What the “dark web” is—and how it differs from the “deep web”
The dark web is a small, intentionally hidden part of the internet that mainstream search engines don’t index and that you access using special tools (most commonly the Tor network). The deep web is a much broader concept—it includes everything that isn’t in search engines (e.g., corporate intranets or databases behind a login). So the dark web is not a synonym for “the entire hidden internet”; it’s only a fragment built on anonymity and privacy technologies. Tor works by routing your communication through multiple volunteer-run nodes and encrypting it in “onion” layers, so no single point can see both the source and the destination of a transmission at the same time.
How Tor technically protects identity (and where the limits are)
The Tor Browser isolates websites, clears cookies, and routes traffic through a random set of relays, which makes tracking and browser fingerprinting harder. But it’s not “bulletproof”—misconfiguration, add-ons, opening downloaded documents outside the sandbox, or torrenting can de-anonymize a user. The Tor team itself therefore warns, for example, against downloading and opening documents while online and against using BitTorrent over Tor.
Is the dark web only for criminals? Evidence vs. impressions
The reality is mixed. Anonymity protects journalists, activists, and people in countries with censorship, but it also attracts crime. Empirical studies reach different conclusions depending on methodology and on what exactly is being measured (content vs. traffic). For example, a study published in 2020 quantified that only a smaller share of daily users globally likely engage in harmful activities (estimated ~6.7%), although “harmfulness” is concentrated mainly in the countries with the greatest freedom. Older mappings of .onion services, by contrast, pointed to a high share of illegal content when measuring types of sites rather than the behavior of all users (discussion in Moore & Rid 2016:
What actually happens on the dark web: from whistleblowing to markets for criminal goods
On the legitimate side, it’s used for safer tip-offs to media outlets, bypassing censorship, or projects like OnionShare. On the illegal side, it’s mainly markets for drugs, stolen credentials, malware, or forums for selling data. Authorities regularly intervene, and these services are not “untouchable.” In June 2025, European and U.S. agencies took down the long-running Archetyp Market and arrested its administrator; the operation was led by Europol. In April 2023, an international action dubbed “Operation Cookie Monster” targeting Genesis Market shut down a global market for “digital identity fragments”—i.e., bundles of stolen logins.
Myths and facts worth knowing
A common myth is that “Tor is illegal” or that “the dark web is gigantic.” Using Tor is, in itself, legitimate software and an access technology; what’s illegal are specific acts (data theft, drug distribution, child exploitation, fraud). It’s also true that the dark web makes up only a tiny fraction of the internet—you often can’t actually reach many “.onion” addresses because they are short-lived, tightly private, or simply offline. You can find the basic technical explanation and Tor’s limits directly from the project’s creators.
Risks for ordinary users (even if you don’t plan to break anything)
The biggest risk is a false sense of invincibility. Scam marketplaces and forums often contain malicious files, phishing, and social-engineering techniques. Remember that the browser protects only web traffic—other applications on your system can reveal your IP address. Illegal goods or services remain criminal even if you “view” them anonymously. Law enforcement has long infiltrated communities, cooperates across borders, and markets routinely disappear after police action; examples include the above-mentioned operations against Archetyp Market and Genesis Market (see the links above).
Safe and legal digital hygiene on the dark web (general recommendations)
If you have a legitimate reason to use hidden services (e.g., contacting the media), use an up-to-date Tor Browser, don’t download random files, don’t disable its default security measures, don’t use third-party add-ons, and never open documents directly online in regular applications. The Tor Project explicitly warns you not to torrent over Tor, because clients usually reveal the real IP address and place heavy load on exit nodes. If you need maximum operational caution, use a separate device and don’t mix your identity between the clear web and the anonymous environment.
What the data and police takedowns show: trend over sensation
Law-enforcement tactics have shifted significantly—from purely technical vulnerabilities to infiltration, cooperation with banks and blockchain analytics, and coordinated takedowns involving dozens of seized servers. Every major operation triggers a “migration effect,” but it also breaks the myth of untouchability. Two recent examples with clear outcomes and official press releases are listed above: Archetyp Market (Europol, June 2025) and Genesis Market (DoJ, April 2023), illustrating that even long-established ecosystems can be dismantled through coordinated action.
Video: How Tor works in brief (official sources)
The following videos come directly from official channels, and Gutenberg will automatically insert them as embeds. The first helps explain the principles behind Tor; the second is a short highlight reel from the takedown of the Archetyp Market.
In one breath: the takeaway
The dark web isn’t a “secret internet,” but a specific way of accessing a part of the web where anonymity both increases privacy protection and raises the risk of abuse. The technology itself isn’t the problem; what matters is what we do with it. Use Tor responsibly, be aware of the tool’s limitations, and keep in mind that the law applies just the same in anonymous environments. For facts and best practice, it’s worth relying on Tor’s official documentation, empirical research, and verified press releases from security agencies (links below).
Sources
- Tor Project – “About Tor”: https://support.torproject.org/about-tor/
- Tor Project – “What is Tor?”: https://support.torproject.org/about/what-is-tor/
- Europol – “Europe-wide takedown hits longest-standing dark web drug market (Archetyp Market)”: https://www.europol.europa.eu/media-press/newsroom/news/europe-wide-takedown-hits-longest-standing-dark-web-drug-market
- U.S. Department of Justice – “Criminal Marketplace Disrupted in International Cyber Operation (Genesis Market)”: https://www.justice.gov/archives/opa/pr/criminal-marketplace-disrupted-international-cyber-operation
- E. Jardine (2020) – “The potential harms of the Tor anonymity network cluster disproportionately in free countries” (open access): https://pmc.ncbi.nlm.nih.gov/articles/PMC7749358/
- King’s College London (Moore & Rid, 2016) – “Cryptopolitik and the Darknet” (bibliographic page): https://kclpure.kcl.ac.uk/portal/en/publications/cryptopolitik-and-the-darknet
Jana
I like turning curiosity into words, and writing articles is my way of capturing ideas before they slip away — and sharing them with anyone who feels like reading.
