Recent events have made me very concerned with keeping safe online. This datasheet should protect you from anyone using (semi)public information to connect your anonymous life with your real or public life.
Forums:
So how exactly do keep track of multiple email accounts? Use POP forwarding to an account you check regularly.
Passwords are a balance between ease of remembering and entry and security, I like this guy's approach for secure but memorable passwords(read the entire article, it's golden);
Treat security questions like "What is your mother's maiden name?" and "Where did you go to school? like a second password. There's nothing like a hacker bypassing a superstrong password with easily found knowledge of you. My old lady's called £éY)Ò*¸ÄíóDäÝUKxz¥uó$4¡µ!ôNR`X¦gÅ A by the way.
I'm undecided on two-factor authentication and reset, because you don't necessarily have control over your number
Other suggestions
Thank you for reading and stay safe
Forums:
- Do you use a minimum of one unique username for each forum?
(Put a couple of randomly generatrated words together, and save in a password manager). - Do you use a unique profile pic?(People can reverse image search)
- Do you use a unique registration email?
(Lots of services offer free emails, you can consolidate all the active ones using POP forwarding, for simplicity, use your username for each one, or you could use a temporary email service like throwawaymail.com) - Do you ideally reveal no more than one unique identifying feature with each account?
(this could include hobbies, skills, personal history, even unique grammar and spelling habits, on there own they might be unremarkable, but in combination, unique ) - Do you watch what you say in private messages? Remember, no site can be counted to be unhackable or uncomprimisable given enough effort and resources.
- Do you use a VPN? Otherwise, it is easy for any website (or hacker who's hacked one) to use your IP to narrow down your location to a particular street or suburb.
- Do you use a unique password? Hackers know people usually use the same login info across the web.
- Do you use a payment service like paypal/alipay/amazon wallet to avoid giving random sites your payment details?
- Do you use cryptocurrency to pay? (I don't unfortunately, but it certainly would help anonymity)
- Make sure never to use your Facebook or Google account to log into any site (this will prevent them accessing your shared info)
- Use WHOIS guard, if anything, it is worth it to stop the spammers.
- Try not to use your personal name anywhere if not necessary
- Try to use a believable fake name. (If you aren't German, Facebook will ask for government ID otherwise)
- Don't share anything you won't be comfortable sharing with a stranger who hates you
- Ignore any site requests for personal information
- Register with a burner phone and email if demanded.
- Make sure the personal url doesn't have your real name
- The more topics you post publically, the less topics you'll be able to debate anonymously.
- Don't add/follow family members. (James Comey was doxxed this way)
- Don't share jokes or memes you'd then share on a forum.
- Delete your history, or at the very least, hide it. Here's a script to automate it on facebook for chrome and firefox.
- Do not use your real name as your account name (This is very difficult to correct, I had to jettison a well-populated account to preserve my anonymity)
- Is your account name found anywhere online?
- Turn off "show your location" on any photos.
- Be careful of Apps that show your location like Tinder, triangulating your location is still possible, just harder than before.
- Do you avoid giving random apps your contact list? (This step won't help you personally, but it would help keep your mates details safe)
- If you use a dual SIM phone, use your backup phone number for apps and the like. Otherwise, people can find your online identity with just a phone number search. Even Signal has this flaw. (I haven't taken this step yet)
So how exactly do keep track of multiple email accounts? Use POP forwarding to an account you check regularly.
- Create a new account (I generally use the same provider, but this is marginally less secure)
- In the new account, go to settings, and there should be an option for POP/IMAP
- Click something like Add Forwarding Address
- Log into your original account, and click the confirmation email.
This will now have any emails from the new one automatically forwarded to your main account, even better, you can send emails from your main account using your new idenity.
- Don't combine your financial/purchasing emails with your personal/anonymous ones.(I personally have three totally independent main accounts, personal, business and online shopping)
- Don't use your personal named account as your main account.(This is inconvenient, but this'll be a big target for hackers).
- Do not send emails from, or tell anyone your main account. This protection via concealment allows you to use a relatively simple password.
- Give all your non-main accounts a super strong password and store them in a password manager.
- Backup your emails offline, and regularly delete anything online. (Beyond protecting your data, it'll also stop hackers identifying any email accounts they can reset the password for.)
Passwords are a balance between ease of remembering and entry and security, I like this guy's approach for secure but memorable passwords(read the entire article, it's golden);
Quote:Quote:I would strongly recommend a offline password manager like KeePass, as a simple password and worldwide remote hackability a recipe for disaster. I keep one encrypted copy of my password file on my home PC, and a few well hidden backups.
So if you want your password to be hard to guess, you should choose something that this process will miss. My advice is to take a sentence and turn it into a password. Something like "This little piggy went to market" might become "tlpWENT2m". That nine-character password won't be in anyone's dictionary. Of course, don't use this one, because I've written about it. Choose your own sentence -- something personal.
Treat security questions like "What is your mother's maiden name?" and "Where did you go to school? like a second password. There's nothing like a hacker bypassing a superstrong password with easily found knowledge of you. My old lady's called £éY)Ò*¸ÄíóDäÝUKxz¥uó$4¡µ!ôNR`X¦gÅ A by the way.
I'm undecided on two-factor authentication and reset, because you don't necessarily have control over your number
Other suggestions
- Avoid logging into anything too important on your phone or laptop, as they are a target for thieves
- Don't piss off ASIO/NSA/GCHQ or the like. Hiding from them is far beyond the scope of this guide and besides, we are all good honest lads here.
- Don't piss off any real life gangsters or corrupt cops. Your l33t infosec is nothing if they torture the password out of you.
![[Image: security.png]](https://imgs.xkcd.com/comics/security.png)
Thank you for reading and stay safe
Likes denote appreciation, not necessarily agreement |Stay Anonymous Online Datasheet| Unmissable video on Free Speech