What Is the Dark Web?

The dark web is a very small slice of the internet that you cannot reach with a regular browser and a regular search engine. Getting in requires specific software, almost always Tor, short for The Onion Router, a project that started in the mid-1990s at the US Naval Research Laboratory to protect government communications. Today an independent nonprofit, the Tor Project, maintains it.

The name "onion" comes from the technical principle behind the tool: each data packet gets wrapped in several layers of encryption, one on top of another, and passes through at least three randomly chosen nodes before reaching its destination. Each node only knows the previous and the next hop, never the full route, so nobody along the way can reconstruct where a request came from or where it is headed.

That same mechanism protects in both directions, the person browsing and the operator hosting the site, something that does not happen on the rest of the World Wide Web as it is usually understood, where the destination server is normally easy to locate.

Mixing up the two terms leads to a common mistake: treating something as everyday as a webmail inbox or a bank account as suspicious, when it belongs to the deep web simply because it is not indexed, with no intent to hide at all.

Tor routes each connection through at least three randomly selected nodes out of thousands of volunteer-run servers worldwide: an entry node, a middle node, and an exit node. The originating device encrypts the data in successive layers, one for each node along the path, and every server can only peel off its own layer, see the next hop, and forward the rest without knowing either the origin or the final destination of the packet. That chain of layers is what gives onion routing its name. Directory servers keep track of which relays are currently available, so each connection takes a fresh, randomly chosen path through the network. Routing through three hops instead of one comes at a real cost in speed, the trade-off for the extra anonymity.

Sites on the dark web use .onion addresses instead of conventional domains like .com or .org. That suffix does not go through the regular DNS system, the one that translates domain names into IP addresses. A .onion address is actually a cryptographic key that identifies the service and enables end-to-end encryption without revealing where the server is hosted.

This also explains why a regular crawler never reaches those pages. There are no public links to follow from the rest of the internet, no sitemap listing them, and the access protocol itself sits outside the reach of any crawler built for the rest of the web. A dark web service can only be found if someone shares the exact .onion address directly or publishes it in a directory maintained specifically for that purpose.

The dark web has well-documented legitimate uses. Journalists and activists in countries with strict censorship use it to communicate without exposing their identity, and organizations such as The New York Times and the Electronic Frontier Foundation run .onion mirrors of their sites so users under surveillance can access them without leaving a trace. Anyone who simply wants to browse without their internet provider or an advertiser logging every step also turns to Tor for that.

At the same time, it is where marketplaces for illegal goods operate, from fake documents to banned substances, and that side draws most of the media attention on the topic. Neither use cancels out the other, they are different layers of the same technology.

For technical SEO, the dark web has no practical relevance: since no conventional search engine indexes it, it does not compete for rankings or affect the visibility of any website. It belongs in this glossary for its weight as a general knowledge term, not because of any direct link to search rankings. Where it does touch a company's daily work is breach monitoring: when customer data turns up in dark web forums, data protection rules kick in, including the breach notification duty under the GDPR.

• Check with reputable breach-monitoring tools whether your own credentials have surfaced on the dark web before taking a rumor at face value.
• Never access the dark web without first understanding the legal and security risks in your own country.
• Keep the Tor Browser updated to its latest version at all times; known vulnerabilities get exploited quickly.
• Keep deep web and dark web separate in any text or communication, so you do not repeat the most common mistake about the topic.
• If your company handles sensitive data, build monitoring of dark web forums and marketplaces into your cybersecurity strategy, not as a one-off check.
• Do not follow or share .onion links without verifying where they came from; many of them are phishing attempts.

• Using "dark web" and "deep web" as synonyms, when the second is far larger and mostly harmless.
• Assuming everything on the dark web is illegal, when it also hosts journalism and protected communication.
• Thinking Google chooses not to index the dark web, when it is technically unreachable for any conventional crawler.
• Believing that installing Tor alone guarantees full anonymity, without also watching habits like JavaScript use or downloads.
• Confusing a .onion domain with a regular URL that a normal search can index and locate.