To access the dark web you install Tor Browser from the Tor Project’s own website and click Connect. Doing so is legal in most countries; what is illegal is buying or sharing illegal goods and content once you are there. The real risks are malware, scams and fake copies of sites, so most people, and nearly all companies, never need to go in at all.
What is the dark web and how is it different from the deep web?
The deep web is everything search engines do not index: online banking, company intranets, email inboxes and private databases. The dark web is a small, deliberately hidden part of it. Its sites use addresses ending in .onion and open only in software built for the Tor network. Our cybersecurity glossary entries on the dark web, the deep web and the Tor network give short definitions.
| Topic | Deep web | Dark web |
|---|---|---|
| What it is | Everything search engines do not index | A small, intentionally hidden part of the deep web |
| Examples | Online banking, private databases, company portals | Sites with .onion addresses, some markets and forums |
| How you reach it | A normal browser and a login | Special software such as Tor Browser |
| Typical content | Ordinary private data | Privacy tools, news and whistleblower sites, but also criminal markets and forums |
How do you get on the dark web?
The usual way is Tor Browser, free software from the Tor Project. You download it only from the official Tor Project site, install it like any program and click Connect. It sends your traffic through several relays run by volunteers, so the site you visit does not see where you are. Brave also offers a private window that uses Tor, and shows a warning that Tor Browser is the better choice if your safety depends on staying anonymous.
Tor was not built for crime. Its first designs came from researchers at the U.S. Naval Research Laboratory in 1995, the network launched in 2002 and the Tor Project became a nonprofit in 2006, according to the Tor Project’s own history.
- 1995Onion routing designedResearchers at the U.S. Naval Research Laboratory create the first designs and prototypes.
- 2002Tor network launchesThe code is released under a free and open license.
- 2006Tor Project foundedA nonprofit takes over development.
- 2011Silk Road opensAn early market on Tor that used Bitcoin. U.S. authorities shut it down in 2013.
What if Tor is blocked on your network?
Some networks and countries block Tor. Tor Browser then offers bridges, which are relays that are not publicly listed and so are harder to block. In the connection settings you choose to request a bridge, solve the CAPTCHA and click Connect. The Tor Project’s support pages explain this in detail. Other networks such as I2P and Freenet exist too, but they are used less and are mostly for file sharing.
Is the dark web illegal?
In most countries, using Tor or visiting the dark web is not illegal by itself. A few countries restrict Tor or anonymity tools, so check the law where you live. What the law punishes is the activity: buying drugs, stolen data, weapons or forged documents, offering hacking services, or viewing or sharing child abuse material. Police run and watch dark web sites, and law enforcement takedowns have led to hundreds of arrests of buyers and sellers. Our list of sites in the deep web that were seized, closed or gone shows how that works.
Who uses the dark web, and for what?
Journalists, activists and people under censorship use it to communicate privately and reach blocked news. Whistleblowers use it to share documents safely. Criminals use it to sell stolen logins, customer data, malware and access to company networks, and to talk on underground forums. For companies, the second group is the reason to care: stolen data often shows up there before the victim knows about the breach.
How can you stay safe if you do go in?
Most harm comes from ordinary mistakes: opening a file, trusting a fake site or paying a stranger. These habits cut the risk.
- Get software from the official sourceDownload Tor Browser only from the Tor Project, never from a link in a forum or video.
- Keep the browser updatedUpdates fix flaws that attackers use.
- Do not download or open filesDocuments and archives are a common way to spread malware.
- Do not log in to personal accountsKeep your real name, email and passwords out of it.
- Do not pay or tradeScams and exit scams are common, and buying illegal goods is a crime.
- Expect fake copiesLookalike sites copy real ones to steal logins and funds.
Tor hides your location, but it does not make you invisible or protect you from malware. Using a VPN with it can add or remove risk depending on the setup, so do not treat it as a cure-all.
Does your company need to go on the dark web?
No. A security team does not need to browse markets to find out whether its data is for sale. Dark web monitoring services collect listings, leaks and forum posts and alert you when your domains, staff logins or brand appear, so no one on your team has to enter these sites or carry the risk. Brandefense Dark Web Monitoring does this for markets, forums and leak sites. To see where listings come from, read about data leak sites and initial access brokers, and the tools used to find onion sites in our guide to dark web sites and search engines.
Conclusion
Getting onto the dark web is easy and usually legal. Staying safe there is harder, and most organizations get what they need without ever visiting. Know your own exposure, fix leaked credentials quickly and leave the browsing to specialists. This article is for information only and does not encourage any illegal activity. To see how monitoring works, Request a demo.