Doxxing: how to protect yourself, and what to do next

Doxxing means publishing someone’s private details, such as a real name, a home address or a workplace, to expose or harass them. It sounds like hacking, but it rarely is. Most of the time a person is found by putting together small scraps that were never meant to be connected. This guide explains how to protect yourself from doxxing: how those scraps add up, how to cut the trail before anyone tries, and what to do if your details are exposed.

How small clues add up

A clue	What it can lead to	A habit that cuts it
The same username on several sites	Links an anonymous account to a personal one	A different handle for each identity
A reused profile picture	A reverse image search that finds your other accounts	Never reuse a picture across identities
Tags by friends and family	Connects your stage name to the people around you	Ask people not to tag or mention you
Old posts and comments	Names, places and routines from years ago	Review what you can still be found by, and delete what you do not need
Parcel labels and returns	A name and a home address in a delivery file	Use a pickup point for anything related to this work
Public listings and directories	An address or an employer on a site you never joined	Ask the site to remove it, and check again every few months

Search for yourself first

Spend twenty minutes finding what a stranger could find. Use a private window and search for each of these in turn:

• your name, with and without your city
• your stage name and every username you have used
• your email addresses and your phone number
• your pictures, with a reverse image search on a cleaned copy

Write down every page that shows something you would rather keep apart. Then work through that list: ask for removals, change privacy settings and close accounts you no longer use.

Doing this once is not enough. New listings and old accounts appear again, so repeat the search a few times a year, for example when you change phone or move home. The same logic applies to separate email addresses and phone numbers, which keep your work from showing up next to your name.

If it happens

1. 1

   Do not engage

   Replying gives the person attention and can escalate things. Say nothing, and do not delete anything yet.

2. 2

   Keep proof

   Screenshot every post with its address and date, and save messages. Store them in a private folder that only you can open.

3. 3

   Report where it is posted

   Use the platform’s form for harassment or for sharing private information. Give the links, not a long story.

4. 4

   Warn the people who are exposed

   If a family member, an employer or a flatmate is named, tell them directly, so they hear it from you and know what to ignore.

5. 5

   Secure your accounts

   Change passwords, turn on two step verification and check for unknown devices. The steps are in how to secure your accounts.

6. 6

   Contact the police when there are threats

   In an emergency, call the local emergency number. For ongoing harassment, local police and victim support can explain what to file.

7. 7

   Ask for support

   Being exposed is stressful. Victim support centres and trusted people are there for this, not only for dramatic cases.

What anonymity does and does not do

A stage name, separate contact details and a faceless approach take away most of the scraps a person would need. They do not make exposure impossible, and no setup does. What they do is make a successful attempt much harder, and slow down anyone who tries. The creator privacy checklist lists the steps in order. When the problem is content rather than identity, leaks and reposting covers what to do, and what a photo gives away covers the clues hidden in an image.

Questions and answers

Is doxxing illegal?

It depends on the country and on what exactly is published or done with it. Threats and harassment are offences in many places. If you are targeted, a police report and a lawyer or a victim support centre can tell you which rules apply.

Should I delete my accounts when it starts?

Not immediately. Keep the proof first. Then lock accounts down rather than deleting them, so you can still report and show the history.

Can I be found even with a stage name?

Yes, if other clues connect it to you, such as a reused photo or a shared contact detail. That is why separating and checking works better than relying on the name alone.

Does it mean I did something wrong?

No. People who expose others are responsible for their own actions. Reducing the trail is prevention, not blame.