Basic Principles of Sound Logic for Online and Everyday Privacy

In the age of social networks, there are countless ways our online presence can be used against us by various “adversaries.” Any public information connected to our identity can be used both to our benefit and to our detriment.

To help create personal information security accessible to most people, I’ve compiled a list of basic strategies to help mask the connections between your social media accounts and your real identity. This list is not exhaustive, and it’s important to remember that an adversary with enough resources and time can eventually unravel these connections. However, you can make it much more difficult for them, especially since these steps are easy to implement.

1. Use a Unique or Random Email Address

When trying to hide connections between your social media profiles (including dating sites), it’s important to use a dedicated email address that doesn’t link you to other accounts, your real name, or public activities. Using an address like [email protected] is a bad idea; something like [email protected] is much better. You can even use the names of famous people, for example, ivan.petrov@. Creating a new email address is easy, so there’s no need to use the same one for different accounts.

Whenever possible, use disposable email inboxes. You can install a browser plugin like Bloody Viking, or use services like yopmail.com, temp-mail.ru, or fakemailgenerator.com for temporary email addresses.

2. Choose a Unique Username

Don’t use firstnamelastname69 for accounts you don’t want linked to your “legal” identity. Pick something different. If you need to generate lots of data for various registration forms, use a fake name generator like fakenamegenerator.com.

3. Don’t Use Similar Photos

Don’t use the same photos on profiles you want to keep separate. Reverse image search is powerful and can expose all your secrets. Ideally, don’t use a photo of your face on any profile you don’t want linked to you.

4. Your Browser Tabs Are Your Business

Don’t show which tabs you’re using. People shouldn’t know which sites you visit. If you want to keep your private accounts private, make sure you’re not hinting at their existence through open tabs. Be sure no one is looking over your shoulder when you’re dealing with private information. And never send screenshots that show your tabs. NEVER!

5. Clear Your Browsing History

Do this religiously. As mentioned above, if you don’t want people to know which services or sites you use, don’t leave evidence. Deleting your browsing history is easy. Using Chrome’s incognito mode and closing your tabs after each session is even easier.

6. Pay with Cash

When making purchases related to your identity, pay with cash. If cash isn’t possible, consider using a prepaid card bought with cash. You don’t want bank statements or credit card records linking you to places you’ve “never been” or sites you’ve “never used.”

7. Don’t Use Your Real Name

Pick any other name. There’s absolutely no need to use your real name on social networks. Of course, you CAN if you feel comfortable, but it’s not required. Choose a name you’ll actually respond to.

8. If You Want to Keep Secrets, STAY CALM

Don’t talk about it. Don’t brag, don’t discuss your secrets anonymously. Don’t tell your best friend, your colleagues, or a stranger at a bar. Just SHHH. STOP TALKING.

9. Use Strong Passwords

“Password,” “Passw0rd,” “password123,” etc. are not good enough. Use strong, unique passwords with special characters (*,%,$,^,@,!,+,-) for every site or service. Even better, use a password manager with a very strong master password.

10. Don’t Post Identifying Information

If you want to keep your profile secret, don’t share details that can identify you. Keep your workplace, school, tattoos, and that freckle on your left butt cheek private; there’s no benefit to sharing these details on profiles you don’t want linked back to you.

11. Relying on “Plausible Deniability” Is a Huge Mistake

If your personal information security is so weak that you have to rely on “plausible deniability,” you’re unlikely to pull it off. It’s much safer to use false information from the start than to try to deny leaked information later. If your defense is “I have no idea what you’re talking about,” you’re setting yourself up for failure.

12. Being Recognized Means Failure

Don’t hold secret meetings in places you regularly visit. It only takes one coworker, lover, or friend to call you by the wrong name and blow your cover. Choose a place where you’re unlikely to be recognized, dress differently, and don’t use your usual hangouts for secret meetings.

When leaving home, turn off your cell phone. Your secret meeting won’t stay secret if both you and your contact have your phones on during the meeting. This is direct evidence you were together at a certain time.

13. Alibis Can Be Useful, But Are Hard to Plan

The problem with many alibis is that they require someone else to lie for you, which breaks rule number 8. If you’re going to create an alibi, make sure you fabricate (carefully plan) the evidence instead of relying on false witnesses.

14. Strict Separation

The first rule of Fight Club is: don’t talk about Fight Club. The second rule of Fight Club is: DON’T TALK ABOUT FIGHT CLUB. This rule works both ways. Don’t discuss your secret life in your everyday existence, and don’t discuss your daily life in your secret one. Just don’t do it. Keep them completely separate; no overlaps, no hints, nothing.

15. Maintain Composure

If you want to get away with keeping secrets, you must stay calm. Remember this when you’re nervous or anxious. Don’t giggle every time someone says the word “secret.” Be aware of your facial expressions and how you react to people around you. Pay attention to which names you respond to. Stay cool.

16. Don’t Get Cocky

Maintaining a secret identity requires constant vigilance. Personal security can never be guaranteed, and you should never forget that. Cockiness leads to carelessness, and carelessness leads to exposure.

17. Perfection Takes Practice

None of these skills are innate. They all require extensive practice. You’ll often have to start over and keep correcting mistakes. There’s nothing shameful about failure, but remember: the internet never forgets. It’s better to err on the side of caution, add extra information, and understand your movements after properly assessing risks.

Keep in mind, this is by no means an exhaustive list of all possible precautions you can take. These measures also may not help against adversaries with significant time and resources. However, they are a simple way to minimize risks from stalkers, dangerous family members, nosy employers, and potentially even low-level government officials and law enforcement.

Social networks can pose a significant threat to many of us, but with careful management of your identity, you can minimize some of these dangers while maintaining a secure online presence.