Doxxing: Online Exposure, Privacy, Harassment, and Digital Safety

For example, someone might publish another person’s:

• home address;
• phone number;
• workplace;
• personal email;
• family information;
• private photographs;
• identifying records.

The goal may be to embarrass, threaten, frighten, or encourage other people to target them.

Doxxing can be especially dangerous when the exposed information makes it easier to locate someone offline.

Examples include:

• The journalist was doxxed after receiving online threats.
• Posting someone’s home address to encourage harassment may be doxxing.
• The platform removed content containing private identifying information.

Common expressions include:

• doxx someone;
• get doxxed;
• anti-doxxing policy;
• doxxing campaign;
• personal-data exposure.

The spelling doxxing is common, although doxing is also widely used.

• residential address;
• telephone number;
• private email address;
• workplace;
• school;
• family members’ identities;
• photographs;
• vehicle information;
• financial details;
• account information;
• personal records.

Some of the information may have originally been publicly available in different places.

Doxxing usually involves collecting or publishing it in a way that increases the risk of harassment, intimidation, or unwanted exposure.

Examples may include revealing:

• sexual orientation;
• gender identity;
• dating profiles;
• intimate relationships;
• sexual-health information;
• involvement in sexual communities;
• private sexual communications.

This kind of disclosure can expose someone to stigma, discrimination, family conflict, harassment, or violence.

Doxxing generally involves publishing identifying or private information that makes a person easier to locate or target.

The two can overlap.

For example, posting someone’s real name, workplace, address, and private LGBTQ+ identity could involve both outing and doxxing.

A stalker may collect information from:

• social media;
• public databases;
• photographs;
• usernames;
• online profiles.

The information may then be used to:

• monitor the person;
• contact family members;
• appear at their workplace;
• send threats;
• encourage others to harass them.

Doxxing can therefore move online harassment into the person’s offline life.

A perpetrator might threaten:

• to reveal someone’s real identity;
• to contact their family;
• to expose their workplace;
• to publish sexual information.

The threat may be used to demand:

• money;
• intimate images;
• continued communication;
• sexual activity.

In this context, private identifying information becomes a tool of coercion.

For example, an abusive post might include:

• a person’s name;
• social-media account;
• workplace;
• address;
• intimate photograph.

This can make image-based sexual abuse more dangerous by directing attention and harassment toward the person depicted.

A current or former partner may possess sensitive information such as:

• addresses;
• workplace details;
• family contacts;
• private photographs;
• sexual information.

Relationship access does not create unlimited permission to publish those details.

Using them after a breakup to threaten, embarrass, or expose someone can become a form of digital abuse.

A person may not be openly:

• gay;
• lesbian;
• bisexual;
• transgender;
• nonbinary;
• queer

in every area of life.

Publishing their identity together with their real name, location, school, or workplace can result in unwanted outing and increase risks of harassment or discrimination.

Privacy about identity is therefore an important part of personal autonomy.

Doxxing may expose:

• legal names;
• home addresses;
• family details;
• workplaces outside the industry.

This can create risks involving:

• stalking;
• harassment;
• discrimination;
• threats to personal safety.

Using a public professional identity does not mean consenting to disclosure of private identifying information.

Doxxing may involve gathering information from multiple public sources and presenting it together in a way that creates a new risk.

For example, combining a person’s:

• real name;
• workplace;
• home address;
• family information

into a single hostile post can make targeting much easier.

Context and purpose therefore matter.

• privacy;
• harassment;
• threats;
• stalking;
• personal-data exposure.

Users may be able to report posts containing sensitive identifying information.

Possible platform actions include:

• content removal;
• account restrictions;
• account suspension;
• limits on reposting.

Policies differ between platforms.

Possible steps include:

• reviewing social-media privacy settings;
• limiting public location information;
• avoiding unnecessary publication of home addresses;
• using strong account security;
• separating public and private accounts;
• reviewing old posts for identifying details.

These steps may reduce risk but cannot prevent every form of doxxing.

Responsibility remains with the person who deliberately exposes or weaponizes private information.

• documenting the posts or threats;
• reporting the content to the platform;
• securing online accounts;
• informing relevant people if safety is affected;
• reviewing exposed personal information;
• seeking appropriate legal or safety assistance when necessary.

If doxxing is combined with sexual threats, intimate images, or coercion, the situation may also involve sextortion, stalking, or image-based sexual abuse.

There may not always be a law specifically called an “anti-doxxing law.”

Depending on the circumstances, legal protections may instead involve:

• stalking;
• harassment;
• threats;
• privacy;
• data protection;
• extortion;
• nonconsensual intimate-image laws.

The legality can depend on what information was published, how it was obtained, and the purpose or consequences of the disclosure.

Information found online can never be used for doxxing.
Incorrect. Publicly available information can still be compiled and weaponized.

Doxxing only involves home addresses.
No. Phone numbers, workplaces, family information, identity details, and other data may also be involved.

Doxxing and outing are identical.
No. They can overlap, but outing specifically concerns disclosure of sensitive identity information.

Only famous people are doxxed.
No. Private individuals can also be targeted.

People are responsible for being doxxed if they posted information online.
No. Responsibility lies with the person who deliberately uses the information to expose, intimidate, or facilitate harassment.

1. Doxxing can expose a person’s private address or workplace without permission.
2. The abusive account published identifying information alongside intimate photographs.
3. Doxxing can overlap with cyberstalking and online harassment.
4. Revealing someone’s LGBTQ+ identity and location may create serious privacy risks.
5. Public information can still be weaponized through doxxing.
6. Platforms may remove posts containing sensitive personal information.
7. A former partner does not have permission to publish private identifying details.
8. Understanding doxxing helps readers connect privacy, online harassment, sexual safety, stalking, and digital abuse.

For LGBTQ+ people, sex workers, survivors of sexual abuse, and others who rely on privacy or pseudonyms, doxxing can create particularly serious consequences.

Understanding doxxing highlights an important principle of digital sexuality: people should have meaningful control over who can connect their online sexual or identity-related activity to their offline identity, location, family, or workplace.