The Terminology Problem
Mainstream media and general usage treat "dark web" and "darknet" as synonyms. They are not. Understanding the distinction matters because the terms describe different network layers with different characteristics, access methods, and purposes.
The Dark Web
The "dark web" most commonly refers to web content that is not indexed by standard search engines like Google or Bing. This encompasses several categories:
- Behind-login content: Social media posts, email, banking portals, subscription content — all "dark web" by the indexing definition, but fully accessible on the regular internet.
- Private databases, intranet systems, and password-protected documents.
- In popular usage, the term has narrowed to specifically mean Tor-accessible .onion sites — which is technically the darknet, not the dark web by the original definition.
The Darknet
A darknet is an overlay network that requires specific software, configurations, or authorization to access. Key properties:
- Tor (The Onion Router): The most widely used darknet. Routes traffic through a circuit of three encrypted relay nodes. .onion addresses are only resolvable within the Tor network.
- I2P (Invisible Internet Project): A garlic-routing darknet with different latency and anonymity properties from Tor. Hosts .i2p sites.
- Freenet: A peer-to-peer censorship-resistant network designed for file sharing and communication.
Darknet markets operate as .onion services on the Tor darknet. They are not accessible from a standard web browser — Tor Browser (or a Tor daemon with appropriate proxy settings) is required.
Side-by-Side Comparison
| Property | Dark Web (popular meaning) | Darknet (Tor) |
|---|---|---|
| Access method | Standard browser | Tor Browser required |
| Address format | Regular domains (.com, .net) | .onion v3 (56-char hash) |
| Server visibility | IP visible to host and ISP | Server IP concealed |
| Indexing | Not indexed by search engines | Not indexed; address-only access |
| Typical content | Login-gated sites, private data | Forums, markets, privacy tools |
| Anonymity | None inherent | Structural (multi-hop encryption) |
How Onion Routing Works
When a user connects to a .onion address through Tor, their traffic passes through a circuit of three volunteer-operated relays:
- Guard node: Knows the user's real IP, but not the destination.
- Middle relay: Knows neither the origin nor the destination.
- Exit node: For clearnet destinations, knows the destination but not the origin. For .onion services, there is no exit node — the circuit meets at a rendezvous point, and the server's IP is never exposed.
This three-layer encryption model (each hop decrypts one layer, like peeling an onion) is why the network is called Tor. Darknet markets operate as hidden services, meaning the server IP is structurally concealed even from the market's hosting provider.
Practical summary: When people say "dark web markets," they mean Tor darknet markets. To access them, use Tor Browser. To find verified addresses, use a directory like this one. The most security-hardened currently active market is Omega Market.