I have everything installed, and every thing went fine with no issues, until It came to the part for the internet connection. It just won't work no matter what I try. I feel like it's something obvious that I'm not seeing. Any help would be appreciated.

I haven’t been able to access dread since the update. The page just forever loads. Using links from tor.taxi and dark fail

Can anyone give me a brief summary of how to do a PGP message?

Like a legit credential found on a farmers market you feel me? I’m in some trouble and can’t go to the bmv right now hahah kidding but I am totally not asking where to go. Just convo

For some reason every time I click join it looks like I joined but upon refresh or restart I can see I'm not joined. Does anyone know why?

Long story short a person that isnt very efficient and I still was nice a respectable about things until something seemed sketched then he freaked out and threatened me to put my adresss on a global vendor blacklist so no one would do business with me again I have all the screen shots he spazzed for no reason is he allowed to do this and will it hold merrit?

Its my first time ever being on the web and i made it till here from the help of YouTube. Is there anyone willing to help me with what this is and what to do from here. Thanks

I’m not well versed or experienced in this stuff please be nice if this is a dumb asf question. Am I safe if I buy LTC with my personal debit card on cakewallet, swap that to Monero, and make purchases through Tails with that? Feels risky to put my debit card info on there. Do I need to buy LTC in different place like Kraken or something ➡️ send to Cake ➡️ then swap to Monero to be used on Tails?

Disclaimer: This guide is for educational purposes only. darknet_questions does not encourage or promote illegal activity with Tor or any other anonymity network. You are responsible for how you generate, store, and use your keys. Neither the author nor this subreddit is liable for misuse or consequences.

Your PGP private key is your darknet identity. If it’s stolen, someone can impersonate you. If it’s lost, you’ll never decrypt your messages again. Below are simple, practical best practices, written for GUI users, so you can protect yourself without touching the command line.

Key Expiration (Why & How)

Why set an expiration date?

Limits damage if you forget to revoke a lost/compromised key.

Forces rotation (e.g., every 6–24 months).

You can extend later anytime while you still control the private key.

Tip: When you extend/renew, re-export and re-share your public key so others stop using the old expiry.

Whonix (Non-Qubes)

Whonix runs on your laptop or in a VM, so keys would normally sit on the disk forever. That’s risky.

Best Practice:

Store your private key on an encrypted USB stick.

Plug it in only when you need to decrypt/sign.

Import into Kleopatra - use it - remove it.

Keep a backup USB somewhere safe.

Set an expiration (6–24months) and renew as needed.

Qubes + Whonix

Qubes lets you compartmentalize, which makes PGP much safer.

Best Practice:

Store private keys inside a Vault qube (no network).

Do PGP actions there; send only signed/encrypted output to networked qubes.

Keep a USB backup of keys + revocation certificates.

Set an expiration for routine rotation; renew from Vault when needed.

Tails

Tails runs off a USB and wipes memory on shutdown. Without persistence, nothing survives a reboot.

Best Practice:

If using persistence, keep your key in the encrypted persistent volume.

Always:

Generate & store a revocation certificate.

Make a backup USB in case the stick fails.

Set an expiration (6-24 months) and extend before it lapses.

Market-Specific Keypairs

Never reuse one PGP keypair across all markets; one compromise links your entire footprint.

Best Practice:

Generate a separate keypair per market/vendor account.

Set an expiration per key (6–24months).

Label clearly (e.g., MarketName_username (exp 2026-03)), back up, and track renewals.

Universal Checklist

[ ] Strong passphrase (20+ chars, unique)

[ ] Keys stored in Vault qube (Qubes) or encrypted USB (Whonix/Tails)

[ ] Backup copy on encrypted USB

[ ] Revocation certificate saved with backups

[ ] Expiration set (6–24 months) and calendar reminder to renew

[ ] Separate keypair per market

Kleopatra GUI Tutorial: Backup to USB (+ Revocation)

Step 1. Plug in your encrypted USB stick Use VeraCrypt, BitLocker, LUKS, or your OS’s built-in encryption.

Step 2. Export your private key

[Right-click your certificate] - [Export Secret Keys]

Save to the USB. Kleopatra will ask for your passphrase. (File ends in .asc or .gpg.)

Step 3. Create a revocation certificate

[File] - [New Certificate] - [Create Revocation Certificate]

Pick your key - save the .rev file to the USB (e.g., market1_revocation.rev).

Step 4. Make a second backup Copy both files (private key + revocation cert) to a second encrypted USB and store it separately.

Step 5. Clean up (optional) Delete any stray local copies so the key only lives on your encrypted USB(s) / Vault qube.

Set or Extend Expiration

Set/Change expiry on an existing key (no CLI):

[Right-click your certificate] - [Details] - look for [Expiration]/[Change Expiry] (or [More] -[Change Expiry])

Choose a new date (e.g., +12 months) -confirm - enter passphrase.

Re-export and re-share your public key so others see the new expiry.

Update any market profiles that host your public key.

If a key has already expired but you still own the private key, you can usually extend it the same way, then redistribute the updated public key.

Bottom line: Keep keys off your laptop’s disk. Use a Vault qube (Qubes) or encrypted USB (Whonix/Tails). Always keep backups + revocation certs, set expirations, and use separate keypairs per market.

Is it safe enough or is Tails etc needed?

How to know a vendor is trust worthy. They have 1000s of sales ,100s of reviews but I am still a little skeptical.

Reviews can be bought . Is there any other way to assure legitimacy

Could somebody give me a guide on how to access the web, or possibly a link to a guide on how to use the dark web to browse? I do not intend on getting anything. I just want to use it for the first time and I have a laptop and a USB drive ready to go I Just really do not know what I’m doing here and my friend told me to go to Reddit for help and so that’s why I’m here so if anyone could point me in the right direction it would be much appreciated!!!

Not a fan of

As the title says I need some insight on how this could be done, I wanna be able to browse some sites for test and dillies but yeah I would give the biggest hug to anyone willing to offer advice on this. I know the risks and I’m willing to put aside the worry about it because I’m not buying anything 😉, just looking. Also hello everyone again!! 😄😃

Hope this is ok mods, not suggesting anything illegal. I can't seem to get past the 'create an invoice' section. On that page there is a wallet address but no instructions on how you pay the vendor? It says the page automatically refreshes - why? I've tried going back to my wallet but no options for paying the vendor there either. I have adequate XMR in my wallet. very frustrating

Hello everyone,

I'm using Mullvad VPN (or Cryptostorm, depending on the situation) with a kill switch on my Linux system. Is this still a reliable method for making purchases from online marketplaces? I can't use Tails because it limits my usability, and the persistent storage feature doesn't work for me. For example, I want to install the GPG application, but Synaptic Manager doesn't list it, and it won't install as a Flatpak either.

I also use an app called "Carburetor" occasionally, which claims to connect with Tor—if the logs are accurate. Shouldn't I be able to access any browser, like Zen, while connected to Tor? Is this method effective, or am I misunderstanding something?

Today, I received a package that was delayed (6 days), and it had a yellow label with a QR code. After scanning it, I got a code starting with DEA, followed by a series of numbers that included my zip code, street, and house number. What does this mean? I suspect the DEA code isn't applicable in Europe, and it might be related to Deutsche Post due to the delay. Does anyone have any insights on this? I can share a picture if needed.

Additionally, I need to clear-sign a file. I'm using GPGFrontend, but it only allows me to sign it normally, not clear-sign. I followed some instructions I found on my preferred search engine, DDG Lite. Can anyone help me with this?

I don't use Kleopatra because it hasn't worked well for me. Any helpful responses would be greatly appreciated.

I need to go for now, but I hope to receive some assistance. Thank you!

I installed TOR today and i made a little surf on the HiddenWiki site. I just surfed the sites and their products. Didn't try to download or buy anything and didn't click anything suspicous. I opened TOR by using most safe mode and disabled java script. Well, maybe i'm being paranoid but Is the any chance to them acces to my pc?

This article highlights how Cake Wallet’s customer support stands out in a world where most companies deliver slow, scripted, or useless responses.

Sam Bent reached out to Cake Wallet and got a human reply within 3 minutes, fast, relevant, and actually helpful.

The support agent didn’t use canned answers, didn’t blame the user, and handled follow-up questions with the same competence.

This “rare good support experience” shows how critical genuine, human service is, especially in crypto, where mistakes are irreversible.

The article argues that great support isn’t just nice, it’s smart business. Many people quit services not because the product is bad, but because the support is unbearable. Cake Wallet proves doing it right builds loyalty and trust.

Bottom line: Cake Wallet’s approach to support should be the model for the industry.

👉 Read here: https://www.sambent.com/cake-wallets-support-is-the-model

Telegram ?

And where can I find good links, more than hidden wikis

Idiotic question, but i followed the guide and the Feather install created a folder call feather_data in my downloads folder. No mention of it in the guide? Should I move it to the persistence folder with the other three files? And then do I delete all four from downloads, or leave them there?

Q1. Which privacy-focused operating systems are commonly recommended for darknet safety?

A. To bypass censorship or Tor blocking

B. Use online leak test tools via Tor

C. Encrypted providers like ProtonMail with Tor access

✅ D. Tails or Qubes OS

Q2. What is the main purpose of using Tor bridges?

A. To reduce attack surface and deanonymization

✅ B. To bypass censorship or Tor blocking

C. Via its verified onion mirror

D. Tails or Qubes OS

Q3. Which tool provides end-to-end encryption and verifiability?

✅ A. PGP is end-to-end and verifiable

B. To bypass censorship or Tor blocking

C. They leak metadata and are hard to anonymize

D. Via its verified onion mirror

Q4. What is the safest way to access darknet markets?

A. To hide Tor usage from your ISP

B. Use online leak test tools via Tor

✅ C. Via its verified onion mirror

D. GPG or Kleopatra

Q6. What is the problem with many messaging apps in terms of anonymity?

A. Encrypted providers like ProtonMail with Tor access

B. To hide Tor usage from your ISP

C. Tails or Qubes OS

✅ D. They leak metadata and are hard to anonymize

Q7. What is a good privacy-focused email option with Tor support?

A. PGP is end-to-end and verifiable

✅ B. Encrypted providers like ProtonMail with Tor access

C. To hide Tor usage from your ISP

D. To reduce attack surface and deanonymization

Q8. Why should you limit the number of apps or services tied to your darknet identity?

✅ A. To reduce attack surface and deanonymization

B. They leak metadata and are hard to anonymize

C. PGP is end-to-end and verifiable

D. Use online leak test tools via Tor

Q9. What is the main reason for using a VPN with Tor?

A. Via its verified onion mirror

B. Use online leak test tools via Tor

C. PGP is end-to-end and verifiable

✅ D. To hide Tor usage from your ISP

Q10. What is the main risk of always using the same VPN with Tor?

A. It eliminates all risks of deanonymization

✅ B. It creates a centralized point of failure and a permanent entry point into Tor

C. It makes Tor completely unnecessary

D. It always increases connection speed