How to be a ghost

Online

You can never truly be invisible/anonymous/ghost online, you can harden your security and anonymity but you can never truely be invisible on the web.

This is because you've never really cared about it until now, you've most likely gone on the web as a child, or had parents post pictures about you. We all know most parents know nothing about OPSEC(operations security), OPSEC is in its simplest form keeping private information off the web, things like your address, phone number, email etc.

Let's start this guide off with simple steps you can do to be more secure.

Use smspool to sign up to things that need a phone number for verification or any other reason.

Use a burner email service to sign up to things that require an email for verification and a privacy focused email provider for a social media account or any other account you'd like to access regularly.

Please note: as of now i don't trust proton mail, but cock.li (another privacy focused email provider) was brought back up recently with a completely new design and I simply don't trust it at all. From what i know proton mail encrypts emails and doesn't sell your data but that is just word of mouth and from the company itself, it is not open source so I won't trust it.

Use keepassxc to manage and create passwords, it is an encrypted password manager. If you don't want to use it because of storage issues, or whatever else it may be, when creating a password completely randomize it to the point where you can't even remember it.

e.g. h&kd1_3*#-fC__+@4js@jVNFi{gDS(fs=K(

be sure to write this down somewhere on paper.

Make sure to turn on 2fa on what ever account you may have if you can, use a yubi key

This next one is just pure commonsense, please dont share your personal information online whether that be your name, address, school just dont.

Use a vpn when ever you turn on your computer, the absolute best vpn i can recommend is mullvad mullvad doesn't keep any logs of ip adresses, read this aritcle on their page.

Detrace

A detrace can be as simple as using a fake name on the internet, this can be a friends name, or a random person you don't know. Detraces can be very useful if made correctly, it takes time to build a detrace and can't be done over night.

1. Create a fake name, you can use fake name generator to help you with this task.

2. Create a new email, preferable something like gmail, go to a place you don't visit often or a place your detrace visits often like a coffee shop, use a different device such as a friend's laptop to make this email account. Sign up to some websites on this email that your detrace would use, if its a blog page write a blog. Once you're done tell your friend to use that email and give them the websites you've signed up for, ask them to use that email so that there will be activity on the email, you will never touch that email again.

3. Once its been a couple of months, red team that detrace you've made and see if it links back to you in any way, if it does keep working on your detrace by asking your friend to do some things for you, start masking your ip address by using a vpn, use different payment methods like crypto, prepaid cards and gift cards.

4. Once you're sure that your detrace will not lead back to you use that email on what ever social media account you'd like, only login to that account with a vpn active that way it won't lead back to your city.

Note: you can also do the same with a phone number.