Dark Web Safety Checklist
5 min read
Use this comprehensive checklist before accessing any darknet market or sensitive dark web site. Completing these steps significantly reduces your risk of phishing, scams, and security compromises.
Pre-Access Checklist
Tor Browser Installed and Updated
Downloaded from official torproject.org and updated to latest version
Security Settings Configured
Security level set to "Safer" or "Safest", JavaScript minimized
PGP Keys Generated
Created a PGP key pair with 4096-bit encryption and strong passphrase
Private Key Backed Up Securely
Private key stored encrypted on offline media (USB drive, paper backup)
Secure Email Address Ready
Created a secure, anonymous email address for account registration
Before Accessing a Market
Verified Onion Address
Cross-checked .onion address against multiple independent, trusted sources
Checked Market Status
Verified market is currently active and not reported as compromised
Researched Market Reputation
Read reviews and checked market's history for exit scams or security issues
Understood Market Rules
Read and understood the market's terms, fees, and dispute process
Account Setup
Created Strong Password
Used a unique, strong password (20+ characters, not reused elsewhere)
Enabled PGP 2FA
Set up two-factor authentication using PGP (if available)
Uploaded Public Key
Added your PGP public key to your account for encrypted communications
Used Anonymous Username
Created a username that doesn't reveal your identity or relate to other accounts
Making Transactions
Using Escrow
Ensured transaction uses escrow/held funds (never direct payment)
Checked Vendor Reputation
Reviewed vendor's feedback score, history, and reviews before purchasing
Understood Fees
Calculated total cost including market fees, transaction fees, and shipping
Using Cryptocurrency Safely
Prefer Monero (XMR) for privacy; if using BTC, understand coin tracing risks
Ongoing Security Practices
Ignoring External Links
Never following links from messages, emails, or external sources
Using New Identity Regularly
Clicking "New Identity" in Tor Browser between sensitive sessions
Not Sharing Personal Info
Never revealing real name, address, phone number, or identifying details
Monitoring Account Activity
Regularly checking account for unauthorized logins or suspicious activity
Backing Up Wallet Data
Securely backing up any wallet addresses, keys, or recovery phrases
Avoid These Practices
- ❌ Avoid using regular browsers to access .onion sites
- ❌ Avoid VPN-only connections (without Tor) for dark web access
- ❌ Avoid downloading files unless absolutely necessary
- ❌ Avoid enabling JavaScript unless required
- ❌ Avoid using the same password across multiple sites
- ❌ Avoid sharing your PGP private key
- ❌ Avoid disabling escrow for "faster" transactions
- ❌ Avoid sending funds outside the market platform
- ❌ Avoid trusting unsolicited messages or offers
- ❌ Avoid using personal email addresses for dark web accounts
Red Flags to Watch For
- 🚩 Market asks you to disable escrow
- 🚩 Vendor asks for direct payment outside the platform
- 🚩 Onion address doesn't match verified sources
- 🚩 Site looks different than expected (phishing clone)
- 🚩 Unexpected login attempts or account changes
- 🚩 Messages claiming to be from "admin" asking for funds
- 🚩 Prices that are too good to be true
- 🚩 Vendor with no history or suspiciously perfect ratings
Conclusion
Following this checklist doesn't guarantee safety, but it significantly reduces your risk. The dark web requires constant vigilance — stay alert, and prioritize security over convenience.