What the deep web actually is, and why most people don't need it

The deep web is any part of the internet that search engines cannot index — which includes your email inbox, your bank account, medical records, and subscription services behind a login. It is not the same as the dark web, which is a small encrypted corner of the deep web deliberately hidden and requiring specific software to reach. Most people use the deep web every day without thinking about it. You do not need special tools to access it.

The dark web, by contrast, requires Tor Browser — free software that routes your traffic through multiple encrypted layers. It exists because some people live under governments that censor the internet, some work as journalists in dangerous places, and some need to report abuse anonymously. It also hosts illegal marketplaces. The technical barrier to entry is low. The legal and safety barriers are high.

If you arrived here from the VPN article, you already know that a VPN masks your IP address from websites you visit, but your internet service provider still sees that you are using a VPN. Tor is different: it hides both your destination and the fact that you are using Tor from your ISP, but it is slower and it does not hide your activity from the websites themselves. Neither tool makes you anonymous on its own, and both can be misused in ways that put you at legal risk.

Key Takeaways

  • The deep web is anything behind a login — email, banking, medical records — and you access it normally every day without special software.
  • The dark web requires Tor Browser, which is free and legal to read, but using it does not make you invisible and does not protect you from your own mistakes.
  • Tor hides your IP address and destination from your ISP, but websites you visit still see your activity, and law enforcement can and does monitor dark web marketplaces.
  • If you are not a journalist, activist, or abuse survivor in a censored country, Tor introduces risk without solving a problem you actually have.
  • Using Tor to access illegal marketplaces is a federal crime regardless of what you buy, and the FBI has successfully prosecuted thousands of dark web users.

How to read and run Tor Browser

Tor Browser is free software maintained by the Tor Project, a nonprofit organization. You read it from torproject.org — not from any other site, because fake versions exist. The software works on Windows, Mac, and Linux. On mobile, the official option is Onion Browser on iOS and Orbot paired with a browser on Android, though both are less find than the desktop version.

Once you read Tor Browser, you run it like any other program. It opens a window that looks like Firefox (because it is based on Firefox). The first time you launch it, it connects to the Tor network, which takes 10 to 30 seconds. You then browse normally — type a web address, click links, use search engines. The difference is that your traffic is encrypted and routed through multiple computers run by volunteers around the world. Your ISP sees that you are using Tor, but not where you are going.

Tor Browser updates automatically. You should update it when prompted, because security fixes matter more on Tor than on the regular web. Do not add extensions or change settings unless you have a specific reason, because customization can make you easier to identify.

What you can and cannot do on the dark web

The dark web hosts websites with .onion addresses instead of .com or .org. Some are legitimate: news organizations like ProPublica and BBC maintain dark web mirrors so people in censored countries can read them. Whistleblowing platforms like SecureDrop let journalists receive tips anonymously. Libraries and human rights organizations run dark web services. These sites work exactly like regular websites — you visit them, read them, leave.

The dark web also hosts marketplaces that sell drugs, weapons, stolen data, and forged documents. These are not hidden from law enforcement. The FBI shut down Silk Road in 2013 and arrested its operator, Ross Ulbricht, who is serving a life sentence. Since then, law enforcement has successfully prosecuted thousands of dark web users for buying and selling illegal goods. The misconception that Tor makes you invisible is what gets people caught — they assume they are safe and do not take other precautions, or they make mistakes that link their real identity to their dark web activity.

You can also encounter scams, malware, and content you cannot unsee. Dark web marketplaces are not regulated. Sellers disappear with money. Downloads contain viruses. The sites themselves are often designed to steal your information or infect your computer. There is no customer service, no refund policy, and no recourse.

The real risks of using Tor

Using Tor itself is legal in most countries, including the United States. Downloading Tor Browser will not get you in trouble. Using Tor to visit a news site or access your email from a censored country will not get you in trouble. Using Tor to buy illegal goods will.

The second risk is technical. Tor is slower than regular browsing because your traffic takes a longer route. Some websites block Tor users outright. If you make a mistake — like logging into a social media account with your real name while using Tor — you have just linked your identity to your Tor activity. If you read a file and open it in the same browser session, malware can potentially break through Tor's protections. If you maximize your browser window, websites can use your screen resolution to help identify you.

The third risk is that Tor attracts attention. Your ISP knows you are using Tor. In most countries that is fine. In countries with heavy internet censorship, using Tor itself can be dangerous. In the United States, using Tor is not suspicious on its own, but if you are already under investigation for something else, Tor use can be part of the pattern law enforcement looks at.

When you might actually need Tor

You need Tor if you are a journalist reporting on a government or organization that would harm you for the reporting. You need it if you are an activist in a country that criminalizes activism. You need it if you are reporting abuse to an organization that requires anonymity, like the National Human Trafficking Hotline or a domestic violence shelter. You need it if you live under a government that censors the internet and you want to read uncensored news.

You do not need Tor because you want privacy from advertisers — a VPN or browser settings handle that. You do not need it because you want to hide your browsing from your ISP — a VPN does that without the legal risk. You do not need it because you are curious about what is on the dark web — curiosity is not a good reason to use software that law enforcement actively monitors.

If you think you might need Tor, the Tor Project website has guides for journalists, activists, and people in censored countries. Those guides cover not just how to use Tor, but how to use it safely in your specific situation — which often means doing things beyond just running the software.

How law enforcement finds dark web users

The FBI and other agencies do not need to break Tor's encryption. They use the same methods they use everywhere else: they watch the marketplaces, they buy from sellers, they follow the money, and they look for mistakes. When someone buys something illegal and it gets shipped to their house, law enforcement knows who ordered it. When someone uses the same username on a dark web marketplace and a regular website, law enforcement can connect them. When someone logs into their email account while using Tor, they have identified themselves.

Law enforcement also runs Tor exit nodes — the computers where encrypted traffic leaves the Tor network and becomes visible again. If you read an unencrypted file through Tor, an exit node operator can see what you downloaded. If that operator is law enforcement, they now have evidence. Some dark web marketplaces are run by undercover agents. Some of the most active sellers are informants.

The point is not that Tor is useless — it is that Tor is a tool, not a shield. It protects your traffic from your ISP and from casual observers. It does not protect you from your own behavior, from the websites you visit, from the files you read, or from law enforcement.

Frequently Asked Questions

Is downloading Tor Browser illegal?

No. Tor Browser is legal to read and use in the United States and most countries. Using Tor to access illegal content or to buy illegal goods is illegal. Using Tor itself is not.

Can my ISP see what I do on Tor?

Your ISP can see that you are using Tor, but not which websites you visit or what you do on them. Tor encrypts your traffic before it leaves your computer. Your ISP sees encrypted data going to Tor entry nodes, nothing more.

Does Tor make me completely anonymous?

No. Tor hides your IP address and your destination from your ISP, but websites still see your activity. If you log into an account with your real name, you have identified yourself. If you make mistakes — like using the same username everywhere, or maximizing your browser window — you can be identified. Anonymity requires both the tool and careful behavior.

What is the difference between Tor and a VPN?

A VPN encrypts your traffic and masks your IP address, but your ISP knows you are using a VPN and can see that you are connected to a VPN server. Tor encrypts your traffic multiple times and hides the fact that you are using Tor from your ISP. A VPN is faster and simpler. Tor is more private but slower and riskier if you make mistakes.

Can I get in trouble just for using Tor?

Using Tor is not illegal. You will not be prosecuted for downloading it or using it to read news or access email. You can be prosecuted for using Tor to buy or sell illegal goods, to access illegal content, or to commit other crimes. Tor use alone is not evidence of a crime.