Dark Web Glossary: Key Terms Explained
This glossary is designed for anyone seeking to understand dark web terminology and its implications.
Sections
Navigating the dark web means encountering jargon that sounds either mundane or deliberately opaque. This glossary unpacks the terms you'll see in forums, guides and security discussions — no mythology, just what each word actually means in practice.
Access and infrastructure
Bridge relay — A Tor entry point not listed in the main directory, used to bypass censorship when standard access is blocked. Internet providers can't easily detect you're connecting to Tor through a bridge.
Exit node — The final relay in a Tor circuit where traffic leaves the network and reaches its destination. Whoever runs this node sees unencrypted data unless the site uses HTTPS.
Hidden service — A website or server accessible only through Tor, identified by a .onion address instead of a regular domain. The server's physical location remains concealed from visitors and network observers.
Onion address — A string of random characters ending in .onion that identifies a hidden service on Tor. Version 3 addresses run 56 characters long; older v2 addresses were 16.
Tor (The Onion Router) — Software that routes internet traffic through volunteer-operated relays to obscure the user's location and browsing activity. Each connection bounces through at least three relays before reaching its destination.
Marketplaces and commerce
Cryptocurrency tumbler — A service that mixes coins from multiple users to break the transaction trail on a blockchain. Also called a mixer; effectiveness varies depending on the volume passing through.
Escrow — A system where a marketplace holds payment until the buyer confirms receipt of goods. Reduces the risk of either party vanishing with money or product, though the market itself can still disappear.
PGP (Pretty Good Privacy) — Encryption standard used to secure messages and verify identities on dark web forums and markets. Users exchange public keys to encrypt communications that only the intended recipient can read.
Vendor bond — An upfront fee a seller pays to list products on certain marketplaces. Intended to deter scammers, though it doesn't guarantee legitimacy.
Security and anonymity
Deanonymisation — Techniques that reveal the real identity or location of someone using anonymity tools. Methods range from traffic analysis to exploiting software vulnerabilities or user mistakes.
OPSEC (Operational Security) — Practices that prevent accidental disclosure of identifying information. On the dark web this includes using dedicated devices, avoiding personal details and never reusing usernames from clearnet accounts.
Tails (The Amnesic Incognito Live System) — A Linux operating system that runs from a USB stick and routes all connections through Tor. It leaves no trace on the computer after shutdown.
VPN over Tor — Connecting to a VPN after exiting the Tor network, so the destination site sees the VPN's IP rather than the exit node. The reverse setup (Tor over VPN) hides Tor usage from your internet provider but not from the exit node.
Terminology and culture
Clearnet — The regular internet accessible through standard browsers without anonymity software. Everything outside Tor, I2P and similar networks.
Darknet — Any overlay network requiring specific software to access, designed for anonymity. Tor is the most widely used; alternatives include I2P and Freenet.
Dread — A Reddit-style forum on Tor where users discuss markets, security practices and dark web news. Often the first stop for newcomers seeking current information.
Doxing — Publishing someone's personal information — real name, address, photos — without consent. Particularly damaging in communities built around anonymity.
FUD (Fear, Uncertainty and Doubt) — Misinformation spread to manipulate opinion or behaviour, common in market disputes and exit scam accusations. Separating genuine warnings from FUD requires checking multiple sources.