OSINT Yourself

Work through this checklist the way an outsider would work through you — one area at a time. Nothing here is sent anywhere: your progress is saved only in this browser.

— / 21

Search engines & people-search sites

Search your full name in quotes (e.g. "Jane A. Doe") and note everything that appears on the first page of results.
Search your name alongside your city, employer or school to see what context leaks alongside it.
Check whether you appear on the major people-search sites, then work through the data broker opt-out directory for the ones that list you.
Use Google's "Results about you" tool to request removal of results that show your contact details directly in search.

Social media privacy

Review each social profile's privacy/audience settings — confirm who can actually see your posts, not just who you think can.
Check whether your friends/followers list is public — it can map your real-world social graph to a stranger.
Skim old public posts for patterns that reveal where you live, work or regularly travel.
Lock down or delete profiles on platforms you no longer actively use.
Check what your public profile photo and bio reveal to someone who has never met you.

Passwords & breaches

Check your passwords against known breach data with the breach & password check.
Turn on two-factor authentication for your email, bank, and primary social accounts.
Replace any password you've reused across sites with a unique one, ideally from a password manager.
Check whether your accounts use security questions with answers that are publicly guessable (mother's maiden name, first pet, etc.).

Photos & metadata

Check whether recent photos you've shared carry embedded GPS coordinates.
Strip metadata from photos before posting them publicly.
Reverse-image-search a profile photo to see where else online it has been reused or reposted.
Check whether screenshots you've shared reveal notification previews, open browser tabs, or usernames in the background.

Accounts & email hygiene

Check how many accounts share your primary email — a single reused address is a strong pivot point for anyone searching you.
Consider a separate email alias for sign-ups and mailing lists rather than your primary address.
Review your email account's connected apps / third-party access list and revoke anything you no longer use.
Check your email address on the breach checker\'s email exposure section.

How findable are you?

Search engines & people-search sites

Social media privacy

Passwords & breaches

Photos & metadata

Accounts & email hygiene