6 min read4 sourcesUpdated

What Is Tor and the Dark Web?

How Tor's three-relay onion routing works, what the dark web really is, legitimate uses, and the risks.

TL;DR

  • Tor is a free network run by volunteers that sends your traffic through several relays, each with its own layer of encryption, so no single relay sees both who you are and where you are going [1].
  • The dark web is the part of the internet that needs special software, such as Tor, to reach. Its sites often end in .onion [2][3].
  • Tor has legitimate uses such as privacy and avoiding censorship, but it is also used for crime, which stays illegal [1][2].
  • Tor does not make you invisible. Mistakes in how you use it can still reveal you [4].

How onion routing works #

Normally a website sees your address, and your internet provider sees the site. Tor splits that knowledge up. Your Tor software builds a path, called a circuit, through three relays: a guard (entry), a middle and an exit. Your data is wrapped in three layers of encryption, like an onion, and each relay peels off just one layer [1].

A row showing you, an entry relay, a middle relay, an exit relay and a website, with a dot losing one protective ring at each relay
Each Tor relay removes one layer of encryption, so no relay sees both the sender and the destination. (tap or click the image to open it full size)
WhoWhat they can see
Entry relayYour address, but not the site [1]
Middle relayNeither you nor the site [1]
Exit relayThe site, but not you [1]
The websiteThe exit relay's address, not yours [1]

Because exit relays are publicly known, some sites choose to block or limit Tor users [1]. Tor cannot encrypt the last step between the exit relay and an ordinary website, so using HTTPS matters [1][4].

What the dark web is #

People mix up three terms:

  • Surface web: pages a normal browser can reach and search engines list.
  • Deep web: pages search engines do not index, such as your online banking or email inbox. Most of it is ordinary and harmless [2].
  • Dark web: content on "darknets", overlay networks that require specific software or authorisation. It is a small part of the deep web [2].

Tor is the best-known darknet. Sites on it are called onion services and are reached through .onion addresses. They hide the server's network location, and the connection stays inside the Tor network [1][3]. The Tor Project says onion services can only be accessed over Tor [3].

Legitimate uses and risks #

Legitimate uses. Journalists, activists, whistleblowers, people avoiding censorship, and survivors of domestic abuse use Tor, and so do ordinary people who want more privacy from websites and advertisers [1][2]. Some news organisations run onion sites so readers can reach them safely [3].

Risks. The same privacy is used by criminals. The dark web hosts marketplaces for illegal goods, fraud services and stolen data, and law enforcement actions against them are common [2]. Illegal acts remain illegal on Tor. Beyond legal risk, dark-web sites are a common place for scams and malicious files, so curiosity is itself a risk. Laws about using Tor differ from country to country, so check local rules.

What Tor does not protect #

  • Your own habits. Typing your name, email or other personal details into a site tells that site who you are, even if Tor hides your location [4].
  • Other apps. Tor only protects programs set up to use it; other software may connect directly [4].
  • Extras and downloads. Add-ons can reveal your address, and documents that open outside Tor can leak information [4].
  • Traffic watchers. An attacker who can watch both ends of a connection may be able to match traffic, and attacks often target the browser or the user instead of Tor itself [1].
  • Being seen using Tor. By default someone watching your connection can see that you use Tor, though bridges can reduce this [4].

FAQ #

Is Tor illegal? #

In many countries using Tor is legal, but some restrict it, and illegal activity is illegal however it is done. Check the rules where you live.

Is Tor the same as a VPN? #

No. A VPN sends traffic through one company's server that you must trust. Tor spreads trust across volunteer relays, which is more private in some ways but usually slower.

Is the dark web the same as the deep web? #

No. The deep web is everything search engines do not index, including your private accounts. The dark web is a small slice that needs special software to reach [2].

Is it safe to browse the dark web? #

It carries real risk from scams, malware and illegal content, and Tor does not protect against those. Following the Tor Project's guidance helps limit mistakes [4].

Sources #

All sources accessed 2026-10-27.

  1. Tor (network). Wikipedia. https://en.wikipedia.org/wiki/Tor_(network)
  2. Dark web. Wikipedia. https://en.wikipedia.org/wiki/Dark_web
  3. Onion Services. Tor Project Community. https://community.torproject.org/onion-services/
  4. Tor Browser: Staying Anonymous. Tor Project Support. https://support.torproject.org/faq/staying-anonymous/