Learn

284 articlesCategory: All
Accounts and operation

Device and browser separation

In anonymous activity, separating accounts is not enough.

If you use the same device, same browser, same login state, same cookies, same extensions, and same file storage location, activities you want to appear separate can become connected.

Even if an anonymous account and a real-name account use different names, if the environment behind them is the same, correlation can arise from operational mistakes or service-side records.

This article organizes how device and browser separation relates to anonymity and how far separation should go.

What does separation mean?

Device and browser separation means separating the environments used for anonymous activity and real-name activity.

The things to separate are not only devices. They also include browsers, profiles, accounts, cookies, extensions, storage folders, cloud sync, and input history.

What to separateWhat happens if it mixesCaution
DeviceFiles, notifications, and login state mixPhysically separate it for high risk
Browsers, history, and extensions mixProfile separation alone has limits
Browser profileLogin state and settings can be separatedThe same OS and same IP remain
Cloud syncBookmarks and files mixWatch real-name account sync
Storage folderFilenames and metadata mixCheck the creation source before publishing

The purpose of separation is not to give up convenience.

It is to prevent activities that must not be linked from being connected through traces of the same environment.

The same browser shares many kinds of information

A browser is not only a tool for viewing web pages.

It holds cookies, login state, browsing history, autocomplete, download history, extensions, notification permissions, and site settings.

Information inside the browserCause of correlationAnonymity caution
CookieShows repeat visits from the same browserDo not mix real-name sites with anonymous activity
Login stateConnects accounts and behaviorDo not log in with a real-name account during anonymous activity
ExtensionsBecome characteristics of the browser environmentKeep them to the minimum necessary
AutocompleteReal names or email may appearWatch screenshots too
NotificationsReal-name account names become visibleThey can leak through screen sharing or images

If you have a posting screen for anonymous use open next to real-name email or social media, mistakes become more likely.

Posting to the wrong destination, reacting from a real-name account, showing a notification in a screenshot, or mixing real-name account information into a shared URL. These failures are not rare.

Think about levels of separation

How far separation should go depends on the threat model.

For a low-risk pseudonymous account, separating browser profiles may be enough in some situations. For content you do not want a workplace or school to know about, it may be better to separate devices and networks too. For whistleblowing or source protection, do not decide from an article alone; also consider consulting a trusted support organization or specialist.

Separation levelContentSuitable situationsRemaining cautions
Same device, different browserSeparate the browserLow-risk separation of usesOS, IP, and files are shared
Same device, different profileSeparate cookies and historyEveryday account separationWatch for using the wrong one
Different devicePhysically separate the environmentWhen separating from workplace or real-name activityNetwork and activity times remain
Dedicated environmentUse a dedicated OS or dedicated networkHigh-risk anonymous activityOperational mistakes and consultation channels matter

Stronger separation becomes less convenient.

A workflow that is too complex to maintain will eventually break down. It is important to choose separation that matches your risk and turn it into a procedure you can keep.

How to think about dedicated browsers such as Browser

For anonymous communication, browsers designed for the purpose, such as Tor Browser, are sometimes used.

Tor Browser is designed to use the Tor network and make the browser's appearance as uniform as possible.

The Tor Project is a nonprofit project that provides Tor Browser and the Tor network. You can check Tor's mechanism, downloads, and usage cautions on the official site.

URL : https://www.torproject.org/

However, using Tor Browser does not solve everything.

If you log in to a real-name account, that action is connected to the account. If you write personal information in the text, candidates can be narrowed from the content even if the communication route is hidden.

Tools help with separation, but they do not replace operational practice.

Separate files and workspaces too

In device and browser separation, look not only at the web browser, but also at files.

Creating an anonymous document in a real-name cloud. Using a screenshot from a real-name device in an anonymous post. Creating a PDF from a work template. These actions can link activities through document metadata and creator information.

Where things mixWhat happensWhat to check
Real-name cloudEditors and sharing history remainDo not place anonymous files there
Work templateCompany name or creator is includedCheck metadata
ScreenshotNotifications or account names appearLook all the way to the screen edges
Download folderFilenames and history mixUse a dedicated folder
ClipboardReal-name information is pastedCheck the content before posting

For anonymity, look not only at the moment of posting text, but at the whole flow of creation, storage, editing, and upload.

Common failures

Device and browser separation failures come from convenience.

Logging in from the usual device as-is. Posting anonymously from the real-name browser. Editing anonymous files in a real-name cloud. Taking screenshots without turning off notifications.

FailureWhat happensCountermeasure
Switching in the same browserCookies and login state mixUse profiles or a dedicated browser
Drafting in a real-name cloudEdit history and accounts remainSeparate it from anonymous use
Notifications appearReal-name accounts are exposedTurn off notifications and check the screen
Using the same imageImage search connects themSeparate materials
Operating at the same timeTime correlation arisesSeparate operation times too

Separation is not finished once it is set up.

It needs to become an ongoing check so things do not mix during daily use.

Summary

Device and browser separation is a basic practice for keeping traces of anonymous activity and real-name activity from mixing.

The things to separate are not only devices. They include browsers, profiles, cookies, login state, extensions, cloud sync, files, notifications, and work folders.

Even if you create an anonymous account, correlation remains if you keep using the same environment.

What matters is deciding on a separation level that matches your threat model and can be continued without strain.

Tools help with separation, but operation also needs to include real-name logins, post content, files, and time management.

Related tools

WebRTC Leak Test

BrowserLeaks WebRTC

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://browserleaks.com/webrtc

Open external site
Anonymous OS

Tails

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://tails.net/

Open external site
Anonymous OS

Whonix

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://www.whonix.org/

Open external site
Compartmentalized OS

Qubes OS

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://www.qubes-os.org/

Open external site

Related articles