← Back to Protocols
Operational Protocol

Multi-Persona Security Protocol

Practical rules to create and operate multiple online personas safely with minimal cross-contamination.

Managing Multiple Identities

A simple guide on how to keep your online lives separate and safe so no one can link them together.

1. Purpose & Threat Model

This protocol helps you run isolated personas to reduce the risk of identity linking, data leaks, and targeted profiling. Identify the threat model (who might try to link personas and why) before creation.

1. Why do this?

This guide helps you keep different online "you's" from getting mixed up. This is useful if you want to keep your work life, hobby life, and private life completely separate so that if one account is hacked or leaked, your others stay safe.

Threat Model Checklist Who are you hiding from?

  • Adversary type: Web scrapers, targeted individuals, legal investigators, or employers. Employers, nosey people, or data-tracking companies.
  • Data sources: Social media, email headers, public records, payment records. Public records, old emails, or social media posts.

2. Persona Creation Template

Store these templates in an encrypted password manager. Fill one for every unique identity.

2. Making a New Identity

Use this simple form to keep track of each different account you make. Keep this info in a safe place like a password manager.

Name/Handle: [e.g., Alex Rivers]
Purpose: [e.g., Tech hobbyist, X Forum]
Backstory: [Age range, non-identifying city]
Primary Contact: [Burner email or alias]
Network: [VPN / Tor / Bouncer]

3. Operational Golden Rules

3. The Golden Rules

  • Compartmentalize: Keep them apart: Separate email, phone, and browser profiles for each persona. Use a different email address and a separate web browser for each account.
  • Unique Credentials: Never reuse passwords: Never reuse passwords. Generate long, random strings via manager. Use a different, long password for every single site.
  • Strip Metadata: Clean your photos: Remove EXIF from images before uploading (or screenshot the original). Remove the hidden "GPS info" from photos before posting them online.
  • No Cross-Posting: Don't repeat yourself: Never post the same phrase or personal anecdote across different personas. Don't tell the same story or use the same unique catchphrases on different accounts.

4. Communications & Style

Write style determines your digital fingerprint. Decide a consistent tone for each persona and stick to it.

4. How you talk

The way you write can give you away. Try to use a different "voice" for each account—maybe be more formal on one and more casual on another.

  • Use approximate dates (e.g., "late 2010s") instead of exact timelines. Don't give exact dates or locations. Say "a few years ago" instead of "June 2021."
  • If a face is required, use AI-generated avatars that do not resemble you. Use a fake AI profile picture instead of a real photo of your face.

5. Incident Response

5. What if I'm caught?

  1. Immediately revoke sessions and change passwords. Log out of everything and change your passwords immediately.
  2. Retire any linked personas if a cross-contamination occurs. If someone links two of your accounts together, stop using both and start fresh.

Quick Reference Do these first

  • ✔ Unique Email
  • ✔ Password Manager
  • ✔ Dedicated TOTP
  • ✔ Browser Containers
  • ✔ Separate Network

Toolbox

  • Bitwarden / KeePassXC
  • Firefox Multi-Account Containers
  • VirtualBox / QEMU
  • ExifTool (Metadata)
  • VPN + Tor Layering