What you can actually hide, and what you cannot
You cannot hide everything. Your internet service provider sees every website you visit. Your phone company knows where you are. The websites you use see your real IP address unless you take specific steps. But you can hide your personal information from most websites, advertisers, and data brokers — and from casual observers on public networks.
The realistic goal is not invisibility. It is reducing who knows what about you, and making it harder for strangers to connect the dots. A person trying to find your home address will have a much harder time if you have not posted it publicly, if your social media accounts do not link to each other, and if you have not filled out forms with real details.
This guide covers the practical steps: what to do on the websites you use every day, how to protect yourself on public WiFi, and which tools actually work versus which ones create a false sense of security.
Key Takeaways
- Limit what you post publicly on social media and search for yourself regularly to see what information is visible to strangers.
- Use a password manager to create unique, strong passwords for each website so a breach at one site does not expose your accounts elsewhere.
- Turn on two-factor authentication for email and financial accounts, because your email address is the master key to resetting passwords on other sites.
- Use a VPN on public WiFi networks to prevent people on the same network from seeing your passwords and browsing activity.
- Avoid filling out forms with real personal details unless the website genuinely needs them to provide the service you want.
What websites and advertisers actually know about you
Websites collect information in three ways: what you tell them directly, what they observe about your behavior, and what they buy from data brokers. The first two you can control. The third is harder.
When you fill out a form with your name, email, phone number, or address, that website stores it. If the website is breached, that information leaks. If the website sells data to advertisers or data brokers, your information spreads. If you use the same email address on many sites, a breach at one site makes it easier for someone to find your accounts elsewhere.
Websites also track your behavior: which pages you visit, how long you stay, what you click on. They do this through cookies — small files stored on your computer that identify you when you return. Advertisers use these cookies to follow you across different websites and build a profile of your interests. You cannot stop this entirely, but you can limit it by clearing cookies regularly, disabling third-party cookies in your browser settings, or using a browser that blocks trackers by default.
Data brokers buy information from public records, purchase history, and other websites, then sell it to advertisers, employers, and sometimes to anyone willing to pay. You cannot prevent data brokers from existing, but you can request that major brokers remove your information. The Federal Trade Commission maintains a list of data brokers and instructions for opting out.
Controlling what you post and what search engines find
The easiest way to hide personal information is to not post it in the first place. Search for your own name regularly — on Google, on social media platforms, and on people-search websites. Write down what you find. If your home address, phone number, or workplace is visible, you have a problem to solve.
On social media, change your privacy settings so that only friends can see your posts, your location, and your photos. Do not post your phone number, home address, or workplace publicly. Do not post your birthday in full — use a year that is not your real birth year, or leave the year blank. Avoid checking in at locations or tagging yourself at home. Do not post photos that show your house number, street sign, or distinctive landmarks that reveal where you live.
If your name appears on people-search websites like Whitepages, Spokeo, or BeenVerified, you can request removal. Most of these sites have an opt-out process, though it varies. Search "[website name] remove my information" to find the specific steps. You may need to verify your identity by uploading a photo of your ID. This process takes time — sometimes weeks — and you may need to repeat it because new data gets added constantly.
Search engines like Google also index old information. If you want something removed from Google search results, you can request removal through Google Search Console. This does not delete the information from the website itself, only from Google's search results. The original website still has it.
Using strong passwords and two-factor authentication
If someone gains access to your email account, they can reset the passwords on every other account you own. Your email is the master key. Protect it fiercely.
Use a password manager like Bitwarden, 1Password, or KeePass to generate and store unique passwords for every website. A password manager means you only have to remember one strong master password. When you log into a website, the password manager fills in your login automatically. If that website is breached, the stolen password only works on that one site because you never reused it.
Turn on two-factor authentication (also called 2FA or two-step verification) for your email account and for any financial accounts. Two-factor authentication means that even if someone has your password, they cannot log in without a second piece of information — usually a code from an app on your phone, a text message, or a physical security key. For your email, use an authenticator app like Google Authenticator or Authy rather than text messages, because text messages can be intercepted. For financial accounts, a physical security key like a YubiKey is the most find option, but an authenticator app is much better than nothing.
Protecting yourself on public WiFi networks
When you connect to public WiFi at a coffee shop, airport, or library, anyone else on that network can see your unencrypted traffic. They can see the websites you visit, the passwords you type, and the information you send. This is not theoretical — it is straightforward to do with free tools.
A VPN (virtual private network) encrypts all the traffic between your device and the VPN company's server. To anyone on the public WiFi, it looks like you are just connecting to the VPN. They cannot see which websites you visit or what you send. Your internet service provider cannot see it either. The VPN company can see it, which is why you should choose a VPN company you trust.
Reputable VPN services include Mullvad, ProtonVPN, and IVPN. These companies have published privacy policies stating they do not log your activity. Free VPNs are often funded by selling your data to advertisers, which defeats the purpose. If you are paying nothing, the product is you.
Use a VPN whenever you connect to public WiFi. Do not do banking, shopping, or anything involving passwords on public WiFi without a VPN. Even with a VPN, avoid logging into accounts on public computers — use your own device.
Limiting what you share with websites and apps
Many websites and apps ask for permissions they do not actually need. A weather app does not need access to your contacts. A flashlight app does not need to know your location. A news website does not need your phone number.
Before you fill out a form or grant a permission, ask yourself: does this website actually need this information to do what I want? If the answer is no, leave it blank or deny the permission. Websites will still work without optional information.
When you sign up for a service, read the privacy policy or at least skim it. Look for sentences about selling data to third parties or using your information for advertising. If the policy says the company sells your data and you do not want that, use a different service or use a fake name and email address if the service does not require real information.
Some websites offer a "sign in with Google" or "sign in with Facebook" button. This is convenient, but it tells Google or Facebook that you use that website. If you want to limit what these companies know about you, create a separate account with a unique email address instead.
Understanding what tools actually protect you
Some privacy tools work. Others create a false sense of security.
Tools that work: VPNs on public WiFi, password managers, two-factor authentication, clearing cookies, using a browser that blocks trackers (like Firefox or Brave), and not posting personal information publicly. These are all straightforward and effective.
Tools with limits: Incognito mode (also called private browsing) hides your history from other people using your device, but it does not hide your activity from your internet service provider or the websites you visit. Tor Browser hides your IP address and encrypts your traffic, but it is slow and websites often block it. Email encryption protects the content of your email from being read in transit, but it does not hide who you are emailing or when.
Tools that do not work: Paid privacy apps that claim to "delete your data" or "remove you from the internet" are usually scams. They cannot delete information that is already public or that data brokers have already purchased. Antivirus software marketed as a privacy tool usually does not protect your privacy — it protects against malware. If a tool promises to hide you completely or may provide your privacy, it is lying.
Frequently Asked Questions
Can I really remove my information from the internet?
No, not completely. Once information is public, it spreads. But you can remove it from the most common places: your social media accounts, people-search websites, and Google search results. This makes it much harder for a casual person to find your information, even if it is not impossible for someone determined.
Is a VPN illegal?
No, VPNs are legal in most countries, including the United States. They are used by journalists, activists, and ordinary people who want privacy on public networks. Some countries restrict or ban VPNs, but that is not the case in North America or Europe.
Should I use a VPN all the time, or just on public WiFi?
A VPN on public WiFi is essential. Using a VPN all the time is a personal choice. It slows your connection slightly and costs money if you use a reputable service. It prevents your internet service provider from seeing which websites you visit, which some people value. It does not hide your activity from the websites themselves — they still see your real IP address if you log in.
What should I do if I find my information on a people-search website?
Search the website name plus "remove my information" or "opt out" to find the removal process. Most sites require you to verify your identity. Keep records of when you requested removal. If the site adds your information again later, you may need to request removal again.
Is it safe to use the same password everywhere if it is a strong password?
No. If one website is breached, that password works on every other account. A strong password only protects you from guessing attacks, not from breaches. Use a password manager to create a different strong password for each site.