Essential terms and definitions for navigating the darknet
Understanding dark web terminology is essential for safe and informed browsing. This comprehensive glossary covers technical terms, security concepts, and common slang used across Tor and darknet communities.
Any cryptocurrency that isn't Bitcoin. Common altcoins on the dark web include Monero (XMR), Ethereum (ETH), and Litecoin (LTC). Many prefer Monero for its enhanced privacy features.
The state of being unidentifiable online. True anonymity requires hiding your IP address, using encrypted connections, and avoiding personal information disclosure.
A search engine specifically designed for finding .onion sites. Unlike traditional search engines, Ahmia indexes and makes darknet content discoverable while filtering illegal content.
The most widely used cryptocurrency on the dark web. While not completely anonymous, Bitcoin transactions can be made more private through mixing services and proper wallet management.
A Tor relay that isn't publicly listed. Bridges help users connect to Tor in countries where it's blocked. They're harder for governments to detect and censor.
A service that mixes your Bitcoin with others to obscure the transaction trail. Helps enhance privacy by breaking the connection between sender and receiver addresses.
A distributed ledger that records all cryptocurrency transactions. While transparent, it can be analyzed to trace Bitcoin movements, which is why privacy-focused users prefer Monero.
The regular internet that most people use daily. Everything accessible through standard browsers like Chrome, Firefox, or Safari without special software.
Digital currency secured by cryptography. Bitcoin, Monero, and Ethereum are commonly used on dark web markets for their pseudonymous or anonymous transaction capabilities.
The path your connection takes through the Tor network. Each circuit uses three random relays to route your traffic, providing anonymity through multiple layers of encryption.
The science of encoding information so only authorized parties can read it. Essential for secure communication on the dark web through encryption protocols.
A Bitcoin privacy technique where multiple users combine their transactions into one, making it difficult to determine who paid whom.
Websites that exist on encrypted networks like Tor and require specific software to access. Not indexed by standard search engines and provides anonymity for users and site operators.
An overlay network that can only be accessed with specific software, configurations, or authorization. Tor, I2P, and Freenet are examples of darknet networks.
A physical location where items can be left for pickup without direct contact between parties. Used in markets to enhance operational security.
All web content not indexed by standard search engines, including password-protected sites, private databases, and paywalled content. Much larger than the dark web and mostly mundane.
The process of revealing the true identity of an anonymous user. Can happen through traffic analysis, social engineering, or operational security mistakes.
An online marketplace operating on the dark web, typically using cryptocurrency for transactions. These markets facilitate anonymous buying and selling of various goods and services.
Converting data into a coded format that can only be read by someone with the decryption key. Essential for protecting communications and data on the dark web.
Encryption where only the sender and recipient can read messages. Even the service provider can't access the content. Used in secure messaging apps like Signal.
The first relay in your Tor circuit. It knows your real IP address but not what you're accessing. Tor uses stable entry nodes to prevent certain attacks.
A third-party service that holds cryptocurrency during a transaction until both parties fulfill their obligations. Common on darknet markets to reduce scams.
The last relay in your Tor circuit. It decrypts the final layer and sends your request to the destination. The exit node can see unencrypted traffic but not your IP address.
Techniques used to identify users based on unique characteristics of their browser, system, or behavior. Tor Browser is designed to make all users look identical to prevent this.
Releasing payment from escrow before receiving goods. Generally discouraged as it removes buyer protection. Only used with highly trusted vendors.
Discussion boards on the dark web where users share information, trade, and communicate. Popular topics include security, privacy, technology, and various underground activities.
GNU Privacy Guard / Pretty Good Privacy. Encryption programs used to secure messages and verify identities. Essential for safe communication on the dark web.
See Entry Node. The first relay in a Tor circuit, chosen from a small pool of stable relays to enhance security against certain attacks.
A website or service that operates entirely within the Tor network. Both the server and user remain anonymous. Identified by .onion addresses.
A directory of .onion sites, acting as a starting point for dark web navigation. Multiple versions exist, some more reliable than others.
Hypertext Transfer Protocol Secure. Encrypted version of HTTP. Always use HTTPS sites even on Tor for an additional layer of encryption.
A trap set by law enforcement or malicious actors disguised as a legitimate service. Designed to identify and gather information about users.
An alternative anonymity network to Tor. Uses encrypted tunnels and is designed for hidden services rather than accessing the regular internet.
Internet Protocol address. A unique identifier assigned to your device when connecting to the internet. Tor hides your IP address to maintain anonymity.
The company that provides your internet connection. Your ISP can see that you're using Tor but not what you're accessing through it.
A programming language used to make websites interactive. Often disabled on Tor Browser's safest setting because it can potentially leak information about users.
A string of characters used in encryption and decryption. Public keys encrypt messages, private keys decrypt them. Guard your private keys carefully.
Malware that records every keystroke you make. Can capture passwords, messages, and other sensitive information. Always use reputable security software.
Government agencies that investigate illegal activities on the dark web. Use sophisticated techniques including undercover operations, traffic analysis, and market takeovers.
A cryptocurrency similar to Bitcoin but with faster transaction times. Sometimes used on darknet markets as an alternative payment method.
Malicious software designed to harm your computer or steal information. Common on sketchy dark web sites. Always use antivirus protection and be cautious.
See Darknet Market. An e-commerce platform on the dark web, typically using cryptocurrency and escrow systems for transactions.
The second relay in a Tor circuit. It knows neither your IP address nor your destination, only passing encrypted data between the entry and exit nodes.
A privacy-focused cryptocurrency with built-in anonymity features. Transactions are untraceable, making it increasingly popular on dark web markets.
A cryptocurrency wallet requiring multiple private keys to authorize a transaction. Provides extra security for large transactions and escrow services.
A browser extension that blocks JavaScript, Java, and other potentially dangerous content. Built into Tor Browser to enhance security.
A relay in the Tor network. Your connection passes through three nodes (entry, middle, exit) to reach its destination anonymously.
The .onion URL used to access hidden services on Tor. V3 onion addresses are 56 characters long, providing better security than older v2 addresses.
The technique Tor uses to anonymize internet traffic by encrypting data in layers (like an onion) and routing it through multiple relays.
Practices and procedures to protect sensitive information and maintain anonymity. Critical for anyone using the dark web, covering everything from passwords to behavior patterns.
Direct connection between users without a central server. Used for file sharing and some cryptocurrency transactions. Avoid using regular P2P over Tor.
See GPG/PGP. Essential encryption tool for secure messaging and identity verification on the dark web.
Fraudulent attempts to steal credentials by impersonating legitimate sites. Very common on the dark web. Always verify .onion addresses carefully.
The secret half of an encryption key pair. Used to decrypt messages and sign transactions. Never share your private key with anyone.
An intermediary server that forwards your requests. Tor is a sophisticated type of proxy system. Don't use additional proxies with Tor unless you know what you're doing.
The shareable half of an encryption key pair. Others use your public key to encrypt messages that only you can decrypt with your private key.
A security-focused operating system that uses virtual machines for compartmentalization. Considered one of the most secure options for dark web use.
A server in the Tor network that forwards encrypted traffic. Thousands of volunteers run relays to make the Tor network function.
Popular clearnet forum with communities discussing dark web topics. Communities like r/onions and r/tor provide information and links (use with caution).
The smallest unit of Bitcoin (0.00000001 BTC). Named after Bitcoin's pseudonymous creator, Satoshi Nakamoto.
Fraudulent activity designed to steal money or information. Extremely common on dark web markets. Research vendors thoroughly and use escrow.
An open-source whistleblower submission system. Used by news organizations to receive anonymous tips from sources via Tor.
The first major darknet market, operating from 2011-2013. Its seizure by the FBI demonstrated both the possibilities and risks of dark web commerce.
Another term for the clearnet. The portion of the internet indexed by search engines and accessible without special software.
The Amnesic Incognito Live System. A security-focused operating system that runs from a USB stick and leaves no trace on the computer. Routes all connections through Tor.
The Onion Router. Free software that enables anonymous communication by routing traffic through a worldwide network of relays. The most popular way to access the dark web.
Modified version of Firefox configured to route traffic through Tor. Includes privacy protections and security features. The recommended way to access .onion sites.
Examining patterns in network traffic to identify users or activities. While Tor protects against basic traffic analysis, sophisticated attackers with enough resources can sometimes correlate traffic.
See Bitcoin Mixer. A service that obscures the origin of cryptocurrency by mixing it with other users' coins.
Security measure requiring two forms of verification to log in. Common on darknet markets, usually combining password with PGP-encrypted codes.
Uniform Resource Locator. The web address of a site. On Tor, .onion URLs look random and are difficult to remember.
A seller on a darknet market. Check reviews, history, and PGP keys before purchasing. Established vendors with good feedback are generally more trustworthy.
A software-based computer running inside your actual computer. Provides isolation and security. Useful for testing potentially dangerous software.
Encrypts your internet connection through a remote server. Some use VPN + Tor for additional anonymity, though this is debated. Never use free VPNs.
Software that stores cryptocurrency private keys and allows you to send/receive payments. Hardware wallets are most secure for large amounts.
Someone who exposes wrongdoing within an organization. Tor and SecureDrop provide anonymous channels for whistleblowers to contact journalists.
Ticker symbol for Monero cryptocurrency. Increasingly preferred over Bitcoin on dark web markets due to superior privacy features.
A previously unknown software vulnerability. Law enforcement and criminals seek zero-days for Tor Browser to deanonymize users. Keep your software updated.
A cryptographic method where one party can prove they know something without revealing the information itself. Used in some privacy-focused cryptocurrencies.