What Is Doxxing and How Do You Protect Yourself?
Doxxing turns scattered public details into a targeting tool. The defense is to make you harder to piece together.
By Siddharth ShankarUpdated October 11, 2026Doxxing is the deliberate disclosure of personal information to bully, harass or intimidate. It usually relies on details already scattered across social media, people-search sites and records. Protect yourself by making accounts private, removing listings, limiting location sharing and watching which usernames link your accounts. Report threats to the platform and local authorities.
Scammers start with details that have already leaked. Is your email one of them?
Free · About 30 seconds · No sign-up · Email not stored
Doxxing is not hacking. In most cases nobody breaks into anything. Someone gathers details that are already visible somewhere, ties them to your name and publishes them to harm you. That is why the best protection is understanding how easy you are to piece together.
What doxxing is
The Electronic Frontier Foundation (EFF) defines doxxing as the deliberate disclosure of personal information meant to bully, harass or intimidate. CISA describes it as exposing private information about you online and notes that threat actors can use public information for spear-phishing, identity theft and account takeover.
Typical targets are people in public disputes, online communities or professions that attract anger. But anyone can be targeted by someone with a grudge.
How it happens
A doxxer rarely needs a secret. Typical building blocks are:
- A username reused across platforms, which links accounts together.
- Photos that show a house number, workplace or landmark.
- Posts with location tags or timestamps.
- People-search listings that show addresses, phone numbers and relatives. See what strangers can find about you online.
- Public records such as property or voter data.
- Data from breaches that includes emails and phone numbers.
Each piece is minor on its own. Combined, they can lead to your home or workplace.
What about IP addresses?
Searches for doxxing often mention IP addresses. We have not found an authoritative source that gives specific IP-address advice, so we keep this general. An IP address generally points to your internet provider and an approximate area, not a street address, and only your provider can match it to a customer. The practical risk comes from combining it with other clues. The better protection is limiting what you reveal on platforms and in messages.
Your best defence is knowing what scammers may already have. Check your email free.
Free · About 30 seconds · No sign-up · Email not stored
Protect yourself before it happens
1Make social accounts private
CISA suggests making accounts private and leaving out your birthdate and location. EFF also lists making social accounts private.
2Turn off location tags and control tagging
Disable geo-tags on photos and posts, and control who can tag you. CISA recommends this, and also reviewing third-party apps.
3Check where your usernames appear
EFF suggests username-search tools to see where your handles are registered. See how to find old usernames and accounts online.
4Remove people-search listings
EFF says manual data-broker opt-outs are most effective and that automated removal services have been found to be less effective. Start with how to opt out of data brokers yourself.
5Use state and platform protections
EFF points to Address Confidentiality Programs where states run them, and to California's DROP tool for California residents. See the California Delete Act and DROP.
6Check breaches and secure accounts
EFF recommends checking breach databases such as Have I Been Pwned and updating exposed details. It also lists Google's Advanced Protection and using Signal for sensitive conversations.
If you are doxxed
1. Take screenshots and save links as evidence before anything is deleted. 2. Report the content to the platform and ask for removal. 3. Lock down accounts, change passwords and enable multi-factor authentication. 4. Tell people close to you, such as family and your employer, if it makes sense. 5. Consider contacting local authorities, especially if there are threats. 6. Request removal of search results through Google tools. See Google Results About You. Google's policy treats doxxing as involving threats or a significant amount of aggregated personal information with no legitimate purpose.
Address-specific steps
If your home address is the main risk, see how to remove your address from the internet. Some people qualify for programs that provide a substitute address, which we cover in the public-records guides.
Sources
- EFF: Doxxing safety, part I (definition, username searches, manual opt-outs, ACPs, DROP)
- CISA: Manage your online presence (doxxing, spear-phishing risk, privacy settings)
Frequently asked questions
Is doxxing illegal?
It depends on where you are and what is published. Laws vary by country and state, and some jurisdictions treat threats or harassment as crimes. Report it to the authorities and the platform.
Can I get doxxed through a username alone?
A reused username can connect accounts, which then reveal more details. Using different usernames for different purposes weakens that link.
Does a private account protect me completely?
It helps, but friends, tagged photos and old public posts can still reveal details.
Does removing my data from brokers stop doxxing?
It removes an easy source but not all of them. Combine it with account hygiene and limited sharing.
Should I delete my accounts?
Not necessarily. Reducing public detail and tightening privacy settings is usually more practical than disappearing.
See if your email has already leaked
- Checks your email against known data breaches
- Shows which sites leaked it, when, and what leaked
- We do not store the email you check
Get alerted when your email leaks
Every NordVPN plan includes Dark Web Monitor, which alerts you if your email appears in new leaks.
See NordVPN →Affiliate link. We may earn a commission at no extra cost to you.
Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.