Glossary of Dark Web Terms

Why use this glossary? It separates privacy tools, hidden networks, payment methods and common threats without technical jargon.

Access, identity and payments

What shapes access? These concepts explain how users connect, manage identity and transfer funds.

• Anonymity — The state of keeping a person’s real identity hidden. Tools can strengthen anonymity, but behaviour and metadata may still reveal someone.
• Bitcoin — A digital currency recorded on a public blockchain. Bitcoin addresses are pseudonymous rather than anonymous, so transactions can sometimes be traced.
• Clearnet — The publicly accessible internet indexed by search engines and opened through standard browsers. News sites, shops and forums usually sit here.
• Cryptocurrency — Digital money secured through cryptography and transferred across a blockchain or similar network. Dark-web markets may accept it because payments cross borders quickly.

Networks and privacy

How is traffic concealed? Special networks combine encryption, relays and layered routing to reduce direct exposure.

• Dark web — Online services deliberately hidden from standard browsers and search engines. Access usually requires software such as Tor or I2P.
• Darknet — A restricted network operating over the internet with special software, settings or authorisation. The dark web consists of services hosted on such networks.
• Deep web — Internet content that search engines do not index, including private email, banking pages and company databases. Most deep-web content is unrelated to crime.
• Encryption — A process that turns readable information into coded data. Only someone with the correct key should be able to read it.
• Exit node — The final Tor relay before traffic reaches the public internet. It may see unencrypted traffic, but normally does not know the user’s original IP address.
• I2P — A decentralised anonymity network designed mainly for services and communication hosted inside its own network. It uses multiple encrypted routes between participants.
• Metadata — Information about communication rather than its contents, such as time, file size, location or sender. Combined records can expose patterns and identities.
• Onion routing — A method that wraps traffic in several encryption layers and passes it through multiple relays. Each relay removes one layer and learns only limited routing information.

Services, threats and trading

What creates the risk? Fraud, malware and weak operational habits cause more exposure than the network alone.

• Phishing — A fraudulent message or page designed to steal passwords, cryptocurrency or personal details. It often copies the appearance of a trusted service.
• Ransomware — Malware that encrypts files or blocks systems, then demands payment for restoration. Paying does not guarantee that data will be recovered.
• Tor — A network and browser system that routes traffic through several volunteer-operated relays. It can reduce tracking and provide access to onion services.
• Tumbler — A service that mixes cryptocurrency from multiple sources to obscure transaction trails. It is also called a "mixer", and its legal status varies by jurisdiction.
• Vendor — A seller operating through an online marketplace or private channel. Ratings and reviews may be manipulated, copied or created by the seller.
• Zero-day — A software flaw unknown to the developer or lacking an available patch. Attackers can exploit it before defenders have time to update systems.