What is account correlation?
Account correlation can connect anonymous, real-name, and past accounts through usernames, icons, profiles, registration details, follow relationships, and login state.
Creating an anonymous account alone is not enough to protect anonymity.
Username. Icon. Profile. Email address. Phone number. Login state. Follow relationships. Post content.
When this information overlaps with a real-name account or a past account, separate accounts can be seen as belonging to the same person.
This is account correlation.
Accounts connect through more than names
Account correlation means that multiple accounts become connected to the same person or the same organization.
Even if you do not write your real name, accounts can connect through many clues.
| Clue | Example | What happens |
|---|---|---|
| Username | Same ID, similar ID | Connects with a past account through search |
| Icon | Same image, same character | Connects through image search or memory |
| Profile | Same hobbies, job, region | Overlaps with the real-name side |
| Email address | Reuse of a real-name email | Connects with personal information |
| Phone number | Registration with the same number | Becomes a strong identifier |
| Follow relationships | Same friends or same communities | Inferred from relationships |
For an anonymous account, changing only its appearance is not enough. The registration information and behavior patterns behind it also need to be separated.
Reusing usernames is dangerous
Usernames are easy to search.
Using an old handle with only a small change. Including the same word as a real-name account. Including numbers or a birthday you often use. Using the same ID across multiple services.
These can connect the account with past information.
A username for anonymity needs to be considered separately from the real-name side and past accounts. If you choose only by memorability, the name moves closer to your past self.
Icons and images also connect
Icons are surprisingly strong clues.
Same photo. Same illustration. Same composition. Same edits. Same generated AI image.
Even if the image itself is not the same, using a similar feel or the same source material may be noticed by people who know you.
Past accounts may also be found through image search. Reusing the same icon should be avoided.
For an anonymous icon, separate the source material, style, and theme from the real-name side.
Registration information is not visible on the surface
One serious part of account correlation is information that is not displayed in the profile.
Email address. Phone number. Recovery email. Login device. Login IP. Advertising ID. Payment information.
Other users cannot see these. However, the service side uses them for identification.
| Information | Who can see it | Point to watch |
|---|---|---|
| Email address | Service operator | Do not use the same one as the real-name side |
| Phone number | Service operator | Becomes strong identity-verification information |
| Recovery email | Service operator | Connects with the real-name environment |
| Login device | Service operator | Use from the same device is visible |
| Payment information | Service operator, payment provider | Connects with personal information |
For anonymity, check not only the profile visible to other people, but also the registration information given to the service.
Follow relationships and interactions are visible
An account does not exist by itself.
Who you follow. Who you reply to. Whose posts you react to. Which communities you are in.
These relationships also become clues.
If a real-name account and an anonymous account follow the same people, they start to look as if they belong to the same person. Reacting only to the same friends also stands out.
If you want to preserve anonymity, you also need to be careful about bringing in relationships.
Interaction habits also become clues for correlation.
Always reacting quickly to posts from the same person. Joining inside jokes from the same communities as the real-name side. Reacting to the same topic in the same time period.
These behaviors surface more naturally than profile information. Even if you create a new account, bringing in relationships and reaction patterns makes it harder to be seen as a different person.
| Behavior | What can be seen |
|---|---|
| Following the same people | Friend relationships or communities |
| Reacting to the same posts | Interests or people being watched |
| Same inside jokes | Past affiliation or relationships |
| Replies in the same time period | Life rhythm or active hours |
Login state breaks anonymity
Even if you use a communication route for anonymous activity, logging in to a real-name account greatly weakens anonymity.
For example, even if you use Tor Browser or a VPN, if you log in to a real-name social network, email, cloud service, or shopping site, that behavior becomes connected to the account.
Even if the source IP changes, the act of logging in to the real-name account itself connects the behavior to the real-name side.
In anonymous activity, it is important not to mix real-name accounts and anonymous accounts in the same browser, on the same device, or during the same time period.
Things to check
Before creating an anonymous account, check the following points.
- Whether the username is similar to past accounts
- Whether icons or images are being reused
- Whether the profile shows hobbies or regions from the real-name side
- Whether the registration email or phone number is separate from the real-name side
- Whether the recovery email connects to the real-name environment
- Whether follow relationships overlap too much with the real-name side
- Whether you are logged in to a real-name account in the same browser
Account correlation happens not only when an account is created, but also during operation. Even if things are separate at first, habits from the real-name side mix in over time.
Some correlation is visible to the service
There is information that the service side can see even if other users cannot.
If you use the same device, same browser, same connection, same phone number, same payment method, or same recovery email, it becomes easier for the service side to link the accounts.
When you need stronger anonymity, separate not only the visible profile, but also the registration and login environments. How far you should separate them depends on the threat model, but thinking "it is not a problem because other people cannot see it" is dangerous.
It can break down after creation
An anonymous account can break down during operation even if it was separated at creation.
Even if you initially use a different name, different email, and different profile, your usual interests and relationships mix in over time. Talking on the anonymous side about topics discussed on the real-name side. Reacting only to friends from the real-name side. Using another cut of the same photo.
| Overlap that appears over time | Example |
|---|---|
| Topic overlap | Reacting to the same issue from the same angle as the real-name side |
| Relationship overlap | Continuing to follow the same people |
| Image overlap | The same places or belongings appear repeatedly |
| Time overlap | Posting during the same active hours as the real-name side |
| Writing-style overlap | Becoming accustomed and returning to the original way of writing |
Account correlation happens through continued behavior, not just through settings at creation. Regularly check for overlap with the real-name side.
Decide the purpose of separation
Not everyone needs to completely separate every account.
The required strength of separation differs for hobbies, work, family, anonymous consultation, and whistleblowing. However, for accounts that need anonymity, it is necessary to consciously reduce overlap with the real-name side.
If you increase accounts without deciding their purpose, you no longer know how far each one should be separated. First decide "what you want to hide from whom," then design the name, registration information, usage environment, and interaction range.
Summary
Account correlation means that multiple accounts become connected to the same person or the same organization.
Usernames, icons, profiles, email addresses, phone numbers, follow relationships, and login state become clues.
Creating an anonymous account alone is not enough. Registration information, usage environment, relationships, and post content also need to be separated.
For anonymity, it is important to see an account not as a "name," but as a "bundle of identifiers."
Related tools
OSINT Framework
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
Google Lens
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
URL : https://lens.google/
PimEyes
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
URL : https://pimeyes.com/
ExifTool
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
URL : https://exiftool.org/