Learn
287 articlesCategory: All
BasicsWhat is anonymity?Anonymity is not just hiding your name. Learn how identity risk arises from information, behavior, and context.anonymityprivacyidentity riskNetworkWhat Is DNS?DNS maps domain names to IP addresses, and DNS queries can reveal which domains someone tried to view.DNSnetwork basicsprivacyNetworkWhat Is an IP Address?An IP address is not a personal name, but it can be an important clue for understanding the source of communication.IP addressnetwork basicsanonymityNetworkWhat Is a Protocol?Protocols are communication rules. DNS, HTTP, HTTPS, TCP, UDP, and TLS each protect and expose different parts of communication.protocolsnetwork basicsTLSPublishing workflowAnonymity for WhistleblowersWhistleblower anonymity requires checking internal logs, document metadata, access scope, contact paths, devices, networks, and content clues.whistleblowingsource protectionanonymityWhistleblowersHow Whistleblowers Should Think About AnonymityWhistleblower anonymity requires thinking beyond communication routes, including internal logs, document sources, safety, legal risk, consultation, tools, and publication scope.whistleblowingsource protectionanonymityWhistleblowersWhat to Check Before WhistleblowingBefore whistleblowing, check purpose, materials, devices, networks, internal logs, official destinations, content clues, post-submission behavior, and consultation needs.whistleblowingpre-publication checksource protectionPublishing workflowAnonymity Check Before WhistleblowingA pre-submission anonymity checklist for whistleblowers covering documents, devices, networks, intake points, timing, behavior, and consultation.whistleblowingchecklistsource protectionWhistleblowersAuthor Information in Documents, PDFs, and Office FilesDocuments, PDFs, and Office files may retain author information, edit history, comments, file paths, annotations, hidden data, and evidence-related clues.documentsmetadatawhistleblowingWhistleblowersPosting Times to Avoid in WhistleblowingWhistleblowing timing can connect with document access, meetings, work logs, life rhythm, and post-submission behavior.whistleblowingtiming correlationsource protectionWhistleblowersPre-Publication Checklist for WhistleblowersBefore publishing or submitting whistleblowing material, check the threat model, files, cloud history, devices, destination, and post-publication behavior.whistleblowingpre-publication checksource protectionWhistleblowersWhat Whistleblowers Should Check Before Using Information Submission ToolsBefore using submission tools, check the destination, material, environment, minimum necessary information, and behavior after sending.whistleblowinganonymous submissionssource protectionWhistleblowersThe Threat Model to Think About First in WhistleblowingWhistleblowing threat models organize who may identify the source, what to protect, leak paths, risk level, and next countermeasures.whistleblowingthreat modelsource protectionNetworkHiding your IP does not make you anonymousAn IP address is only one clue. Accounts, browser state, metadata, timing, and content can still identify you.IP addressanonymitybrowser fingerprintingBehavioral correlationCorrelation patterns that break anonymityNetwork, accounts, writing style, content, time, images, files, and past information can combine into identification risk even when each clue seems small.correlationlinkabilitythreat modelURL trackingWhat is URL tracking?Tracking parameters and unique tokens in URLs can reveal where a link came from and connect activity across contexts.URL trackingtracking parameterspre-publish checkURL trackingUnknown URL ParametersUnknown URL parameters may be needed for display, tracking, individual identification, or authentication, so check them one by one before sharing.URL reviewquery stringtracking parametersURL trackingHow URLs Can Break AnonymityURLs can reveal search terms, IDs, session-like data, tracking parameters, sharing routes, permissions, and logged-in service context.URL reviewquery stringtracking parametersURL trackingUTM ParametersUTM parameters are common analytics values, but they can reveal access context and become correlation material when links are shared anonymously.UTMtracking parametersURL reviewMetadataRemoving image metadataImages can contain EXIF, GPS, device, and editing data. Check and remove metadata before anonymous publication.metadataEXIFGPS metadataBasicsHow to Think About Identification RiskIdentification risk is not determined only by real names. Candidates can narrow through places, time, writing style, images, and surrounding people.identification riskanonymitycorrelationMetadataHow Images Can Break AnonymityImages can reveal locations, routine places, affiliations, devices, capture times, and people involved through metadata and visible clues.imagesmetadataidentification riskMetadataRisk of Identity Inference From Backgrounds, Reflections, and Text in ImagesBackgrounds, reflections, and text inside images can reveal routine places, identity, workplaces, schools, and people around you.imagesreflectionsbackground cluesPast information and removalWhen Your Photo Is Used on a Company Site or Someone Else's SiteLearn what to check, how to request removal or correction, and how to reduce correlation when photos cannot be deleted.photosremoval requestssearch resultsPast information and searchRisks From Image Search, Face Images, and IconsImage search, face images, and icons can connect anonymous activity to past accounts, real-name information, routine places, and people nearby.image searchface imagesiconsPast information and searchHow to Check Past Information With Image SearchUse image search carefully to check where past icons, face photos, artwork, event photos, rooms, belongings, and similar images remain.image searchpast informationcorrelationIndividualsPre-Publication Checklist for IndividualsBefore everyday posts, check names, faces, addresses, family, friends, photos, videos, past posts, file sharing, and publication scope.pre-publication checkindividualsprivacyPublishing workflowHow to Inspect Documents Before PublishingBefore publishing documents, inspect body text, comments, revision history, metadata, filenames, conversion output, and sharing methods.documentsmetadatapre-publication checkNetworkIP address basicsLearn what IP addresses can reveal, why hiding an IP is not enough for anonymity, and how IP relates to logs, cookies, accounts, and time.IP addressanonymitynetwork logsJournalistsReply risks and post-publication handling after reportingAfter publication, replies, corrections, inquiries, source contact, controversy response, and follow-up reporting can add clues about sources.journalismsource protectionpost-publication handlingJournalistsHow journalists should think about anonymityJournalist anonymity focuses on who may be suspected of providing information, including sources, witnesses, materials, contact paths, and article details.journalismsource protectionthreat modelPublishing workflowAnonymity for journalistsJournalist anonymity protects sources and people involved through contact separation, file checks, article review, and post-publication handling.journalismanonymitysource protectionJournalistsContact methods and account separation for journalistsSeparate contact with sources from personal accounts, devices, clouds, notifications, and storage to reduce traces around sources.journalismaccount separationsource protectionJournalistsCommunication traces left by contact with sourcesContact with sources leaves traces in email, DMs, calls, cloud links, video meetings, first contact, and post-publication investigations.journalismcontact tracessource protectionJournalistsPre-publication checks for photos, video, and audio materialsBefore publishing media, check faces, backgrounds, reflections, voices, metadata, editing output, and source protection risks.journalismmediapre-publication checkJournalistsChecking metadata in reporting notes, recordings, and photosReporting notes, recordings, photos, videos, PDFs, and screenshots can reveal sources through metadata and surrounding information.journalismmetadatasource protectionJournalistsPre-Publication Checklist for JournalistsBefore publishing, journalists should check sources, contact paths, materials, article text, publication timing, and check records for source protection risks.journalismpre-publication checksource protectionJournalistsWhat Journalists Should Check Before PublishingCheck body text, headlines, materials, publication time, reader inference, and post-publication responses before publishing reporting.journalismpre-publication checksource protectionJournalistsRisks From Publication Timing and Location InformationPublication timing, reporting locations, photo backgrounds, capture angles, and material version details can narrow possible sources.journalismtiming correlationlocation informationJournalistsPublication Workflow for Protecting Sources and YourselfProtect sources, reporters, newsrooms, people involved, and people who provided materials by checking originals, publication copies, review roles, records, and post-publication response.journalismsource protectionpublication workflowJournalistsRisk of Source Inference From Published StoriesPublished stories can reveal sources through timelines, departments, meetings, quotations, photo angles, material types, specificity, timing, and later additions.journalismsource protectionsource inferencePublishing workflowAnonymity for Protecting SourcesSource protection goes beyond hiding names: contact paths, reporting time, material content, backgrounds, metadata, and post-publication reactions can all identify sources.journalismsource protectionanonymityJournalistsThreat Model for Protecting SourcesBefore contact, define who to protect from, what to protect, leak paths, risk levels, article edits, and precautions to explain to sources.journalismsource protectionthreat modelText and contentWhy personal stories, timelines, and expertise can reveal identityPersonal stories can narrow candidates through sequence, timing, expertise, roles, relationships, past posts, files, and posting time.personal storiestimelineexpertiseMetadataMetadata left in submissions and file sharingSubmissions and shared files can reveal sources through metadata, filenames, author information, channel clues, and post-submission handling.metadatasubmissionsfile sharingMetadataChecking SVG metadataSVG files are text/XML and may retain comments, layer names, IDs, hidden text, tool information, filenames, and visible clues.SVGmetadataXMLMetadataSVGO and manual XML checksSVGO optimizes SVG files, but anonymity still requires local processing, manual XML review, visual checks, and review of bundled files.SVGOSVGXMLNetworkWhat Is Tails?Tails helps separate a temporary work environment and Tor-routed communication, but it does not erase content, metadata, login state, or real-world records.TailsTorenvironment separationNetworkWhat Is Whonix?Whonix separates a Tor gateway from a work environment, but login state, content, metadata, host behavior, and real-world records still matter.WhonixTorvirtual environmentNetworkDifferences Between Whonix, Tails, and Qubes OSCompare anonymous OSes and separated environments by purpose, difficulty, protected scope, and remaining risks.WhonixTailsQubes OScomparisonNetworkTCP/IP BasicsLearn TCP/IP as a protocol suite, including IP, TCP, UDP, DNS, HTTP, TLS, ports, web flow, and anonymity cautions.TCP/IPnetwork basicsprotocolsNetworkThe Difference Between TCP and UDPTCP and UDP are chosen by communication purpose, not rank. Learn byte streams, datagrams, QUIC, HTTP/3, DNS, Tor, and anonymity relevance.TCPUDPnetwork basicsNetworkWhat Is Technical Information Correlation?IP, DNS, cookies, User-Agent, WebRTC, login state, browser state, devices, and operations can combine into identification risk.technical correlationbrowser stateidentification riskBasicsWhat Is a Trust Model?A trust model clarifies who can see what, because anonymity tools often move visibility and trust rather than making information disappear.trust modelVPNTorNetworkWhat Is TLS?Learn what TLS protects in HTTPS, including confidentiality, integrity, and authentication, and why TLS is not anonymization.TLSHTTPSnetwork basicsIndividualsBasics for Making Routine Places Harder to InferRoutine places can be inferred from stations, shops, photos, posting times, school events, weather, and repeated local clues.routine placeslocation informationidentification riskText and contentRisks From Location Information and Routine PlacesLocation information is not only GPS. Text, photos, time, local topics, and past posts can combine to reveal routine places.location informationroutine placescorrelationAccounts and operationWhy login state breaks anonymityLogin state can connect activity to real-name accounts even when VPNs, Tor, cookie deletion, or separate browsers change other clues.login stateaccount correlationenvironment separationURL trackingHow to Review URLs ManuallyReview URL domains, paths, query strings, fragments, shortened links, tracking parameters, and personal information before sharing.URL reviewtracking parameterspre-publication checkMetadataWhat Is Metadata?Files can contain metadata such as author, time, location, device, software, and edit history that affects anonymity.metadatafilespre-publication checkMetadataBasics of EXIF and GPS InformationEXIF and GPS metadata in photos can reveal capture time, location, device, and editing environment even when the image looks safe.EXIFGPS metadataphotosNetworkWhat is a mixnet?Learn how mixnets use relays, mixing, delay, encryption, and cover traffic to reduce metadata and traffic-correlation clues.mixnettraffic correlationmetadataNetworkHow to Think About Mixnets and NymVPNMixnets and NymVPN relate to communication-volume and timing correlation, but they do not replace operational separation.mixnetNymVPNtraffic correlationNetworkCautions About Mobile Networks and AnonymityMobile networks change the route, but app logins, location information, photos, payments, and posting time still correlate.mobile networklocation informationanonymityAccounts and operationCorrelation Risk When Posting Across Multiple SitesUsing the same names, images, links, files, timing, and topics across sites can connect separate anonymous accounts.correlationmulti-site postingaccount correlationNetworkNetwork Basics to Know Before Thinking About AnonymityUnderstand IP addresses, DNS, HTTP/HTTPS, browsers, cookies, and logs before judging anonymity from tools alone.network basicsIP addressDNSNetworkWhat Is a Network Layer Model?Understand the TCP/IP model layers and why IP, TCP/UDP, DNS, HTTP, cookies, and User-Agent belong to different parts of communication.network basicsTCP/IPanonymityNetworkCorrelation Between Communication Time and Behavior PatternsCommunication time, volume, intervals, posting time, and real-world activity can correlate with logs and narrow anonymity.timing correlationbehavior patternsnetwork logsBehavioral correlationCorrelation Between Posting Time and Daily RhythmPosting times, reply times, weekday patterns, real-name account overlap, scheduled posts, and file times can reveal daily rhythm and weaken anonymity.time correlationposting timedaily rhythmNetworkTime Zone and Language Setting RisksTime zones and language settings are not direct identity information, but combined with IP, post timing, content, screenshots, files, and fingerprints, they become environment clues.time zonelanguage settingsbrowser fingerprintingBehavioral correlationTiming Correlation Between Events and LogsEvent timing, access logs, VPN or Tor connection times, login history, cloud edit history, file timestamps, drafts, and scheduled posts can connect separate activity.timing correlationlogsoperational securityNetworkPacket and Routing BasicsLearn how data is split into packets, how routers forward them, and what encryption does not fully hide along the communication path.network basicspacketsroutingNetworkWhat Is NymVPN?NymVPN is a VPN from the Nym project with a mixnet design philosophy and an approach to communication metadata protection, but logins, cookies, content, and payment traces remain.NymVPNmixnetmetadataNetworkWhat Is NymVPN?: Differences From VPNs and TorCompare NymVPN, ordinary VPNs, and Tor by visible IP, ISP visibility, relay trust, traffic-volume correlation, and operational mistakes.NymVPNVPNTorActivistsRisks From Location Information, Movement History, and Routine PlacesActivity posts can reveal gathering places, routes, venues, allies, and routine places through location information and posting time.activismlocation informationroutine placesBehavioral correlationWhat Is Place Correlation?Place correlation links post content, images, time, movement, and routine-place clues to infer where someone or people involved may be.place correlationroutine placesidentification riskText and contentPlace and Time CluesPlace names, stations, facilities, capture times, posting times, and immediate posts can connect anonymous activity to real-world behavior.place cluestime correlationidentification riskText and contentHow to Blur Place Names, Workplaces, Schools, and Routine PlacesLearn how to reduce identifying detail in places, workplaces, schools, and routine places while preserving the necessary meaning.blurringworkplaceschoolroutine placesPast information and searchRisk of Identity Inference From Past Social Media PostsPast posts, profiles, handles, replies, images, friendships, and search results can connect to current anonymous activity.past social mediaidentification riskcorrelationPast information and searchCases Where Past Posts Connect to Current Anonymous ActivityPast blogs, social media, forums, images, links, timing, and writing style can connect to current anonymous activity.past informationcorrelationanonymous activityPast information and searchChecking Old Blogs and Old ProfilesCheck old handles, bios, link lists, profile images, regions, schools, workplaces, hobbies, and writing before anonymous activity.old profilesold blogspast informationPast information and removalHow to Deal With Past Personal Information You Do Not Want KnownFind, organize, and respond to old profiles, handles, images, search results, and other past information that can connect to current anonymous activity.past informationremoval requestscorrelationAccounts and operationRisks From Old Handles and Search ResultsOld handles and similar names can reveal past posts, profiles, images, relationships, and communities through search results.old handlessearch resultscorrelationPast information and searchHow Old Images Affect Current AnonymityOld icons, photos, artwork, backgrounds, metadata, filenames, and third-party pages can connect past accounts to current anonymous activity.old imagesimage searchmetadataPast information and removalAnonymity for Ordinary IndividualsOrdinary people can reduce unnecessary identification paths from posts, photos, routine places, old handles, family information, and cloud sharing.anonymitypersonal informationroutine placesIndividualsPast Information Ordinary Individuals Should Check FirstStart by checking old social media, blogs, profiles, images, handles, school or workplace pages, search results, archives, and related people.past informationsearch resultspersonal informationText and contentLeakage of Personal InformationEveryday details such as family, routine places, work, school, health, photos, files, and URLs can combine into identification clues.personal informationidentification riskpre-publication checkMetadataPersonal Information Left in FilenamesFilenames can expose names, dates, places, affiliations, archive contents, sequence clues, and folder paths before a file is opened.filenamespersonal informationmetadataIndividualsHow to Check Personal Information Left in Search ResultsSearch defensively for names, old handles, profile text, affiliations, images, snippets, URLs, and old pages while accounting for search logs.search resultspersonal informationimage searchPast information and removalSteps to Reduce Past InformationInventory past information, prioritize risks, edit what you control, request removal, check archives, and adjust future posting rules.past informationremoval requestspre-publication checkPast information and searchSearch Behavior RisksSearch terms, search history, login state, result URLs, image search inputs, and saved results can reveal interests and preparation for anonymous activity.search behaviorsearch historyenvironment separationURL trackingCases Where Search Terms or Personal Information Remain in URLsSearch result, map, reservation, inquiry, translation, and site-search URLs can retain search terms and personal information in query strings.URL reviewquery stringpersonal informationURL trackingInformation Left in Translation URLs and Search URLsTranslation and search URLs can retain input text, search terms, place names, language settings, target URLs, and investigation intent.URL reviewsearch termstranslationPast information and searchChecking Personal Information Left in Search ResultsSearch for names, handles, email addresses, usernames, affiliations, and images to understand what past information is visible from outside.search resultspersonal informationpast informationPast information and removalHow to Think About Reducing Information From Search ResultsSeparate original pages, search results, archives, and republished copies when reducing personal information visible through search.search resultsremoval requestspersonal informationPast information and searchWhat Is the Wayback Machine?Learn how the Wayback Machine can show past pages, old profiles, images, PDFs, links, and saved dates that affect anonymity.Wayback Machinearchivespast informationPast information and searchRisks From the Wayback Machine and ArchivesArchives can retain deleted blogs, old profiles, handles, images, and event pages that may connect with current anonymous activity.Wayback Machinearchivesidentification riskBasicsRisks From Information You Cannot Delete After PublishingDeletion does not recall screenshots, quotes, notifications, search results, archives, reposts, or copies already kept by viewers.post-publication handlingarchivesremoval requestsFinal checksWhat to Pause and Check Before Anonymous ActivityBefore posting, sending files, replying, or acting under uncertainty, pause to check accounts, content, images, files, time, and risk.anonymous activitypre-publication checkoperational securityMetadataPDF Metadata RisksPDFs can retain author names, creation software, annotations, embedded files, forms, redaction failures, filenames, and sharing-path clues.PDFmetadataredactionMetadataInvisible Risks Left in PDFsPDFs can retain creators, app information, annotations, hidden text, embedded files, organization clues, and redaction mistakes.PDFmetadataredactionBy situationPreparation for People Starting to Post AnonymouslyBefore creating an anonymous account, prepare the purpose, environment, registration details, username, topic boundaries, and stop rules.anonymous postingenvironment separationpre-publication checkMetadataRemoving PDF metadataPDFs may contain author names, hidden text, comments, and embedded files. Inspect the file, not only the visible page.PDFmetadata removalredactionMetadataMetadata in Office filesOffice documents can contain authors, comments, tracked changes, hidden sheets, notes, and embedded data.Office filesdocument propertiesmetadataMetadataVideo and audio metadataVideo and audio files can reveal device, time, software, project data, voice, and background clues.metadataaudiovideoText and contentIdentification risk from writing styleWriting style, expertise, examples, and repeated patterns can link anonymous text to previous public writing.stylometrywriting styleidentification riskText and contentIdentification From Occupation and AffiliationOccupation, affiliation, role, years of experience, region, timing, and internal terms can combine to narrow identity candidates.occupationaffiliationidentification riskMetadataAuthor Information in Office FilesOffice files can retain authors, company names, last modified by, templates, comments, tracked changes, hidden sheets, and links.Office filesauthor informationmetadataWhistleblowersMetadata Risks in Office and PDF FilesOffice files and PDFs can reveal authors, edit history, hidden elements, redaction problems, source flow, and people involved.Office filesPDFmetadataAccounts and operationWhen Offline Protection Is Strong for Online ActivityOffline protection can reduce remote attack surfaces for keys, cameras, and sensitive materials, while physical risks still remain.offline protectionattack surfacephysical safetyBasicsWhat Is OPSEC?OPSEC is operational security: deciding who and what to protect, then reducing clues from tools, behavior, files, replies, time, and past information.OPSECoperational securitythreat modelText and contentRisks From Organization-Specific LanguageOrganization-specific terms can identify people even after names are removed; generalize them while preserving the meaning readers need.organization languageidentification riskpre-publication checkNetworkThe OSI Reference Model and the TCP/IP ModelLearn how OSI and TCP/IP layer models separate IP, TCP/UDP, TLS, HTTP, DNS, cookies, browser state, and anonymity risks.network basicsOSI modelTCP/IPBasicsHow OSINT Breaks AnonymityOSINT can connect anonymous activity to past public information through usernames, images, writing style, archives, and search results.OSINTpast informationcorrelationBasicsWhat Is OSINT?OSINT means Open Source Intelligence: checking public information defensively to understand exposure, correlation, limits, and false links.OSINTpublic informationdefensive checkNetworkWhat Are Port Numbers and Sockets?Learn how ports, TCP/UDP, source and destination ports, 5-tuples, and sockets route communication to services and applications.network basicsportsTCP/UDPPublishing workflowHow to use Anonymity SenseLearn how to use Check, Learn, and Course together and connect them to pre-publication judgment.Anonymity SenseCheckLearnCoursepre-publication checkNetworkThe difference between HTTP and HTTPSLearn the difference between HTTP and HTTPS, what HTTPS protects, and why destinations and access logs do not disappear.HTTPHTTPSencryptionAccounts and operationRisks of reusing icons and profile imagesLearn how reusing the same images or profile text can connect accounts.iconsprofileMetadataID3 tag risksLearn how ID3 tags, titles, and creation information remaining in audio files affect anonymity.audioID3tagsBehavioral correlationWhat is account correlation?Account correlation can connect anonymous, real-name, and past accounts through usernames, icons, profiles, registration details, follow relationships, and login state.account correlationanonymous accountscorrelationAccounts and operationAccount separation basicsLearn what to separate when keeping anonymous and real-name accounts apart, including identifiers, relationships, topics, timing, browsers, and cloud storage.account separationcorrelationoperational securityBehavioral correlationWhat is account separation?Account separation means separating the real-name side and the anonymous side in identifiers, environments, and behavior, not just creating another account.account separationidentifiersoperational securityActivistsReply, backlash, and tracking risks after publishingFor activist posts, risk can grow after publication through replies, DMs, backlash, harassment, screenshots, and old-post digging.activismharassmentpost-publication operationBehavioral correlationAnonymity for activistsActivist anonymity protects people, places, contact networks, materials, and posting times, not only names.activismanonymityoperational securityActivistsHow activists should think about anonymityActivist anonymity protects allies, participants, supporters, venues, travel routes, and contact networks, not only the speaker.activismanonymitythreat modelBehavioral correlationActivist anonymity checkCheck devices, accounts, contact networks, photos, posting times, replies, and shared links before, during, and after activist activity.activismpre-publication checksafetyActivistsBehavioral correlation activists should watch forPosting times, event participation, movement, photos, topics, and reply habits can make activity patterns visible over time.activismbehavioral correlationoperational securityActivistsSeparating devices, browsers, and network environmentsActivist accounts can still correlate through shared devices, browsers, cookies, notifications, sync, history, and network environments.activismenvironment separationoperational securityActivistsSeparating activist accounts and personal accountsAccount separation means separating registration details, devices, browsers, materials, relationships, payments, and daily operations.activismaccount separationoperational securityActivistsPre-publication checklist for activistsCheck people, places, times, social media accounts, files, links, and post-publication response before activist communication goes out.activismpre-publication checkoperational securityActivistsSocial media operation and account separationActivist social media should be operated separately from personal social media, including accounts, browsers, materials, content, permissions, and daily rules.activismaccount separationsocial mediaActivistsSurrounding information visible in photos and videosPhotos and videos can reveal participants, venues, travel routes, surrounding facilities, reflections, audio, and posting times.activismphotos and videospre-publication checkBy situationAfter postingAnonymity can change after posting through replies, additions, DMs, deletion, reposting, backlash response, search results, and archives.post-publication operationanonymityevidence preservationBy situationIdentification risk from replies after publicationReplies, DMs, and added evidence after publication can reveal region, timing, workplace, people involved, and other clues that narrow identity candidates.repliesidentification riskpost-publication operationBasicsWhy personal information becomes dangerous in the AI surveillance eraLearn why personal information, images, writing style, search results, and past posts become easier to connect in the AI era.AIpersonal informationsurveillanceMetadataInformation that remains in AI-generated imagesAI-generated images can still reveal prompts, metadata, account history, shared URLs, filenames, and reused source materials.generative AIimagesmetadataBasicsWhy the barrier to identification is lower in the AI surveillance eraAI and search technologies make it easier to organize posts, images, writing style, translation, and small clues that narrow identity candidates.AIsurveillancecorrelationText and contentText Anonymization in the AI EraAI and search make it easier to find correlations in writing style, topics, experience timelines, expertise, past posts, images, files, and URLs.AItextwriting styleText and contentClues in Text That Can Suggest IdentityText can reveal identity clues through content, writing style, insider-only information, granularity, short posts, and account-wide patterns.textpersonal informationplacetimeText and contentHow Text and Speech Can Break AnonymityText and speech can weaken anonymity through experience, topic combinations, writing style, voice, dialect, background sounds, replies, and DMs.textspeechroutine placeswriting styleText and contentWhy Identity Can Be Inferred From Writing StyleWriting style can become correlation material through sentence endings, punctuation, phrasing, topic choices, AI-era comparison, and long-term overlap.writing styletextcorrelationBehavioral correlationTopic CorrelationRepeated topics, expertise, regions, communities, timing, and real-name overlap can become a behavioral fingerprint over time.topic correlationbehavioral traceidentification riskNetworkWhat Is Tor?Tor makes it harder to directly connect the user and the destination through multiple relays, but login state, content, files, and timing still matter.Toranonymitynetwork routePublishing workflowTor Browser BasicsUse Tor Browser without mixing real-name logins, extensions, sync, downloaded files, non-browser app traffic, or ordinary browser habits.Tor Browserbrowser fingerprintingoperational securityNetworkWhat Is a VPN?A VPN changes communication-route visibility and the IP visible to destinations, but it also makes the VPN provider a new trusted party.VPNtrust modelnetwork routePublishing workflowChecks When Using a VPNBefore, during, and after VPN use, check purpose, IP visibility, DNS leaks, kill switch behavior, browser state, logins, and after-use traces.VPNDNS leakpre-publication checkNetworkCautions When Using a VPNA VPN changes the visible source IP and route visibility, but the VPN provider becomes a trusted party and browser, account, DNS, and content risks remain.VPNtrust modelDNS leakNetworkWhy VPNs and Tor Alone Are Not Enough for AnonymityVPNs and Tor change route and IP visibility, but logins, cookies, content, writing style, files, timing, and real-world records remain.VPNToranonymityNetworkDifferences Between VPN, Tor, and ProxyCompare VPNs, Tor, and proxies by visible information, trusted parties, scope, use cases, limits, DNS leaks, WebRTC, cookies, and logins.VPNTorproxyNetworkThe Difference Between VPNs and TorCompare VPNs and Tor by purpose, visible parties, trust model, remaining operational mistakes, and why combining them is not automatically safe.VPNTortrust modelNetworkWhat Is a WebRTC Leak?WebRTC can expose browser-side network clues depending on environment, so check IP visibility, browser behavior, VPN scope, and remaining correlation risks.WebRTCVPNbrowser fingerprintingNetworkWhat Can a Website See When You Access It?Websites may see source IP, time, URL, User-Agent, cookies, login state, referrer, browser traits, and server-log combinations.website logsUser-AgentcookiesBy situationWhat to check if you are already posting anonymouslyReview past posts, profiles, images, links, replies, DMs, behavior patterns, and search results when operating an anonymous account.anonymous postingreviewoperational securityBasicsAnonymity is not a "hiding technique," but judgment that reduces correlationAnonymity depends on reducing correlation between writing style, images, time, cookies, routine places, past accounts, and other clues.anonymitycorrelationoperational securityBasicsCauses of anonymity failureAnonymity can fail through networks, identifiers, post content, metadata, time, writing style, past information, and operational mistakes.anonymityidentification riskcorrelationBasicsThe history of anonymityAnonymity has changed from letters and pen names to metadata, mass surveillance, and AI-era correlation.anonymitysurveillancehistoryActivistsHow to protect anonymity in a surveillance societyProtecting anonymity in a recorded society means understanding who can see what and reducing unnecessary correlation.anonymitysurveillancethreat modelBasicsAnonymity is determined by practice, not technology aloneAnonymity depends on both tools and daily practice, including accounts, images, posting times, files, replies, and mistakes.anonymityoperational securitypre-publication checkAccounts and operationAnonymity is determined by services and practiceServices such as Tor, VPNs, browsers, and metadata tools help, but anonymity also depends on how they are used over time.anonymityoperational securitythreat modelBasicsThe principles of anonymityAnonymity reduces correlation through connection paths, browsers, accounts, environments, metadata checks, and trust models.anonymitycorrelationthreat modelBasicsAnonymity is not a tool for wrongdoing, but a technology that protects peopleAnonymity protects consultation, whistleblowing, source protection, civic activity, and ordinary people facing unequal risk.anonymitysafetysource protectionFinal checksFinal Go/No-Go Check Before PublishingCheck accounts, devices, connection paths, content, files, time, past information, and stop conditions before anonymous activity.anonymous activitypre-publication checkoperational securityNetworkHow to Choose Anonymous Communication ToolsCompare VPNs, Tor, proxies, anonymity-focused OSes, and environment separation by purpose, trusted parties, visible information, and remaining risks.anonymous communicationVPNTorActivistsCautions When Sharing Files AnonymouslyCheck file contents, filenames, metadata, cloud owner information, sharing paths, recipients, and link lifetime before anonymous file sharing.file sharingmetadataoperational securityAccounts and operationWhat Is Anonymous Practice?Anonymous practice means managing environments, accounts, content, files, time, replies, review, and recovery as continuing behavior.anonymous practiceoperational securityanonymityAccounts and operationFinal Checklist Before Anonymous ActivityCheck communication, browsers, accounts, files, post content, time, and past information together before anonymous activity.checklistanonymous practiceBy situationOperational rules for continuing anonymous activityLong-term anonymous activity needs rules for environment separation, posting time, replies, DMs, regular reviews, tool trust, and stopping when tired.anonymous practicelong-term operationoperational securityAccounts and operationLong-term operational habitsSmall habits such as posting time, topics, writing style, images, replies, account boundaries, and emotional posting can weaken anonymity over time.long-term operationanonymous accountscorrelationBy situationWhy One Mistake Can Break Long-Term OperationA single real-name login, reused image, workplace clue, screenshot notification, or posting-time overlap can reframe an entire anonymous history.long-term operationoperational securitycorrelationNetworkWhat is a browser fingerprint?Browser and device characteristics can remain as correlation material even after cookies are deleted.browser fingerprintbrowsercorrelationNetworkBrowser fingerprint defensesLearn the approach of reducing over-specialization and separating environments rather than trying to erase browser fingerprints completely.browser fingerprintdefensesNetworkBrowser fingerprinting basicsLearn how browser and device characteristics such as screen size, language, fonts, Canvas, WebGL, and extensions become identifying material.browser fingerprintingbrowserCanvasWebGLNetworkHow a browser displays a web pageLearn the flow from URL entry through DNS, connection, HTTP/HTTPS communication, and page rendering.browserDNSHTTPHTTPSNetworkWhat Are Servers and Clients?Learn the client-server relationship behind web communication and what may be visible to destination servers when thinking about anonymity.serverclientnetwork basicsURL trackingRisks of Shortened URLs and RedirectsShortened URLs can hide final destinations, parameters, redirect chains, and relay logs. Check destination, login state, and tracking values before sharing.shortened URLredirecttracking parametersFinal checksSigns You Should Pause Before PublishingPause before publishing when uncertainty, strong emotion, live location, related people, or delete-later thinking could weaken anonymity.pre-publication checkanonymous activityoperational securityIndividualsRisks From Social Media Posts and Search ResultsSocial media posts can be found through search results, screenshots, reposts, archives, and image search, connecting anonymous and past accounts.social mediasearch resultsimage searchMetadataRisks from comments and tracked changesComments, tracked changes, collaborative editing information, and annotations can reveal creators, editors, organizations, and original wording.commentstracked changesOfficeBy situationCommon patterns that break anonymityLearn common ways anonymity breaks down through small correlations, tool limits, operational habits, and post-failure cause analysis.failure patternsanonymityBasicsCommon failuresReview common anonymity failures around IP focus, real-name mixing, personal content, images, files, replies, uncertainty, and chained mistakes.failure examplesoperationNetworkWhat are communication logs?Learn how connection time, source address, destination, URL, DNS, and other logs can remain with operators, providers, and network systems.communication logslogsISPAccounts and operationBasic Principles of Anonymous PracticeLearn environment separation, account separation, pre-posting checks, and response rules needed before and after using anonymity services.anonymous practiceenvironment separationcontinuing practiceNetworkHow to Choose an OS or Environment for Anonymous UseCompare anonymous OSes and communication environments by purpose, difficulty, and the risks they can address, not by name alone.WhonixTailsQubes OSanonymous communicationenvironment separationAccounts and operationTime Rules for Anonymous PostingLearn how to avoid fixed posting times and overlap with the real-name side when operating an anonymous account.posting timeoperational securityAccounts and operationRisks of Reusing the Same Image or UsernameReused usernames, similar names, icons, image style, search results, screenshots, archives, and relationship networks can connect anonymous accounts to past information.usernameimage searchaccount correlationBehavioral correlationRisks of Repeating the Same Posting TimePosting time can correlate with life rhythms, real-name accounts, on-site activity, scheduled-posting logs, replies, and long-term monthly patterns.posting timetiming correlationoperational securityText and contentRisks of Continuing to Use the Same Writing StyleWriting style, topics, personal experiences, time, images, accounts, and environment can combine into identification risk even when text is rephrased.writing stylecontent correlationidentification riskText and contentHow to Separate Writing Style Between Real-Name and Anonymous AccountsWriting style can link accounts through phrasing, structure, punctuation, examples, reply tempo, topics, and long-term posting habits.writing styleaccount correlationanonymous accountsPast information and searchRisks From Screenshots and ArchivesScreenshots, quotes, reposts, search results, archives, and saved DMs can preserve context and connect past information to current activity.screenshotsarchivespost-publication handlingMetadataRisks From Screenshots, Screen Sharing, and NotificationsScreenshots and screen sharing can expose edges, notifications, browser chrome, metadata, recipient-side saving, audio, camera, and post-publication risks.screenshotsscreen sharingnotificationsNetworkOverview of services that support anonymityOrganize Tor, VPNs, browsers, anonymous OSes, metadata tools, and sharing tools by what they protect and what remains.anonymity servicesTorVPNmetadataJournalistsOverview of anonymous submission toolsCompare SecureDrop, GlobaLeaks, and OnionShare by purpose, receiving-side operation, and remaining risks.anonymous submissionsSecureDropGlobaLeaksOnionShareNetworkWhat Is OnionShare?OnionShare is a Tor-based option for temporary sharing and receiving, but file contents, metadata, address delivery, and recipient handling still matter.OnionSharefile sharingTorWhistleblowersCautions When Transferring Files With OnionShareBefore using OnionShare, check the trust model, file contents, metadata, URL delivery, recipient environment, and post-transfer handling.OnionSharefile sharingsource protectionJournalistsWhat Is SecureDrop?SecureDrop is source-protection infrastructure for anonymous tips using Tor Browser and receiving-side operations, but remaining risks still need management.SecureDropsource protectionTor BrowserWhistleblowersWhat to Check Before Using SecureDropBefore using SecureDrop, check the official destination, files, content, access environment, post-submission behavior, alternatives, and source protection risks.SecureDropsource protectionpre-publication checkAccounts and operationWhat to check before choosing a username for an anonymous accountCheck reuse, personal information, search results, platform behavior, and old-name traces before choosing an anonymous username.usernameanonymous accountscorrelationPast information and removalInformation that remains on archive sites and removal requestsLearn how archive sites, search results, screenshots, and saved pages can connect old information to current anonymous activity.archivesremoval requestssearch resultsBy situationAnonymity checks when you have no plan to publish nowInventory old names, images, accounts, usual-place information, and search results before future anonymous activity.anonymity checkpast informationoperational securityBy situationWhat not to do after postingAvoid emotional replies, cross-account reactions, careless sharing, DM leaks, panic changes, and unsafe deletion after posting.post-publication operationrepliesevidence preservationIndividualsPrecautions to avoid exposing family and friendsAnonymous posts can expose family, friends, colleagues, and children through faces, names, screenshots, tags, and usual-place clues.family and friendsidentification riskconsentPublishing workflowWhat to check before transferring files anonymouslyCheck original files, filenames, metadata, contents, sharing routes, and recipient-side display before anonymous file transfer.file transfermetadatasource protectionPublishing workflowBefore postingCheck the account, post text, images, links, time, visibility, and remaining records before posting anonymously.pre-publication checkanonymous postingoperational securityURL trackingBefore sharing a linkCheck URLs, tracking parameters, cloud sharing settings, shortened URLs, QR codes, forwarding, and text-link correlation before sharing links.linkstracking parameterspre-publication checkPublishing workflowBefore uploading a fileCheck filenames, metadata, contents, redaction, upload accounts, service display, archive files, and public copies before uploading files.file uploadmetadatapre-publication checkPublishing workflowBefore writingDecide what not to write, including everyday locations, proper nouns, writing style, sources, other people, and draft environment.writingidentification riskoperational securityBasicsThreat models for beginnersA beginner-oriented guide to organizing what you are protecting, from whom, and to what degree before choosing anonymity tools.threat modelbeginnersanonymityBasicsThreat Models and Trust ModelsOrganize what to protect, from whom, actor capabilities, risk levels, and which services or actors you trust before choosing anonymity measures.threat modeltrust modelanonymityText and contentHow to generalize proper nouns safelyLearn how to generalize names, companies, schools, regions, files, images, and URLs without removing necessary meaning.proper nounsgeneralizationidentification riskText and contentHow to generalize region, workplace, and school informationCheck how far to generalize everyday locations, workplace, school, commute, photos, posting time, and past-post clues before publication.regionworkplaceschoolAccounts and operationRisks of bringing real-name information into an anonymous environmentReal-name email, cloud sync, contacts, work files, past images, and saved passwords can connect anonymous and real-name environments.environment separationreal-name informationoperational securityMetadataMetadata that browsers can and cannot removeBrowser and service-side metadata removal can help, but high-risk files should be checked locally before upload.browserlocal processingmetadataAccounts and operationIdentification risk from cameras, microphones, and notificationsCameras, microphones, notifications, screen sharing, and permissions can expose faces, voices, places, account names, and contacts.cameramicrophonenotificationspermissionsdeviceNetworkWhat is a CDN?Learn how CDNs relate to website delivery, cache, TLS termination, logs, and the source IP address visible to servers.CDNcacheTLSlogsIndividualsWhat to check before publishing photosCheck faces, backgrounds, reflections, location information, metadata, and captions before publishing photos.photospre-publicationIndividualsChildren's photos and AI-era risksCheck how children's face photos and life information can lead to misuse, impersonation, deepfakes, and future disadvantage.childrengenerative AIdeepfakesphotosWhistleblowersCautions when choosing where to consult or submitReview the trust model, submission path, identity verification requests, and the option not to force publication.consultationsubmission destinationURL trackingHow to clean a URL before sharingA practical flow for checking tracking parameters, shortened URLs, search terms, and personal information before sharing.URLbefore sharingPast information and searchWhat to check before cleaning up old accountsCheck search results, archives, images, connected services, and evidence-preservation needs before deleting old accounts.old accountscleanupAccounts and operationRisks of cloud history and file sharingCloud sharing can reveal owner names, account details, edit history, comments, folder names, permissions, notifications, and sync history.cloudfile sharingMetadataCloud history and file creation environmentsPersonal clouds, shared links, edit history, owners, and workplace or school cloud logs can reveal a file source or creation environment.cloudhistoryfilesWhistleblowersRisks of cloud history, sharing history, and edit historyFor whistleblowing, cloud history can reveal who created, opened, copied, shared, downloaded, commented on, or changed materials.cloudsharing historyedit historyAccounts and operationRisks of cloud sharing linksCloud sharing links can expose owners, accounts, permissions, previews, access logs, notifications, and recipient-side real-name login traces.cloud sharingshared linksloginAccounts and operationRisks of sending files through Google Drive, Dropbox, and social media DMsConvenient file sending can expose sender accounts, owner names, sharing history, notifications, viewing logs, filenames, metadata, and recipient-side handling.file sharingcloud servicesocial media DMsText and contentWhat is content correlation?Published content can connect with past information, real-name accounts, affiliations, places someone regularly spends time, and memories of people involved.content correlationidentification riskpre-publication checkWhistleblowersRisk that a whistleblower can be inferred from the contentWhistleblowing content can narrow the source through departments, meetings, materials, timelines, systems, evidence files, and writing style.whistleblowingsource protectioncontent cluesNetworkDifferences between cookies, sessionStorage, and localStorageCookies, sessionStorage, and localStorage store browser information in different ways and can identify the same browser even when the IP address changes.cookiesbrowser storageenvironment separationNetworkRisks of cookies, localStorage, and IndexedDBBrowser storage areas can link real-name and anonymous activity even when VPNs, Tor, or IP changes alter the communication route.cookiesbrowser storagecorrelationBehavioral correlationCrossposting riskCrossposting the same content across multiple sites can link accounts, timing, writing style, images, files, URLs, drafts, and reactions.crosspostingmultiple sitesPast information and searchData Broker RiskData brokers, directories, and public data can help expose personal information and narrow candidates when combined with anonymous posts.data brokerspersonal informationIndividualsWhat is a deepfake?Images and audio can be edited without consent and used for impersonation, harassment, fraud, sexual image abuse, and credibility attacks.deepfakegenerative AIimpersonationNetworkHow PCs and smartphones communicateLearn how PCs and smartphones communicate with external services through apps, the OS, device network functions, Wi-Fi routers, and base stations.PCsmartphonecommunicationOSWi-Fimobile communicationAccounts and operationDevice and browser separationSeparate devices, browsers, profiles, cookies, login state, files, notifications, and workspaces so real-name and anonymous activity do not mix.device separationbrowser separationoperational securityText and contentDirect identifiers in personal informationNames, contact details, faces, voices, coordinates, handles, IDs, filenames, metadata, URLs, and audio can directly weaken anonymity.direct identifierspersonal informationpre-publication checkNetworkWhat is a DNS leak?A DNS leak can reveal queried domain names through an unintended route even when a VPN or Tor changes other parts of the connection path.DNS leakDNS resolverVPNTor BrowserWhistleblowersAuthor and organization information left in document filesDocument files can retain author names, organization names, templates, comments, revision history, and internal links.documentsauthor informationorganization informationAccounts and operationSeparating email addresses, phone numbers, and recovery methodsEmail addresses, phone numbers, recovery accounts, two-factor authentication, and contact syncing can connect anonymous accounts with real-name environments.emailphone numberrecovery methodsActivistsRisks of event participation and posting timeEvent names, locations, photos, and posting times can reveal participation, movement, roles, and allies in activist activity.eventsposting timeactivismMetadataEXIF and GPS checks before publishing photosBefore publishing photos, check EXIF, GPS, the date and time, visible clues, and the result after metadata removal.EXIFGPSphotosMetadataWhat is ExifTool?Learn how ExifTool helps check metadata in images, PDFs, videos, Office documents, and similar files locally before publication.ExifToolmetadatalocal toolsMetadataHow to check metadata with ExifToolUse ExifTool as a local checking tool for high-risk files, then read the results, remove what is needed, and recheck.ExifToollocal toolsmetadataIndividualsWhy face photos, voices, and routine places can be misusedFace photos, voices, backgrounds, and routine places can be misused for impersonation, harassment, and AI-generated abuse.face photosvoiceroutine placesIndividualsChecking information that links to family, work, and schoolCheck family, workplace, school, and routine-place clues before publication so anonymous posts do not expose you or people around you.familyworkplaceschoolMetadataThinking about metadata removal with FFmpegLearn how to think about processing video and audio with FFmpeg, its limits, and rechecking after processing.FFmpegvideoaudioMetadataGPS and Time Risks in VideosVideos can reveal capture time, location, devices, backgrounds, reflections, voices, ambient sounds, and posting-time correlations.videometadataGPSMetadataRisks From Voice, Ambient Sound, and Background SoundVoice quality, speech habits, dialect, surrounding conversation, ambient sound, notifications, and transcription can identify people or places.voiceaudioidentification riskMetadataMetadata in PDF, Office, video, and audio filesCheck the information that tends to remain in each file format and the points to review before publication.metadataPDFOfficevideoaudioBy situationWhat to check first after an anonymity failureWhen you notice risk after publication, organize deletion, correction, avoiding additional posts, and seeking advice.after failureresponseWhistleblowersWhat is GlobaLeaks?Learn how GlobaLeaks fits into organizational reporting-channel design, including cautions for whistleblowers and operators.GlobaLeaksreporting channelorganizationActivistsGroup chat and contact risksGroup chats and contact syncing can reveal participants, roles, phone numbers, message history, shared files, invite links, and activity structure.group chatcontactsactivismMetadataHidden text and XML commentsSVG, HTML, XML, and related files may retain hidden text, comments, names, internal URLs, drafts, and project terms.hidden textXML commentsmetadataNetworkWhat does it mean to hide a network route?Hiding a network route changes who can see source IP addresses, destinations, timing, and traffic, but cookies, login state, and content remain separate risks.network routeVPNTortrust modelNetworkHow the internet connectsLearn how internet communication moves through physical infrastructure, signals, wireless links, carrier networks, servers, CDNs, and networks of networks.internet basicsnetwork infrastructureserversText and contentSpecific Clues in Post ContentPost content can reveal rare experiences, timelines, internal details, related people, specialist terms, numbers, dates, and insider-identifiable clues.post contentspecific cluesidentification riskPublishing workflowPre-Publish ChecklistBefore anonymous publication, check text, images, files, links, accounts, environment, timing, uncertainty, and post-publication responses.pre-publication checkanonymous postingmetadataText and contentChecklist for Reviewing Text Before PostingReview direct identifiers, quasi-identifiers, timelines, writing style, topics, non-text materials, reader perspectives, and stop signs before posting.text reviewpre-publication checkidentification riskWhistleblowersRisks in Printouts, Scanned Images, and PhotosPaper, scans, and photos can still reveal print logs, scanner details, photo backgrounds, metadata, watermarks, distribution scope, and source clues.printoutsscansmetadataBasicsThe difference between anonymity, privacy, and securityAnonymity, privacy, and security support each other but do not replace each other. Learn how to separate their purposes and combine them.anonymityprivacysecurityBasicsWhy Anonymity Cannot Be GuaranteedAnonymity depends on situation, adversary, behavior, time, technology, and operation, so it should be treated as risk reduction rather than a guarantee.anonymitylimitsliteracyBasicsWhy Anonymity Literacy Is Needed NowAI makes it easier to connect small pieces of public and behavioral information, making anonymity literacy a basic defense for ordinary people and vulnerable groups.AI surveillanceanonymityliteracycorrelationfreedom of speechFinal checksWhy You Must Not Leave "Not sure" UnresolvedNot sure means unchecked risk, not safety. Learn why unknown items must be checked, removed, delayed, or escalated before publication.Not sureunchecked riskBasicsWhy Information Is Hard to Remove Once PublishedLearn why deleted posts can remain through screenshots, reposts, search results, link previews, caches, and archives.post-publicationrepostsarchivesNetworkWhat are private IP addresses and NAT?Device IP addresses and website-visible IP addresses can differ. Learn private IPv4 ranges, NAT, NAPT/PAT, CGNAT, and why NAT is not anonymization.IP addressNATnetwork basicsBasicsWhat is profiling?Profiling infers a person's profile from fragments such as posts, times, words, images, cookies, login state, device information, and past accounts.profilingidentification riskOSINTActivistsDigital checks before protests and civic activityBefore protests or civic activity, check phones, notifications, location, sync, social posting, photos, contacts, shared links, and post-return handling.civic activitypre-publication checkdigital safetyPast information and searchHow Routine Places Are Inferred From Public InformationPublic posts can reveal routine places through stations, weather, shops, commute times, school events, photo backgrounds, and past social media.routine placespublic informationcorrelationNetworkPublic Wi-Fi and AnonymityPublic Wi-Fi may change the visible outside IP, but operator logs, cookies, login state, cameras, and location records can still remain.public Wi-Fianonymitynetwork logsMetadataqpdf / MAT2 GuideLearn how qpdf and MAT2 fit into local metadata checks, what each tool handles, and why rechecking and visual review still matter.qpdfMAT2metadataNetworkWhat Is Qubes OS?Qubes OS helps separate work environments, but login state, content, metadata, style, timing, and operational mistakes still matter.Qubes OSenvironment separationOPSECBehavioral correlationRisks of Searching for Anonymous Activity From a Real-Name AccountSearching for anonymous activity from real-name accounts or browsers can leave search terms, login state, history, sync, and click traces on the real-name side.search historyreal-name accountenvironment separationAccounts and operationWhy Separate Real-Name and Anonymous EnvironmentsReal-name environments retain cookies, login state, cloud sync, file history, device names, autofill, and other traces that can correlate with anonymous activity.environment separationaccount correlationoperational securityNetworkWhy Separate a Browser for Anonymous UseBrowser separation reduces mixing with real-name cookies, logins, history, passwords, extensions, sync, bookmarks, and localStorage, but other risks remain.browser separationenvironment separationTor BrowserAccounts and operationOperating Without Mixing Real-Name and Anonymous PersonasPersona separation means separating accounts, registration details, browsers, topics, writing style, time, images, contacts, and long-term behavior.persona separationaccount correlationoperational securityNetworkWhy You Must Not Mix Real-Name Login and Anonymous ActivityLogin state can be a stronger clue than the network route. Keep real-name accounts, browsers, cloud storage, timing, and topics separate from anonymous activity.login stateaccount correlationenvironment separationJournalistsChecking Metadata in Files You ReceiveFiles from sources can contain metadata, edit history, comments, filenames, visible clues, and audio clues. Check before sharing or publishing.metadatasource protectionfile checkingAccounts and operationWhy Replies and DMs Can Break AnonymityReplies and DMs can raise detail granularity, preserve records, spread through screenshots or devices, and make not replying safer in high-risk situations.post-publication handlingDMsgranularityBy situationWhat to Do When You Notice a Risk After PublishingWhen a risk appears after publishing, stop first, separate deletion, recording, consultation, and leaving it alone, and avoid adding new clues.post-publication handlingremoval requestidentification riskIndividualsHow to Review Old PostsReview old posts to reduce links to current anonymous activity by checking identifiers, handles, images, routine places, surrounding people, and public exposure.past informationimage searchaccount correlationNetworkThe Roles of Wi-Fi, Routers, and ISPsWi-Fi, routers, access lines, ISPs, mobile carriers, HTTPS, VPNs, and Tor expose different parts of a communication route.network basicsWi-FiISPMetadataHow to Recheck Metadata After RemovalAfter removing metadata, compare before and after, check with another method, and review file names, visible clues, and sending routes.metadatarecheckingFinal checksAnonymity Is Never Perfect, But You Can Reduce the GapsPerfect anonymity cannot be guaranteed, but reducing clues such as real-name accounts, faces, metadata, timing, and old handles lowers risk.anonymityfinal checkAccounts and operationRegular ReviewAnonymous activity needs regular review of accounts, posts, images, files, links, past information, and operational changes over time.regular reviewoperationPast information and searchRegular Self-OSINT ChecksRegularly check what is externally visible about your name, old handles, social media IDs, email addresses, profiles, images, and archives.self-OSINTregular checkAccounts and operationRisks to Anonymity From Payment Methods, Billing Information, and Shipping AddressesPayment methods, billing information, shipping addresses, notifications, and real-world records can link anonymous activity with real names and routine places.paymentbilling informationshipping addressNetworkHow to Think About Monero and Privacy CoinsUse Monero as an anonymity learning example by separating what privacy coins make harder to see from what surrounding records still reveal.Moneroprivacy coinscrypto assetstrust modelBasicsWhy Anonymity Is Needed as a Right in the Age of Digital IDDigital ID can support convenience and inclusion, but anonymity must remain a right where identity verification is unnecessary.digital IDanonymity rightsidentity verification
