Most guides to “becoming anonymous online” hand you a VPN and a list of browser extensions and call it done. Then you log into your email in the same browser, and every site you visit knows exactly who you are again.
Real anonymity is harder than that, and for most people it isn’t even the goal. What most of us want is to stop being followed: by advertisers, by data brokers, by whoever runs the Wi-Fi in a café. That is very achievable. This guide starts with the question that decides everything else — anonymous from whom — then works through the layers that identify you online, from the most important to the least.
Key Takeaway:
You are identified by several things at once: your IP address, your browser, your accounts, and your own habits. A VPN covers only the first. Anonymity comes from covering every layer that matters for the people you are hiding from, and one careless login undoes all of it.
First: Anonymous From Whom?
Different watchers see different things, and the fix for one does little against another:
| Who is watching | What they see | What actually helps |
|---|---|---|
| Advertisers and trackers | Your browsing across sites, via cookies and fingerprinting | Tracker blocking, a privacy-focused browser, fewer logins |
| Websites you visit | Your IP address, device details, and anything you log in with | A VPN or Tor for the address; separate accounts and email aliases for identity |
| Your internet provider | Every site you connect to and when | A VPN, or encrypted DNS as a partial step |
| Public Wi-Fi operators | The sites you visit on their network | A VPN |
| Data brokers | Your name, address and phone number, bought and compiled | Opting out of their databases, and giving out less in the first place |
| A determined, well-funded adversary | Potentially all of the above, with legal powers | Tor Browser and strict operational discipline — beyond the scope of a beginner guide |
For almost everyone reading this, the first five rows are the real concern. Those are what the steps below address.
🔍 Start by Seeing What You Give Away
Before changing anything, look at what a website can already learn about you. What this website already knows about you shows it live, with no login and no permission prompt: your address, location, device, screen, timezone and more. The Privacy Exposure Score then runs six checks and tells you which of them is the biggest leak.
Run them again after each step below. It is the only way to know a change worked.
Layer 1: Your IP Address
Your public IP address reaches every site you visit. It reveals your internet provider and an estimate of your city, and it links your visits together over time. What your IP address reveals covers exactly how much.
You can replace it in three ways:
- A VPN sends your traffic through a server run by the VPN company, so websites see that server’s address and your provider sees only encrypted traffic. It is the practical choice for everyday use. The catch is that you now trust the VPN company with what your provider used to see — free VPNs in particular often pay for themselves with your data.
- Tor sends your traffic through three volunteer-run relays, so no single one knows both who you are and where you are going. It is the strongest option and free, but slow, and many sites block or challenge it. What Tor is and how it differs from a VPN.
- A proxy changes your address for one app or browser but usually doesn’t encrypt anything. It suits specific tasks, not privacy.
Whichever you use, check that it actually works. A VPN can report “Connected” while your real address still escapes through WebRTC or IPv6. The VPN leak test checks your IP and WebRTC together in a few seconds.
Layer 2: Your DNS Lookups
Before your browser loads any site, it looks up the site’s address. By default those lookups go to your internet provider, unencrypted, so your provider gets a list of every site you visit even when the pages themselves are encrypted.
- With a VPN, your lookups should go through the tunnel to the VPN’s own servers. If they don’t, that is a DNS leak.
- Without a VPN, switching on DNS over HTTPS in your browser encrypts the lookups so your provider can’t read them. It is a partial step: your provider still sees which addresses you connect to.
Layer 3: Your Browser
This is the layer most people forget, and the one a VPN does nothing about. Trackers follow you in two ways:
- Cookies and scripts placed by advertising and analytics companies that sit on thousands of sites at once.
- Fingerprinting: combining ordinary details — screen size, fonts, graphics card, timezone, language — into a profile that is often unique to your device, with no cookie needed. It works the same with or without a VPN.
What helps:
- Use a browser that resists tracking. Firefox with Enhanced Tracking Protection set to Strict, or Brave, which blocks trackers by default and deliberately varies some fingerprinting details. Tor Browser goes furthest: it makes every user look as alike as possible.
- Add a content blocker. uBlock Origin is the standard choice. On Firefox it runs at full strength; on Chrome, changes to Chrome’s extension rules mean only the lighter uBlock Origin Lite is available.
- Keep your browser ordinary. Every unusual setting or rare extension makes your fingerprint more distinctive, not less. A popular browser with few changes blends in better than a heavily customised one.
Private or incognito mode is not on this list on purpose. It stops your own device from keeping a history, but it hides nothing from websites or your provider. Does incognito mode hide your IP? shows the proof in two browser windows.
Layer 4: Your Accounts
The moment you log in, you are no longer anonymous to that site, whatever your IP or browser. Worse, big platforms whose login, “Like” buttons and ad networks appear across the web can connect your visits elsewhere back to your account.
- Separate identities by browser. Keep one browser, or one browser profile, for logged-in accounts, and another for everything else. Firefox’s Multi-Account Containers does this inside one window.
- Use email aliases. Services such as Firefox Relay, SimpleLogin or Apple’s Hide My Email create a different forwarding address for every signup. A leaked or sold address then can’t be matched across sites, and you can switch off any alias that starts getting spam.
- Guard your phone number. It is one of the strongest identifiers you have, because it rarely changes and is linked to your name through your mobile contract. Give it out only where you must.
Layer 5: What You Share Yourself
No tool protects you from yourself. The most common ways people identify themselves:
- Photo metadata. Photos taken on a phone can carry the GPS location where they were taken. Most social networks strip it on upload, but files sent by email, in chat apps as documents, or posted on forums may keep it. Turn off location tagging in your camera settings if you share originals.
- Re-used usernames. A handle you have used for years connects every account that shares it.
- Small personal details. Your street, your employer, your children’s school, your daily routine. Each is harmless alone; together they identify you.
- Mismatched signals. A VPN in another country while your device’s clock says your real timezone is a strong hint that you are using a VPN, and roughly where you really are. The Privacy Exposure Score checks exactly this.
Layer 6: What Is Already Out There
Data brokers and people-search sites already hold your name, address, phone number and relatives, bought from public records and marketing lists. No VPN touches that. The only fix is to ask each one to remove you, and to keep asking, because they re-list people. The free opt-out directory lists the major brokers with a direct link to each removal form.
Putting It Together
A sensible setup for most people, in order of impact:
- A tracker-resistant browser with uBlock Origin, used logged out for everyday browsing.
- A separate browser or container for the accounts you have to log into.
- Email aliases for every new signup.
- A reputable paid VPN on public Wi-Fi and whenever you don’t want your provider seeing where you go. If you need one, PureVPN is the provider this site works with; what to look for in a privacy VPN applies to any of them.
- An afternoon of data-broker opt-outs, repeated every few months.
Then check your work: run the VPN leak test and the Privacy Exposure Score again and compare with where you started.
Common Mistakes
- Treating a VPN as invisibility. It hides your address. Your browser, your accounts and your habits still identify you.
- Logging in “just for a second”. One login in your anonymous browser connects everything you did in that session to your account.
- Using a free VPN. Running servers costs money. If you aren’t paying, the product is often your data.
- Stacking extensions. Ten privacy extensions make your browser rarer and easier to fingerprint. One good content blocker is enough.
- Never checking. Settings change with updates. Test again whenever you change your setup.
Frequently Asked Questions
Can you be completely anonymous online?
Against advertisers and ordinary websites, you can get very close. Against a determined adversary with legal powers, it takes Tor Browser and a level of discipline most people don’t need. For everyday privacy, aim to stop being tracked, not to become untraceable.
Does a VPN make me anonymous?
No. It hides your IP address from websites and your browsing from your internet provider, and moves that trust to the VPN company. Fingerprinting and logins work exactly as before. Does a VPN hide your IP address? covers what it does and doesn’t hide.
Is Tor better than a VPN for anonymity?
For anonymity, yes: no single relay knows both who you are and what you visit, and Tor Browser also makes users look alike. For everyday speed and convenience, a VPN is easier to live with. Many people use a VPN day to day and Tor for the occasional sensitive task.
Can police still identify me?
If they have a legal reason, often yes: through your provider, your VPN company’s records, your accounts or your payment details. Can police track you with your IP address? explains how that process works.
Is being anonymous online legal?
In most countries, using VPNs, Tor, tracker blockers and email aliases is legal. Some countries restrict VPNs or Tor, and anything illegal stays illegal however it is done.