Imagine someone you’ve never met in your life suddenly knowing exactly where you live. They know your mom’s name, they know what company you work for, and they have a saved picture of you from last year’s vacation that you uploaded to Instagram when you were having a good time. She can track down your phone, find old comments where you’ve commented on a sensitive topic, and maybe even access an old email where you once used a simple password.
All without you ever talking to him. A few clicks, a little patience, and your privacy is gone.
Does that sound like science fiction? Unfortunately, it’s no Netflix drama. This is the reality of doxing – a digital phenomenon where someone purposefully collects and publishes your personal information. Not because they’re interested in helping you. But because they want to humiliate you, intimidate you, or outright silence you.
What is doxing?
Short and clear: doxing (or “doxxing”) is when someone finds and publishes your personal information without your consent. This is not to send you an invitation to a party, but to hurt you – perhaps to ridicule, intimidate or silence you.
It could be your address, phone number, email, childhood photos, your partner’s name, the school you’re studying at, or even old comments on message boards. If all of this gets into the wrong place – like into the hands of someone who doesn’t really like you – you could be in trouble.
Where does the information come from?
Now comes the worrying part: most of this data already exists online somewhere. You just need to know where to look.
The most common sources of doxxing
- Social networks (Facebook, Instagram, TikTok – including photos and comments)
- Old accounts (e.g. from forums or e-shops that no longer exist)
- Public databases (e.g. business register, competition results, schools…)
- Data leaks (your email and password are floating around the internet without you even knowing it)
If someone combines enough of this information, they can build up a fairly detailed picture of you. And once it’s out there, you can’t go back.
Why would anyone do that?
There are several reasons for this:
- Revenge – Someone sets on you after an argument on the internet.
- Intimidation – for example, when you engage in a public discussion and someone is bothered by your opinion.
- Fun – yes, some people do it “just because” they can.
- Cyberbullying – combined with threats, stalking or manipulation.
- Disclosure of the “truth ” – some see this as “disclosure” but in practice it is simply an invasion of privacy.
Unfortunately, doxing is often associated with other dangerous behaviour – such as swatting, where someone reports a false incident to your address, causing the security forces to intervene. And that’s a different league.
How do you know you’re in danger?
Honestly? Unless you’re being doxxed, you usually don’t even know it. But there are a few signals:
- You start getting threatening messages with details you’ve never shared publicly.
- Someone posts your address or photo with a comment like “so this person here…”
- Someone’s impersonating you or your loved ones.
- Suddenly, details of your life are popping up in discussions.
We’ve also seen someone use a profile picture and turn it into a meme that was shared by several thousand people – including the address and name. And it started innocently enough: a comment on a Facebook post.
How to protect yourself against doxing – clearly and without paranoia mode
You don’t have to delete your entire internet life, cancel your account and move to a chat room with no signal. But a few rules come in handy that won’t make you an easy target.
1. Share less than you think is cool
Feel the need to post on Instagram that you’re home alone and your dog is at your parents’ house for the weekend? Don’t. Share wisely and don’t post information that someone could use against you. Geotags and live stories? Sounds cool, but it’s an invitation to anyone who wants to find you.
2. Check your old accounts
Google your name, nicknames, old e-mail. See what the internet knows about you. Old profiles, comments or even ads can reveal things you wouldn’t share with anyone today. Delete it if you can. If you can’t, at least mark it as “risky”.
3. Lock your profiles
A private profile is not a weakness. It’s prevention. On social media, limit your access to people you know. Ideally, use two identities – one personal and one public (if you need it for work or content). Separating what’s “in” and what’s “out” will make your life easier.
4. Different nicknames = more security
Use a different nickname and email in different places. If you are everywhere as “PetrNovak1991”, an attacker can easily link all your profiles. And if he gets a leaked email from the hacked database, he can access other services as well.
5. Strong passwords and 2FA – a sure thing
A long, unique password + two-factor authentication (2FA) is essential. I recommend an authentication app (like Google Authenticator or Authy) because SMS is not completely secure anymore.
6. Use a VPN
This is something that a lot of people underestimate. But a VPN isn’t just for watching foreign Netflix.
When you use a VPN:
- You’re hiding your real IP address
- You mask the location
- Encrypt your connection even on public Wi-Fi
- You make it harder for an attacker to track you by your online activity
At home, we keep our VPN on all the time – even on our mobile phones. If someone can’t assign you an IP address, they lose the ability to find out where you are. And that’s what counts in doxing prevention.
What do you do when someone doxxes you?
A few people have contacted us after someone sent their own address to their DMs with a threat. That’s when it stops being an “internet problem”. This is first aid:
- Take screenshots – document everything that’s posted.
- Report it to the platform – most have forms directly for reporting doxing.
- Change your passwords – don’t let anyone get any more data.
- Contact someone you trust – you can’t do it alone. Family, friends, a lawyer.
- Contact the police – even if the culprit is not clear, reporting makes sense.
Most importantly: Don’t take this lightly.
Doxing is not a “joke”. It’s not “just the net”. It is a form of manipulation and coercion that can have very real consequences. And yet most people have no idea how easy it is to find information about them. The more you learn now, the less chance you’ll have to defend yourself in a panic one day.
