Dark web statistics in 2026
This page compiles verifiable statistics on the OnionDir ecosystem and the broader state of the Tor network
in 2026. Our directory figures are updated in real time from our data; data on the global Tor ecosystem
comes from official publications of the Tor Project
(metrics.torproject.org) and public academic studies.
OnionDir directory overview
Breakdown by category
Verification methodology
Every link in the OnionDir directory follows a rigorous verification process before publication and is subject to periodic re-testing. Our methodology rests on four pillars: manual accessibility verification at the time of addition, official source verification to confirm the authenticity of the address, content evaluation to ensure it matches the description, and periodic monitoring to keep data fresh.
Each entry has a lastChecked field visible on its link card, indicating the date of the
last successful check. Addresses whose verification fails three consecutive times are switched to
"offline" status or removed from the directory depending on context. Exceptions are made for the
Dismantled Platforms category, where entries are deliberately
kept after takedown as historical references.
The "unknown" status is applied to services whose accessibility is intermittent or whose automated verification regularly fails without the service being abandoned. This status serves as a signal to visitors to check availability themselves before undertaking something important.
For services listed with a clearnet URL (e.g., tuta.com rather than a full .onion address),
two reasons are possible: either the service does not publicly expose a .onion address (only its clearnet
URL is official), or its .onion address changes too frequently to maintain reliably. In both cases, the
clearnet URL allows users to find the current .onion address on the service's official site.
State of the Tor network in 2026
Beyond our directory, the Tor network as a whole presents interesting statistics published in real time by the Tor Project at metrics.torproject.org. This data contextualizes our selection within the global ecosystem.
The network comprises approximately 7,000 to 8,000 active volunteer relays, spread across more than 100 countries. This decentralized infrastructure routes traffic for between 2 and 3 million daily users, whose geographic distribution shifts with global political events: a sharp rise in Iran during the 2022–2023 protests, in Russia since the official blocking of tor.org in 2021, in Belarus, and in Turkey. France averages between 15,000 and 30,000 daily Tor users according to measurements.
The number of active .onion hidden services at any given moment ranges between 30,000 and 80,000, depending on measurement methods and the time period. These figures contradict media portrayals that present the dark web as a "gigantic" universe. In reality, the entire Tor dark web represents less than 0.01% of the size of the internet in terms of site volume. For the full comparison, see our article Dark Web vs Deep Web.
Total bandwidth available on the Tor network exceeds 500 Gbit/s in 2026, sufficient to comfortably serve its user population for standard web browsing. Perceived speeds per user vary considerably depending on the circuit, ranging from 500 Kbit/s to a few Mbit/s.
Major historical law enforcement operations
The history of the dark web is punctuated by international law enforcement operations that have dismantled successive major marketplaces. This timeline offers perspective on the evolution of investigative techniques and the resilience — or lack thereof — of criminal platforms.
- October 2013 — Seizure of Silk Road, arrest of Ross Ulbricht (DEA, FBI)
- November 2014 — Operation Onymous, simultaneous closure of over 400 .onion services including Silk Road 2.0 (Europol, FBI)
- July 2017 — Operation Bayonet, seizure of AlphaBay followed by Dutch police takeover of Hansa for one month (DEA, Politie, FBI)
- May 2019 — Seizure of Wall Street Market (BKA, FBI, Dutch police)
- August 2020 — Empire Market exit scam, ~$30M in Bitcoin taken by operators
- January 2021 — Seizure of DarkMarket, presented as the largest marketplace at the time of its closure (BKA, Europol)
- January 2025 — Presidential pardon of Ross Ulbricht by Donald Trump
For details on each of these cases, see our Dismantled Platforms category (strictly educational and historical).
Qualitative composition of the directory
Beyond raw numbers, the composition of our directory reflects a clear editorial stance: prioritizing legitimate, useful, and durable services. Approximately 40% of entries relate to privacy protection (anonymity tools, encrypted email, peer-to-peer messaging). Approximately 20% are international media outlets offering .onion versions to bypass censorship. Approximately 15% are specialized search engines and directories. The remainder is split among community forums, hosting services, cultural curiosities, and historical references.
This composition contrasts with the dominant media image of the dark web as a primarily criminal environment. Academic studies (King's College London, Terbium Labs) estimate that around 57% of active .onion sites contain illicit material, but traffic by volume flows overwhelmingly toward legitimate services (BBC, Facebook, ProtonMail, and DuckDuckGo together likely attract more unique visitors than all illegal marketplaces combined).
Project history
OnionDir is an evolving editorial project. This section documents the key milestones of its growth.
- April 2026 — Project launch and first publication of the directory with 83 verified links across 11 categories.
- April 2026 — Publication of the three editorial pillars: unusual FAQ (50 questions), 50 myths debunked, Top 30 unusual sites.
- April 2026 — Blog launched with 9 long-form articles on Tor, the dark web, and the privacy ecosystem.
- April 2026 — Publication of the technical glossary with over 50 defined terms.
- April 2026 — Addition of the Dismantled Platforms category for historical and educational purposes.
The future roadmap includes continuous blog enrichment, the addition of new terms to the glossary, and expansion of the directory as new legitimate .onion services emerge. Major updates are documented in our changelog.
Sources and transparency
We explicitly document our sources for the figures presented on this page. Our directory statistics come directly from our database, generated automatically with each site build (no manual manipulation). Figures on the global Tor ecosystem come from the Tor Project (metrics.torproject.org), a public statistics service operated by the nonprofit organization that maintains Tor.
Academic estimates on the composition of the dark web come notably from the reference study "Cryptopolitik and the Darknet" by Daniel Moore and Thomas Rid (King's College London, 2016), published in the journal Survival, as well as from Europol's IOCTA reports. For historical law enforcement operations, primary sources are the official press releases of the agencies involved (FBI, DEA, BKA, Europol) and coverage from specialist outlets such as Wired, The Verge, Motherboard/Vice, and Krebs on Security.
If you wish to use these figures in a publication, you may cite OnionDir as the source for directory data, and refer to primary sources for contextual figures on the Tor ecosystem. Any request for additional data or methodological clarifications can be submitted via our contact page.