Hiding your IP does not make you anonymous
An IP address is only one clue. Accounts, browser state, metadata, timing, and content can still identify you.
When thinking about anonymity, IP addresses are important.
When you access a website, the destination can see the source IP address. For that reason, some people use VPNs or Tor to change how their IP address appears.
However, the idea that hiding your IP address makes you anonymous is incomplete.
An IP address is one strong clue, but it is not the only factor that determines anonymity. Cookies, login state, browser information, writing style, post content, images, files, time, and past information can also become material for recognizing the same person.
This article organizes the meaning and limits of hiding an IP address.
IP addresses are important clues
An IP address is information used to find the destination on a network.
When you access a website, the destination server learns the source IP address. An IP address alone does not always reveal a person's name or exact address.
However, a telecommunications provider, region, or organizational network can be inferred from an IP address. Also, when it is connected with connection time and records held by the telecommunications provider, it can become a clue for tracing which line the communication came from.
For that reason, IP addresses are important for anonymity.
However, being important and determining anonymity by themselves are different things.
What does hiding an IP change?
The expression "hiding your IP" is somewhat ambiguous.
In many cases, it means "changing the source IP address visible to the destination website."
For example, when you use a VPN, the destination website sees the IP address of the VPN server rather than your home IP address. When you use Tor, the destination website sees the IP address of a Tor exit node.
| Method | IP visible to the destination | Notes |
|---|---|---|
| Normal connection | Home, workplace, mobile line, or similar IP | The source network is visible |
| Public Wi-Fi | The public Wi-Fi's external IP | Other clues such as local logs or cameras remain |
| VPN | VPN server IP | You need to trust the VPN provider |
| Tor | Tor exit node IP | Be careful about non-Tor traffic and login state |
In other words, hiding an IP means changing how the source of the connection appears. It does not erase all information related to you.
If cookies remain, the same browser may be recognized
Even if you change your IP address, if cookies remain, you may be treated as the same browser.
Cookies are data that websites store in the browser and resend with requests that match certain conditions. They are used for maintaining login state, saving settings, analytics, session management, and similar purposes.
For example, suppose you access a website from your home connection and later access the same site again in the same browser while using a VPN. Even if the IP address has changed, if the same cookie is sent, the website can judge that it is a repeat visit from the same browser.
IP addresses and cookies are different kinds of clues. Even if one is changed, the other can remain and be correlated.
Logging in connects behavior to an account
A particularly strong clue for anonymity is login state.
Even if you use a VPN or Tor, if you log in to a real-name account, that behavior is connected to the account.
Even accounts that do not display a real name may be connected to an email address, phone number, payment information, past usage history, contacts, and so on.
| State | What happens |
|---|---|
| Only the IP changes | How the source appears may change |
| The same cookie is sent | It is judged to be the same browser |
| You log in to the same account | The behavior is connected to the account |
| You use the same email or phone number | The real-name side and anonymous side become connected |
Even if you hide your IP address, logging in to an account greatly weakens anonymity.
Browser and device characteristics also remain
Websites may receive characteristics of the browser and device.
User-Agent, screen size, language settings, time zone, supported fonts, extensions, OS, and browser settings may be treated as characteristics of the usage environment.
These are information separate from the IP address.
Even if you change the IP address, if you keep using the same browser environment, the impression of the same user can remain when combined with other information.
In particular, if you mix a real-name browser and an anonymous browser, cookies, history, extensions, login state, and similar data are likely to overlap.
Using the same device is not always dangerous by itself. The strength of the risk changes depending on the other party and the purpose.
However, in situations that require high anonymity, reusing the same device, same browser, same extensions, and same login state increases the material for correlation. Before changing the IP, check whether the browser or account is mixed with a real-name environment.
Posts and writing style can also connect you
Anonymity is not determined only by the network.
Post content and writing style are also important.
For example, the following kinds of information can become clues that connect a person or a past account:
- Stories about a region or workplace
- Experiences known only by a small number of people
- Specialist fields or internal terms
- The same writing style as a real-name account
- The same images or icons
- The same combination of topics
- The same posting time range
Even if the IP address is hidden, candidates can sometimes be narrowed down from the content of posts.
When thinking about anonymity, you need to look at both the network and the content.
What hiding an IP can and cannot protect
Changing how an IP address appears has meaning. However, you need to understand its scope correctly.
| Perspective | Does hiding the IP change it? | Explanation |
|---|---|---|
| IP visible to the destination | Changes | With VPN or Tor it appears as a different IP |
| Direct connection to the home line | Weakened | The destination has a harder time seeing the home IP |
| Identification by cookies | Does not change | If the same cookie is sent, it connects |
| Login state | Does not change | If it is the same account, behavior is linked |
| Writing style and post content | Does not change | It can be inferred from content |
| Device and browser characteristics | Does not change | Characteristics remain when using the same environment |
Hiding an IP is one part of anonymity. However, it does not protect anonymity as a whole by itself.
Sometimes other things should be checked before IP
Depending on the situation, there may be information to check before IP.
If you are logged in to a real-name account, you should first consider logging out or separating environments. If a school name appears in a photo, the photo content is a stronger clue than the IP. If an author's name remains in a file, checking the file comes before the communication route.
In anonymity, strong clues are reduced first.
Summary
An IP address is an important clue when thinking about anonymity. The destination website can see the source IP address, and when it is connected with the telecommunications provider and connection time, it becomes material for tracing the source of communication.
However, hiding an IP address does not make you anonymous.
Cookies, login state, User-Agent, device characteristics, post content, writing style, images, metadata, time, and past information can also become material for recognizing the same person.
When thinking about anonymity, you need to check not only the IP address, but the network, browser, accounts, content, time, and past information together.
Hiding your IP is important. But it is the entrance to anonymity, not its completion.
Related tools
WhatIsMyIP
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
DNSLeakTest
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
BrowserLeaks WebRTC
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
BrowserLeaks Fingerprint
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
EFF Cover Your Tracks
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
Tor Project
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
Proton VPN
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
URL : https://protonvpn.com/
Mullvad VPN
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
URL : https://mullvad.net/