The Most Misrepresented Part of the Internet
The dark web has achieved the kind of cultural notoriety that’s entirely disproportionate to its relevance to most people’s lives and understanding. Journalism and entertainment have created a mental image of a vast criminal marketplace accessible to anyone willing to type an address into a special browser — an image that’s simultaneously more dramatic and more accessible-seeming than the reality. This misrepresentation has practical consequences: people are either unnecessarily alarmed about dangers that don’t specifically threaten them, or unnecessarily curious about accessing something that’s mostly disappointing in its mundaneness.
Understanding what the dark web actually is — technically, sociologically, and practically — produces a more accurate picture than either the thriller-narrative version or the ‘it’s just normal websites’ dismissive version.
The Technical Reality: Tor and Onion Services
The dark web is most commonly accessed through the Tor network (The Onion Router) — a network of volunteer-operated servers that route internet traffic through multiple encrypted layers, concealing the origin and destination of traffic from network observers. Tor was originally developed by the US Naval Research Laboratory for intelligence communications and is now maintained by the non-profit Tor Project.
Websites that operate as Tor onion services (with .onion addresses rather than standard domain names) are accessible only through the Tor network and don’t appear in standard search engines. These onion services constitute what’s typically called the ‘dark web.’ The Tor network itself is also used to access normal websites anonymously — the ‘dark web’ specifically refers to the onion services, not to Tor use generally.
What’s Actually on the Dark Web
Illicit marketplaces selling drugs, stolen data, fraudulent documents, and other illegal goods and services exist on the dark web and are the category that gets the most attention. They also represent a fraction of dark web content that’s less accessible, less reliable, and more dangerous (through exit scams, law enforcement operations, and malware) than their cultural portrayal suggests. The Silk Road’s 2013 takedown by the FBI, along with numerous subsequent marketplace takedowns, has made the dark web criminal marketplace consistently more risky to use than their reputations imply.
The rest of dark web content: privacy-focused services (email providers, social networks) for users in repressive environments where privacy has genuine safety implications, whistleblowing platforms (SecureDrop, used by major news organisations for secure source communication), political discussion forums for journalists and activists operating under authoritarian governments, mirrors of legitimate websites for access from countries that block them, and general-purpose forums with user bases similar to Usenet’s early communities.
Why Normal People’s Data Is on the Dark Web
The dark web relevance that actually affects most people isn’t anything they’ve accessed or done — it’s where their stolen data is sold after data breaches. The email addresses, passwords, credit card numbers, and personal information exposed in the data breaches of retail stores, healthcare providers, and technology companies are sold and resold in dark web markets. This is why services like HaveIBeenPwned exist: to help people discover whether their credentials have appeared in breach datasets that have been indexed from dark web sources.
The practical implication: your data is probably on the dark web in some form, through no action of your own. The appropriate response is the credential hygiene covered in the cybersecurity articles throughout this series (unique passwords per site managed by a password manager, MFA on important accounts) rather than concern about the dark web itself.
Tor Use Without Dark Web Intent
Using the Tor browser (the modified Firefox browser that routes traffic through the Tor network) to access normal websites provides a level of anonymity from network-level surveillance that standard browsers don’t. Journalists protecting sources, activists in repressive political environments, and privacy-conscious users who don’t want their ISP or network provider to see their browsing activity have legitimate uses for Tor that have nothing to do with dark web content.
The trade-offs of Tor browsing: it’s significantly slower than standard browsing (traffic routes through multiple relay servers), some websites block Tor exit node IP addresses (recognising Tor traffic and preventing access), and certain browser features are disabled by default (JavaScript, which many websites require). For the privacy use case, Tor remains the most robust privacy-preserving browsing option; for everyday browsing, the speed and compatibility trade-offs make it impractical as a daily driver.