How someone gets from your username to your home address

Most of the time, nobody finds your home address in one go. They find one small detail, use it to find another, and keep going until they get somewhere. Investigators call each step a pivot. If you can see the chain, you can usually break it at one or two points.

A typical chain

Here’s what that can look like. Example only: the person and details are made up.

1. Someone knows your username, jexample_runs, from a comment you left online.
2. They search for the username and find an old running forum profile from 2014. It shows the first name “Jordan” and the city “Springfield”.
3. They search a people-search site for Jordan in Springfield. A few people come up. One of them is the right age and lists a relative whose name also appears in the forum profile.
4. That listing shows a street address and a mobile number.

Four steps, and nothing about it was hacked. Every piece was sitting in public. The forum profile wasn’t secret, and neither was the people-search listing. What made it work was the link between them.

The details that connect one record to the next

Some details are much better at connecting one place to another than others. These are the ones to watch:

• Usernames. If you use the same handle everywhere, every account is linked to every other one. One account with your real name or city gives them all away.
• Email addresses. Your personal email is often the key that ties accounts, breaches and listings together. People-search sites and data breaches are both searchable by email.
• Phone numbers. A mobile number usually follows you for years. Reverse phone lookups turn it into a name and, often, an address.
• Photos. The same profile picture on two sites links them. Reverse image search makes this easy.
• Family and friends. A relative’s public profile or a tagged photo can confirm who you are and where you live, even if your own accounts are locked down.
• Your city or workplace. On its own, not much. Combined with a name, it narrows a people-search result down to one person.

Why your address is usually the end of the chain

Home addresses are easy to find in the US because so many records include them: property records, voter files in many states, court filings, utility and marketing data. People-search sites buy and combine these records, so once someone has your full name and a rough location, an address is often one search away.

That’s why the most useful fixes are usually the boring ones: opting out of the people-search listings that show your address, and cleaning up the one or two accounts that connect your online identity to your real name.

Where to break the chain

You don’t have to scrub everything. Look for the links that connect one part of your life to another, and cut those first.

• Opt out of the listings that show your address or phone. That removes the end point of most chains. See How people-search sites get your information.
• Close or edit old accounts that show your real name, city or a photo next to a username you still use. See How old accounts and usernames give you away.
• Stop reusing handles between your public identity and your private one.
• Ask family to keep your address and your children’s names out of public posts.

Seeing your own chains

The hard part is knowing which links exist. You can look yourself, and our guide to searching yourself shows how. Oko’s full report does this for you: it shows each route from a detail like your email to something sensitive like your home address, names the sources at each step, and ranks the fixes by which ones cut off the quickest routes.