Your Digital Footprint Is Bigger Than You Think: Here's How to Check It
I want to do a quick exercise with you. Think about the last year of your online activity—every search, every "like," every purchase, and every sign-up. Now imagine all of that, not just what you intentionally posted, but all of it, gathered into a single folder.
That’s your digital footprint. For most people, it’s significantly larger, more detailed, and more permanent than they realize. I’m not saying this to scare you; I’m saying it because knowledge is the beginning of control.
Two Types of Digital Footprint
Before we get into the how-to, it helps to understand the two categories of data:
- Your active footprint is everything you’ve deliberately put online: social media posts, comments, or sent emails.
- Your passive footprint is everything collected about you without you necessarily realizing it: browsing history, location data from photos, and records created by third parties.
Most people focus only on what they post. The passive footprint is where the real OSINT work happens.
Step One: Google Yourself Properly
I mean really Google yourself—not just your name. Here is the systematic version:
- Exact Name: Start with your full name in quotes:
"Marie Smith". - Variations: Add variations like your name + your city, or name + your employer.
- Contact Info: Search your email address and your phone number in quotes.
- Usernames: Search any old handles or usernames you’ve used in the past.
- Go Beyond Page One: Don't stop at the first few results, and don't stop at Google—run the same searches on Bing and DuckDuckGo.
- Image Search: Go to Google Images and run your name again. Then, upload your primary profile photo to see where else it appears online.
What are you looking for? Anything that surprises you—old accounts you forgot existed or personal information that should be private.
Step Two: Check Data Broker Sites
Data brokers are companies whose entire business model is collecting publicly available data and selling it. Sites like Spokeo, Whitepages, and MyLife are common examples.
Go to these sites and search for yourself. What comes up might stop you cold. The good news: nearly all of these sites have opt-out processes. The bad news: it’s a manual, ongoing task to keep your data off them.
Step Three: Audit the Wayback Machine
Go to web.archive.org and search for your personal website, your old blog, or even your social media profiles. The internet’s memory is long, but you can submit a request to have specific URLs removed from the Wayback Machine if the content is sensitive or outdated.
Step Four: Audit Your Social Media Privacy Settings
Platforms update their terms and layouts constantly; a "private" setting from three years ago might not mean the same thing today.
Do a full audit of Facebook, Instagram, LinkedIn, and TikTok. Pay particular attention to your listed location, your employer, and your relationship status. If a stranger can see it, an investigator can use it.
Step Five: Check Your Email Breach History
Go to haveibeenpwned.com and enter your email address. This site checks your email against thousands of known data breaches. If you see "pwned," it means your credentials for a specific site were leaked, and it's time to change that password immediately.
What to Do With What You Find
Doing this audit can be uncomfortable; you may feel exposed or frustrated by how much is out there. Once you have a clear picture, you can prioritize what to address:
- Submit opt-out requests to data brokers.
- Request removals of cached content from Google and Bing.
- Deactivate old accounts that no longer serve you.
You have more control over your digital footprint than you think, but you have to be the one to take the first step.
- Marie Landry, OSINT Investigator & Founder, Marie Landry's Spy Shop
Comments
Post a Comment