A large part of the dark web is filled with legitimate sites. Together with the much larger “deep web,” they account for the vast majority of the content that is online. The surface web most of us know is merely the tip of the iceberg.
Yet accessing content on the deep web is far from straightforward, and there are risks. For those interested in diving deeper, it pays to understand how to do so as safely as possible.
Understanding the dark web
There are three parts to the web. The surface web consists of indexed websites that anyone can search for and access via traditional search engines like Google and Bing. The deep web refers to all the rest – websites that aren’t indexed by these search engines. Think private social media posts, paywalled content, company servers, databases, intranets, emails, and other password-protected or private online resources.
The dark web can be thought of as a small subset of the deep web (around 6% of it), which requires specific software like the Tor browser to access. Its primary focus is on maintaining anonymity, which can appeal to both malicious actors and individuals with legitimate needs for private browsing, such as journalists, human rights activists, or others in sensitive professions.
The dark web’s origins
The dark web as we know it today began to take shape in 2002 when US Navy researchers created The Onion Router (Tor) which enables users to browse with complete anonymity. It ushered in scores of non-indexed websites, forums, and marketplaces that can only be accessed with such tools. The advent of cryptocurrency was the final piece of the puzzle, enabling dark web users to pay each other for goods and services while remaining anonymous.
Separating fact from fiction
Contrary to popular belief, the dark web is not the same as the deep web, but just a part of it. Although it does play host to a fair amount of criminal activity, it also attracts those who want to stay anonymous to preserve their privacy and possibly avoid government oppression or censorship.
How does the dark web work?
From a technical perspective, the dark web is a series of encrypted overlay networks (i.e., networks overlaid on other networks) which can only be accessed by special software like Tor. These typically encrypt and anonymize user traffic so the individual behind it can’t be unmasked, although each protocol has a different way of exchanging data anonymously between networked devices.
The dark web’s main anonymity protocols
Tor is the best known. It uses “onion routing” for layered encryption as traffic passes through several random servers (or relays). Only when it reaches the final “exit relay” is the last layer of encryption removed, and the traffic sent over the public internet.
I2P (Invisible Internet Project) uses end-to-end encryption, separates incoming and outgoing traffic, and also employs garlic routing across a decentralized, volunteer-maintained network. Garlic routing splits messages into smaller encrypted chunks to make them harder to intercept.
Freenet is another decentralized peer-to-peer (P2P) network, with each node storing and delivering encrypted data, making it almost impossible to know where requests are coming from or going.
What can you find on the dark web?
You can find a variety of legitimate and illegal content on the dark web – ranging from dark web “mirrors” of legitimate sites like BBC, Facebook, and DuckDuckGo, to marketplaces selling narcotics, malware and stolen data.
Why users access the dark web
As mentioned, there are plenty of reasons why you may legitimately want to visit dark web sites. It could be to:
- Protect your privacy from ad trackers and government snoopers
- Protect yourself and your sources if you’re a journalist or whistleblower
- Circumvent censorship
Be aware, though, that there’s also a raft of illicit material on marketplaces and forums, including:
- Sellers of narcotics, firearms, malware, hacking tools, and stolen information
- Child sexual abuse material (CSAM)
- Marketplaces for contract killings
How to access the dark web safely
Downloading and Installing the Tor Browser
To get the Tor browser up and running, simply:
- Visit the Tor Project website
- Hit the “Download” button relevant to your OS
- Double-click the executable to start the install(ation)
- Connect to the Tor network by clicking on “Always connect automatically” and then hitting the Connect button
A step-by-step access guide
Once you’re connected to the Tor network, you can search for sites via the privacy-centric DuckDuckGo browser which should be embedded in the Tor browser start page. Be very cautious with any dark web links you come across – only use those from reputable sources, and avoid ones found on forums, social media, or other unverified platforms.
If you have trouble connecting to a site, click on the padlock at the left of the address bar, and then hit the New Circuit for this Site button to reload the page by routing the traffic a different way.
Going “Dark”? Take Extra Security Precautions
It pays to be extra careful when navigating the dark web. Consider the following:
- Use a VPN so that your ISP can’t see that you’re using the Tor browser, adding an extra layer of anonymity.
- Ensure you have updated your anti-malware software from a reputable provider
- For extra security, click the shield icon on the right of the address bar to display a Security Level dialog box. You can then switch to the Safer or Safest setting.
- Use an identity protection service to scan both the surface and dark web for signs that your personal data - such as log-in credentials - may be exposed or traded. These services monitor whether your information appears in known data breaches or is offered for sale, regardless of your online behavior. When something is detected, they alert you so you can act quickly.
get eset identity protection
- Keep your OS and all of your software up to date to avoid exploitation of potential zero-day vulnerabilities in users’ or readers’ systems.
Understand the risks and take precautions
Cybercrime generates tens to hundreds of billions of dollars in illicit profits. It has permeated the surface web, so naturally, you’ll find the same malware, phishing attempts, scams, and other threats lurking on the dark web. However, on the dark web there are fewer protections like browser warnings to keep you safe.
With this in mind, be sure to:
- Keep your anti-malware software up to date
- Activate the maximum-security settings in the Tor browser
- Be extremely cautious about clicking on links or downloading files
- Use strong passwords and multi-factor authentication
- Avoid buying items if possible
- Be vigilant for scams and phishing attempts
- Never share personal or financial information
Expert insights
“From a researcher’s perspective, the dark web is not merely a haven for criminals conducting illicit activities – it’s also a surprising treasure trove of communication, often carried out publicly under the guise of pseudonyms and nicknames. For instance, when a ransomware gang’s service goes offline, underground forums are typically the place people will look for explanations. Additionally, dark web forums offer valuable insights into the cybercriminal ecosystem, serving as spaces where threat actors coordinate their operations, boast about their exploits, and where novices seek guidance and collaborators, but also where they argue, blame each other and publicly engage in heated debates and disputes.
While this aspect of the dark web is noteworthy, it’s equally important to highlight its critical role in enabling secure whistleblowing, avoiding censorship, and facilitating private communication for those living under oppressive regimes or working in sensitive circumstances. Despite that, I would strongly advise against installing Tor simply to explore these illegal marketplaces where contraband is traded. These spaces are often, rightfully, under heavy surveillance by law enforcement, and a simple curious visit could inadvertently attract attention or assumed connections to illicit activities.”
- Jakub Souček, Team Lead of Crimeware Research
Legal and ethical considerations
The dark web has gained something of a negative reputation over the years due to the cybercriminals and troublemakers who populate some of its websites. But it’s not illegal to browse in most countries, as long as you don’t use it to commit crimes such as buying or selling contraband.
Take the appropriate security precautions, ensure your activities are within the bounds of the law, and the dark web could be a fantastic privacy-centric resource.
Frequently asked questions
1. Is it illegal to access the dark web?
No, most countries permit dark web use as long as you don’t commit crimes (e.g. buying narcotics) on its sites.
2. Can I be tracked on the dark web?
No, as long as you have configured your browser correctly. However, ISPs can see you are using the dark web unless you use a VPN.
3. What are .onion sites?
Sites on the dark web that can only be accessed via the Tor browser.
4. How do I stay anonymous on the dark web?
By using an anonymous tool (Tor, I2P, Freenet) and not proactively sharing any personal or financial information.
5. What should I avoid on the dark web?
Clicking on links, downloading files, and sharing personal information. Also avoid visiting marketplaces or forums known for illicit activity, although many will be invite-only.
6. Can police track you on the dark web?
No, but police have in the past been able to infiltrate illicit sites/marketplaces to obtain the details of buyers and sellers and shut them down. Examples include Silk Road and AlphaBay.
7. How much of the internet is the dark web?
It is difficult to say definitively, but probably less than 6%.
8. What is the difference between the deep web and the dark web?
The deep web is the non-indexed web containing private or proprietary information available only to selected groups of users or individuals. The dark web is a small part of the deep web, dedicated to anonymous browsing.
9. Do people still go on the dark web?
Yes, people use it every day.
10. Is the dark web a VPN?
No, but you can use a VPN to further anonymize your browsing sessions (i.e., preventing your ISP from seeing that you’re using the dark web).
