volunteer-run servers, each of which adds latency. This is the tradeoff for anonymity. Dark web sites are also often hosted on slower servers. Expect pages to load in seconds rather than milliseconds.

What should I do if I accidentally click on something disturbing?

Close the tab when ready. Do not click further into the site. If you are concerned about what you saw, you can report it to the National Center for Missing and Exploited Children (NCMEC) at CyberTipline.org, which accepts reports from the public. You do not need to identify yourself.

Can I use a VPN and Tor together?

Yes, though it adds complexity. You can connect to a VPN first, then open Tor Browser, which will route your traffic through the VPN and then through Tor. This hides the fact that you are using Tor from your internet service provider, but it means you are trusting both the VPN provider and the Tor network. Most security researchers recommend using Tor alone unless you have a specific reason to add a VPN.