Learn

284 articlesCategory: All
Metadata

How Images Can Break Anonymity

Images communicate more information than text in an instant.

No face is shown. No name is visible. GPS metadata has been removed.

Even so, an image can allow people to infer location, routine places, affiliation, device, capture time, and people involved.

If you think about anonymity, images are something you must check.

Visual Clues Remain in Images

Image risk is not only metadata.

Information visible in the background becomes a strong clue.

Signs. Station names. School names. Uniforms. Employee IDs. Building exteriors. The view outside a window. Documents on a desk. Screen reflections.

The person looks only at the main subject. But the person investigating looks at the background.

Visible itemWhat can be inferred
Signs and station namesCapture location, routine places
Uniforms and employee IDsSchool, workplace, affiliation
Buildings and outside windowsRegion or capture location
Documents and screensNames, organizations, case or project details
ReflectionsPhotographer, device, room details

Always enlarge the image to check it. Look at the edges, background, reflections, and text.

When looking at an image, the person sharing or taking it focuses on the main subject. But someone trying to break anonymity looks outside the main subject. Store names in the background, the view outside the window, documents on the desk, the edge of the screen, a reflected photographer, and features of floors or walls. Images reveal more information at once than text.

Information related to routine places is especially dangerous. Shops you often visit, nearest stations, scenery near a workplace, rooms at home, and school notices narrow candidates even if you do not write an address.

Metadata Can Remain

Images may retain metadata such as capture date and time, GPS location information, camera model, and editing software.

Photos taken with a smartphone may contain location information. When you use image editing software, the software used and editing time may remain.

Metadata is not visible from the appearance. That is why you need to check it with a tool before publishing.

ExifTool is a representative tool that can check image and video metadata locally. When handling photos anonymously, it is important to first have a way to check capture dates and location information locally rather than handing images to online conversion sites. URL : https://exiftool.org/

However, even if you delete metadata, visual clues remain. Both metadata checks and image content checks are necessary.

Metadata is easy to forget because it is not visible. If GPS remains in a photo taken with a smartphone, a home, workplace, or meeting place can be directly revealed. If capture time remains, it can be matched against events, work records, and movement histories. Camera model and editing software also become clues about the environment used.

However, it is important not to feel safe just because metadata has been removed. Information that breaks anonymity exists both inside the file and in the visual content of the image.

Image Search Can Connect to the Past

Using the same image or a similar image can connect to past accounts.

Icons. Background photos. Room photos. Pet photos. Artwork. Profile images.

Reusing an image from a real-name account on an anonymous account is dangerous.

Even if the image itself is not identical, people who know you may recognize the same composition, same place, or same objects.

Image search can find not only exactly identical images, but also edited or similar images. Cropping, compression, color changes, and added text do not prevent a connection if features remain. The same pet, same room, same artwork, same desk, and same scenery are also clues.

For an anonymous account, the basic rule is not to reuse images that were previously used on the real-name side. Even newly created images need caution if the style, colors, composition, or themes from the real-name side are strongly visible.

Screenshots Are Especially Dangerous

Screenshots easily include unintended information.

Browser tabs. Notifications. Account names. Bookmarks. Filenames. URLs. Time. App names.

If you look only at the center of the screen, you overlook information at the edges.

LocationInformation likely to remain
Top of browserURL, tab names, extensions
Top right of screenAccount name, notifications, time
Bottom area or DockApps in use, filenames
Outside the main contentMargins, comments, edit history

Before taking a screenshot, organize the screen. After taking it, enlarge and check all the way to the edges.

In screenshots, the surrounding area is more dangerous than the center of the screen. The URL bar, tabs, notifications, bookmarks, app lists, filenames, time, battery, and account icons are captured. In screen sharing or recording, notifications may appear partway through.

Screenshots that require anonymity are safer when made in a dedicated environment. If you take them in your usual browser or on a real-name device, real-name information is more likely to appear around the edges.

Be Careful With Blurring

Blurring an image does not make it completely safe.

The blur is weak. The original image remains somewhere else. The same information remains in an unblurred reflection. Information remains in the filename or metadata.

Also, even if only the face is hidden, clothing, place, belongings, body shape, and background can reveal the person.

Blurring can be effective. However, you first need to decide what must be hidden.

Even if a face is blurred, clothing, body shape, belongings, background, and posting time may still reveal the person. Even if a sign is blurred, the building or road shape may reveal the location. Even if part of an image is blacked out, the same information may remain in a reflection or another shot.

Use blurring with a purpose. Whose face are you protecting? Which place are you hiding? Which text must not be shown? What will remain visible so the message is still communicated? If you edit without making these judgments, dangerous information remains.

What to Check Before Posting

Before publishing an image, check the following points.

  • Whether faces, names, IDs, uniforms, or employee IDs are visible
  • Whether signs, station names, school names, or workplace names are visible
  • Whether the photographer or room is visible in reflections or shadows
  • Whether a screenshot contains notifications or account names
  • Whether GPS or capture date and time remain in metadata
  • Whether you have used the same image in the past
  • Whether personal information remains in the filename

You should spend more time checking images than the body text of a post.

Check in the order of metadata, appearance, past use, and sharing path. Checking only one of them is not enough. To publish an image with lower risk, create a publication copy, check the metadata, look at the background and reflections, check whether it has been used in the past, and review the permissions at the sharing destination.

For high-risk images, it may be better not to judge alone. The photographer is used to the background and may not notice location clues.

Not Publishing Is Also an Option

Images contain more information than text and are hard to recover after publication. If the message can be communicated with text alone, choosing not to publish the image is also an option. Even when an image is necessary, there are choices such as cropping only part of it instead of showing the whole image, replacing it with a diagram, waiting before publishing, or checking with people involved.

In anonymity, editing and publishing an image is not the only countermeasure. Not publishing, delaying, using another format, and consulting someone are also countermeasures.

Summary

Anonymity can be broken through images for reasons beyond metadata.

There are many visual clues in backgrounds, reflections, signs, uniforms, buildings, documents, screenshot notifications, URLs, and similar details.

Metadata such as GPS and capture date and time also needs checking. Reusing images from the past also causes account correlation.

To protect anonymity, you need to check image content, metadata, filenames, past use, and sharing method together.

Related tools

Archive check

Wayback Machine

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://web.archive.org/

Open external site
Reverse image search

Google Lens

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://lens.google/

Open external site
Metadata inspection

ExifTool

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://exiftool.org/

Open external site
Metadata removal

MAT2

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://0xacab.org/jvoisin/mat2

Open external site

Related articles