The principles of anonymity

Anonymity is not complete just because you turn on one feature.

Use a VPN. Use Tor Browser. Do not write your real name. Remove image metadata. Create a separate account.

All of these matter. However, the issue does not end by choosing any one of them.

The essence of anonymity is reducing clues that connect actions or statements to the person behind them.

On the modern internet, multiple mechanisms are used for that purpose, including Tor, VPNs, proxies, anonymity-focused operating systems, browser separation, cookie management, and metadata removal.

This article looks at the elements that make up anonymity and the mechanisms used around the world.

Anonymity means reducing correlation

Anonymity is a state in which it is not easy to identify "who did it."

To achieve that, you need to reduce clues that connect the person to the action. Correlation is important here.

Correlation means that information that appears separate becomes linked to the same person or the same activity.

For example, the same username, the same posting time, the same writing style, the same IP address, the same Cookie, or reuse of the same image. Seen one by one, each may look like a weak clue.

However, the situation changes when multiple clues overlap. The impression that "this poster may be the same person" becomes stronger.

Protecting anonymity means reducing this kind of correlation.

Main mechanisms used in modern anonymity

Modern anonymity separates the connection path, browser, device, account, and post content. If you look at only one of them, something will be missed.

These mechanisms have different purposes. Tor is a mechanism for reducing correlation in the connection path. VPNs are mechanisms for changing the IP address visible to the destination. Anonymity-focused operating systems and environment separation are mechanisms for reducing mixing between devices and work environments.

To improve anonymity, combine multiple mechanisms according to the purpose. If you get this wrong, failures happen, such as "I installed a VPN, but I was logged in to a real-name account."

Tor makes it harder to directly connect source and destination

Tor is one of the most important mechanisms in modern anonymous communication.

Tor sends communication through multiple relay nodes, making it harder to directly connect the source and the destination. To the destination website, the connection usually appears to come from the IP address of a Tor exit node, not the user's own IP address.

Onion routing, which Tor is based on, was researched in the 1990s at the U.S. Naval Research Laboratory. After that, the Tor Project developed and promoted it, and it is now used by journalists, researchers, activists, users under censorship, and ordinary privacy users.

Tor is not a "tool only for suspicious people." It is a technology connected to human rights and freedom, used to access information in environments with surveillance or censorship. In regions where even searching under a real name becomes dangerous, reaching information itself is a risk. Tor is used to lower that risk.

The Tor Project is the official project that develops and publishes Tor Browser and the Tor network. Tor is a central mechanism for understanding modern anonymous communication, so check the official site for how it works, downloads, and usage cautions. URL : https://www.torproject.org/

However, using Tor does not make everything disappear.

If you log in to a real-name account in Tor Browser, the activity is linked to that account. If an app outside Tor Browser communicates over an ordinary connection, information goes out through another path. If post content, writing style, images, and time of day overlap with the real-name side, non-network correlation remains.

Detailed Tor usage and cautions are covered in another article.

VPNs change the IP visible to the destination

A VPN creates a connection path from the device to the VPN server and sends external communication through that VPN server.

From the destination website's point of view, the access appears to come from the VPN server's IP address, not the user's home or workplace IP address.

VPNs are used for purposes such as protecting communication on public Wi-Fi, avoiding geographic restrictions, and avoiding showing a home IP directly to a destination.

When choosing a VPN service, check the operator, logging policy, audits, transparency reports, and whether its apps are publicly available rather than relying on name recognition. Practical candidates include services such as Proton VPN and Mullvad VPN, where the trust model is relatively easy to trace from official information.

Proton VPN is Proton's VPN, from the same organization that operates privacy-focused services including Proton Mail. Because it provides information such as audits of its no-logs policy, open-source apps, and transparency reports, it can be a comparison point when choosing a VPN.

Proton VPN official site URL : https://protonvpn.com/

Mullvad VPN is a VPN designed around numbered accounts without requiring an email address or password. For users who care about anonymity, it is also important as an example of design that reduces registration information.

Mullvad VPN official site URL : https://mullvad.net/

VPNs are useful. However, a VPN is not a tool that automatically completes anonymity.

When you use a VPN, your home IP is less visible to the destination. Instead, you place trust in the VPN provider. You need to check the VPN provider's logging policy, operator, jurisdiction, app behavior, and DNS handling.

Even when you use a VPN, cookies, login state, browser characteristics, and post content remain. A VPN changes how the connection path appears. It is not a tool that erases account or writing-style correlation.

The differences between VPNs, Tor, and proxies are covered in detail in another article.

Proxies relay specific communication

A proxy is a relay server that accesses the destination on behalf of the user.

When you configure a proxy in a browser or app, that communication is sent through the proxy server. To the destination website, it may appear as the proxy server's IP address.

However, there are many kinds of proxies, and their protection scope varies. Some apply only to the browser, while others apply only to a specific app. Protection of communication content depends on the type of proxy and whether HTTPS is used.

If you use a proxy for anonymity, you are trusting the proxy operator. Using an unknown free proxy for high-risk anonymous activity is dangerous. "The IP changes" and "it is anonymized safely" are separate things.

Reduce browser fingerprints

Even if you hide the connection path, browser characteristics can still make activity look like it comes from the same user.

User-Agent, screen size, language, time zone, supported fonts, extensions, and Canvas or WebGL behavior are treated as browser and device characteristics. The idea of distinguishing users by combining these characteristics is browser fingerprinting.

Tor Browser is designed to make users look as similar as possible so they are less vulnerable to fingerprinting. If you heavily change browser settings, add extensions, or use an unusual window size, you may stand out instead. In anonymity, "my own special configuration" is not necessarily strength. Being less distinctive is often more important.

EFF Cover Your Tracks This EFF test site lets you check how identifiable your browser is against trackers and fingerprinting. During the check, browser information is sent to EFF, so think carefully about when to use it in high-risk environments or real anonymous-use environments. The result is not a universal diagnosis, but it can be an entry point for understanding that browser information can become identifying material. URL : https://coveryourtracks.eff.org/

The detailed mechanism of browser fingerprinting is covered in another article.

Reduce mixing through environment separation

In anonymous activity, it is important not to mix real-name and anonymous environments.

If you use the same browser, same Cookie, same email address, same file, or same cloud account, correlation can happen even if you change the connection path.

Browsers for anonymous use, anonymity-focused operating systems, virtual environments, and separate work accounts are used to reduce this mixing. In practice, this is quite important. That is because continuing not to mix environments is harder than installing a tool.

Tails is an operating system that boots from a USB drive or similar medium and makes it easier to create a temporary work environment for anonymous activity, separated from the everyday operating system. It is designed to use Tor and aims for a style of use that leaves fewer traces on the device. URL : https://tails.net/

Whonix is an operating system environment designed to separate the work environment from the gateway that routes communication through Tor. It is a candidate when you want to keep Tor-based work continuously separated. URL : https://www.whonix.org/

Qubes OS is an operating system focused on dividing work into multiple separated environments. It is not dedicated only to anonymity, but it is important for learning how to separate real-name work, anonymous work, and risky file inspection. URL : https://www.qubes-os.org/

The detailed differences between these are covered in articles on anonymity-focused operating systems and communication environments.

Check metadata and content

Anonymity is not determined by communication alone.

Images, videos, PDFs, and Office files may contain creator, shooting time, location information, edit history, software used, and similar information. This is metadata.

ExifTool is a representative local tool that can check and edit metadata in images, videos, PDFs, Office documents, and other files. However, the scope of what can be checked and edited differs by format. For anonymity, the important point is that it can be checked locally without uploading files to an online conversion site. Check the official site for supported formats and usage. URL : https://exiftool.org/

However, even if you remove metadata, image backgrounds, reflections, signs, uniforms, buildings, writing style, and personal experiences remain. For anonymity, check both internal file information and visible or textual information.

Detailed steps for checking and removing metadata are covered in another article.

Anonymity shifts trusted parties

Anonymity tools are not universal measures that make nothing visible to anyone. In many cases, they change where visible information sits.

To think about anonymity, you need to look at where trust moves.

Summary

The principle of anonymity is reducing clues that connect the person to the action.

On the modern internet, Tor, VPNs, proxies, Tor Browser, Tails, Whonix, Qubes OS, metadata removal tools, and similar mechanisms are used. Each protects a different scope.

Tor makes it harder to directly connect source and destination. VPNs change the IP address visible to the destination. Browser separation and Tor Browser reduce correlation through cookies and fingerprints. Anonymity-focused operating systems and environment separation reduce mixing with real-name environments. Tools such as ExifTool are used to check metadata left in files.

However, none of these mechanisms are universal solutions. Login state, cookies, writing style, post content, images, time, and past information need to be checked separately.

Anonymity is not only a technology for hiding. It is judgment that reduces correlation.

Related tools

Related articles