Privacy guide
How to keep online identities separate, from browser profiles to a second device
Many people keep more than one identity online: work, personal, a pen name, a research account. This guide compares the tools that keep them apart and matches each one to a threat.
Direct answer
To keep online identities separate, give each identity its own browser storage, network route and accounts. Then match the strength to your threat. Browser profiles and containers stop most ad tracking. Antidetect profiles, separate OS users and virtual machines separate more. For anonymity or high-risk threats, use Tor Browser, Tails or Qubes OS. Habits matter as much as tools: separate email, phone, payment and writing style.
What “separate” means online
An online identity is more than an account. It includes your cookies, your IP address, your device’s fingerprint and your habits. Websites can link two identities when enough of these match.
Keeping identities apart is normal. People split work and personal life, write under a pen name, or research a topic away from their main account.
Ten levels of separation, from weakest to strongest
The order is rough. Each step separates more and takes more effort.
| Level | What it separates | What it shares | Effort | Good for |
|---|---|---|---|---|
| Private window | Cookies and site data, deleted when the session ends | IP, fingerprint, device. All Chrome Incognito windows share one session. | None | A one-off visit |
| Browser profile | Cookies, history, passwords, extensions | IP, fingerprint, hardware | Low | Work and personal on one computer |
| Container (Firefox) | Cookies, local storage and cache, per tab | History, bookmarks, passwords, extensions, IP, fingerprint | Low | Two logins on one site |
| Separate browser | All browser data and the user agent | IP, hardware, fonts, screen, OS | Low | A simple two-way split |
| Antidetect profile | Storage, proxy and fingerprint values per profile | The operating system and files outside the browser | Medium | Several long-lived identities on one computer |
| Separate OS user account | Files, settings and browser data | Hardware, IP, fingerprint. Admins can usually read all files. | Low | A shared computer |
| Virtual machine | A whole guest OS | Host hardware and, by default, the host’s IP. The host can see inside. | Medium | Risky files, testing, a full work setup |
| Qubes OS | Tasks in isolated Xen VMs called qubes, with network and USB devices isolated | The physical computer and you | High. Linux experience helps. | Journalists, activists, researchers |
| Tails | A clean system from USB at every start, all traffic through Tor, nothing on the hard disk | Hardware and firmware. Optional Persistent Storage carries files over. | Medium: an 8 GB USB stick and a restart | One sensitive identity |
| Separate device | Everything on the device | You, your home IP unless changed, your habits | High: cost | A strict split or a high-risk identity |
The Tails docs warn that using Tails for more than one purpose at a time can reveal your identity. Restart between identities. The rule holds at every level: one identity per compartment.
Rules outside the browser
Identities often get linked by what you do, not by the browser.
- Email and phone: give each identity its own. A shared recovery address links accounts at once.
- No cross-logins: never open one identity’s accounts from another identity’s browser, VM or device.
- Writing habits and schedules: style, pet phrases and posting hours can point to one author.
- Payment methods: a card carries your legal name. Use a separate method, or none.
Match the level to your threat model
Ask first: who are you separating from?
| Who you separate from | What they can see | Level that fits |
|---|---|---|
| Websites and ad networks | Cookies, storage, IP and fingerprint | Browser profile, container or separate browser, plus a tracker blocker. An antidetect profile if each identity needs its own IP. |
| A platform’s trust and safety team | Device signals, IP history, email, phone, payment and behavior | Antidetect profile, separate OS user or VM with its own network route, plus every rule above |
| A capable adversary | Network traffic, records from your providers, or the device itself | Tor Browser, Tails, or Qubes OS with Whonix, often on a separate device |
Platforms link accounts to enforce their rules. Some allow a work and a personal account. Others allow one account per person. Separation does not change what a platform allows, so read its rules first.
For anonymity or high-risk threats, Tor Browser, Tails or Qubes are the right tools. They are built to protect you from someone who can watch your network or get your providers’ records.
Browser profile vs virtual machine
A browser profile separates what the browser stores. A virtual machine separates a whole operating system, so files, apps and downloads stay apart. A bad file opened in a VM also has a harder path to your main system.
Neither changes your IP by itself. The VirtualBox manual says NAT is its default mode, so outside systems see the host’s IP.
An antidetect profile is lighter than a VM, with its own proxy and fingerprint values per profile. It does not separate files or apps outside the browser.
Where AliasMode fits
AliasMode works at the antidetect profile level. It is a free, open-source desktop app for Windows, Mac and Linux. Each profile has its own data folder, HTTP or SOCKS5 proxy, and stable fingerprint values. Local mode needs no account and keeps profiles on your computer.
Frequently asked questions
How do I keep online identities separate?
Give each identity its own browser storage, network route, email, phone and payment method. Never log in across identities. Then pick the level by threat, from browser profiles up to Tor Browser, Tails or Qubes.
What is online compartmentalization?
It means keeping each part of your online life in its own box. A leak in one box then does not expose the others. Qubes OS applies the idea to a whole system.
Is a browser profile or a virtual machine better for separating identities?
A virtual machine separates more: the whole OS, files and apps. A browser profile is lighter and enough against most ad tracking. Neither changes your IP on its own.
Is an antidetect browser better than a VM?
They solve different problems. An antidetect profile gives each identity its own proxy and fingerprint values with little overhead. A VM isolates a whole OS but uses the host’s IP by default. Some people use both.
Do I need Tor to keep identities separate?
Not for a work and personal split. For anonymity, or against a capable adversary, yes. Tor Browser, Tails and Qubes OS with Whonix are built for that.