Learn

284 articlesCategory: All
Metadata

Author Information in Office Files

Office files such as Word, Excel, and PowerPoint files can retain author information.

Even if you do not write a name in the body text, personal names, company names, user names, template names, revision history, and comments may remain in the file's internal properties. When sharing materials anonymously, this becomes a strong clue.

This article organizes how author information in Office files relates to anonymity.

What author information is

Office files contain not only the body of the document, but also information about creation and editing.

InformationExampleAnonymity risk
Authorpersonal name, OS user nameThe person's name appears directly
Company nameorganization name, department nameAffiliation becomes visible
Last modified byname of the person who edited itPeople involved become visible
Templateinternal template nameOrganization or department can be inferred
Commentsreviewer, internal notePeople involved and decision process remain

Office files are convenient formats for collaborative editing and review.

That convenience becomes a risk for anonymity.

Tracked changes and comments

Office documents can retain tracked changes and comments.

Even if you think you have cleaned up the body text, if comments contain real names, email addresses, internal conversations, or reasons for decisions, people involved can be identified from them.

FeatureInformation that remainsCaution
Tracked changeswho edited whatMay remain even in the final version
Commentsinternal notes and namesDelete before publishing
Hidden sheetsbackground data and notesBe especially careful in Excel
Notespresenter notesTend to remain in PowerPoint
Linksinternal paths and cloud URLsOrganization information appears

For Office files, looking only at the visible page is not enough.

Check review information and hidden information.

Converting to PDF does not make it safe

Converting an Office file to PDF does not necessarily make it safe.

The converted PDF may still contain a title, author, and creation software. Also, if you share the original Office file through another route, the author information remains there.

ProcessWhat may remainWhat to check
PDF conversionauthor and titleCheck PDF properties
Print outputmargins, headers, watermarksCheck the appearance
Collaborative editinghistory and commentsCheck the original file
Cloud sharingowner name and edit historyCheck how it appears at the sharing destination
Filename changeinternal information remainsDo not judge by the name alone

When preparing a publication copy, check both the original Office file and the converted PDF.

However, if you upload the original file to an external conversion service or online document inspection service, the service may receive the document contents, author information, and access information. For high-risk materials, prioritize conversion and inspection in a local environment.

Check procedure

When handling Office files anonymously, create a publication copy.

StepWhat to check
1Do not publish the original file directly
2Create a publication copy
3Check author, company name, and last modified by
4Check comments, tracked changes, and hidden sheets
5Check filename, folder name, and links
6Recheck after converting to PDF or another format
7Check whether the owner name appears at the upload destination

For whistleblowing and reporting materials, there are situations where you should not decide how to handle the file alone.

You need to think about both evidentiary value and anonymity.

Typical situations where author information remains

Author information is inserted in places the person may not notice.

Documents created on a company-issued PC, materials created with a school account, files created under an OS user with a personal name, and collaboratively edited documents can contain information about the creation environment.

SituationInformation likely to remainCaution
Created on a company PCcompany name, user nameConnects to the organization
Created with a school accountschool name, emailInformation about minors or students may appear
Collaborative editingeditor names, commentsInvolves other people
Using a templateinternal template nameDepartment or project becomes visible
Created on a personal PCOS user nameA real name may be included

Office files carry information about the environment where they were created.

If you publish anonymously, check information about the creation environment too.

Recheck after deletion

Even if you think you deleted author information, a name may remain somewhere else.

Check comments, tracked changes, hidden sheets, links, filenames, and properties after PDF conversion. Especially in Excel, it is important not to judge only by the sheets you can see.

Check locationInformation to look at
Document propertiesauthor, company name, title
Commentsnames, internal notes
Tracked changeseditors, changes
Hidden informationhidden sheets, notes
Converted PDFauthor information on the PDF side

Author information is not only a problem for the person publishing.

Names of co-editors, supervisors, colleagues, teachers, students, and family members may also remain. For anonymity, check not only whether your own name appears, but also whether names of people involved appear.

Be careful with Office files you receive

Author information in Office files is not only a problem with files you created yourself.

If you publish materials received from someone else as-is, you may send that person's name, organization name, and edit history outside. For anonymity, you need to protect not only your own information, but also information about providers and people involved.

Received informationRisk
Author nameThe provider becomes visible
Company nameAffiliated organization becomes visible
CommentsInternal conversations appear
Tracked changesThe order of people involved becomes visible
FilenameProject or department becomes visible

Before publishing an Office file you received, create a publication copy and check the author information.

Separate the creation environment

For documents where anonymity matters, it is safer to separate the environment from the creation stage.

If you use an Office environment you use under your real name, a company-issued PC, a school account, or personal cloud storage, author information and sharer information are more likely to be inserted. You can delete it later, but the checking burden is smaller if you do not mix environments from the beginning.

EnvironmentLikely problemWay to think about it
Company PCcompany name or user name is insertedDo not use for anonymous publication
School accountschool name or email remainsSeparate it from personal activity
Personal cloudowner name appearsUse a separate sharing path
Usual OS userreal-name user name is insertedPrepare a publication environment
Collaborative editingnames of people involved remainOrganize into a publication copy

Even if you separate the creation environment, you still need to check the body text and filename.

However, by not using a real-name environment from the start, you can reduce information that you might forget to remove later. For anonymity, what matters is not only deletion, but also designing things so they do not mix.

Summary

Office files can retain authors, company names, last modified by, comments, tracked changes, hidden sheets, and links.

For anonymity, check not only the body text, but also information inside the file.

Author information may remain even after conversion to PDF.

Before publishing, create a publication copy and check both the original file and the converted file.

For high-risk materials, it is also important to use a trusted consultation channel in order to balance evidentiary value and safety.

Related tools

Metadata inspection

ExifTool

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://exiftool.org/

Open external site
Metadata removal

MAT2

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://0xacab.org/jvoisin/mat2

Open external site

Related articles