Digital Footprint Check: How to Audit What’s Online About You

A digital footprint check is an audit of everything publicly findable about you online: what search engines show for your name, your photos, old and current social accounts, listings on people-search sites, your appearances in data breaches, and what other people have posted about you. To run one, work through each of those sources in turn, write down every item you find in a simple spreadsheet, and rate each for how visible and how harmful it is. That list becomes your plan for what to fix first.

This guide is the audit step only. Once you have your list, our guide on how to clean up your digital footprint covers deleting, locking down and replacing what you found.

What counts as your digital footprint

Your digital footprint has two halves, and a good check covers both.

Type	What it includes	Who controls it
Active footprint	Things you posted or signed up for: social profiles, reviews you wrote, forum posts, comments, bios, old blogs	Mostly you, if you can still log in
Passive footprint	Things collected or published about you: people-search listings, news mentions, tagged photos, public records, breached data	Mostly other people and companies

The active half is usually quicker to fix because you hold the keys. The passive half takes requests, opt-outs and sometimes patience, which is why it helps to know its size early.

Before you start: set up your audit sheet

Open a spreadsheet or notebook with these columns: where you found it, the link, what it shows, how visible it is (for example, first page of Google or buried), how harmful it is, and what you plan to do. Write down the date too, so you can compare later.

Also list the identifiers you’ll search for. Most people forget some of these:

• Your full name, common nicknames, maiden or former names, and your name with a middle initial
• Current and past email addresses
• Current and past phone numbers
• Usernames and handles you’ve used, including gaming and forum names
• Your home address and previous addresses
• Your business or employer name, if people connect it to you

Step 1: Search engines

Start where most people will look. Search each form of your name in quotation marks on Google and Bing, while signed out or in a private window, and add a city, employer or school to narrow common names. Go past the first page, and check the Images, News and Videos tabs.

Our step-by-step guide on how to google yourself covers the search operators and settings that make this faster and more complete. Record everything you find, including good results. Positive, accurate pages are part of your footprint too.

Step 2: Your images

Photos can travel further than text. Run a reverse image search on your main profile photos and any headshots, so you can see where they appear, including sites that copied them. Our guide to reverse image search shows how to do this with the major tools.

Note any photos you didn’t expect: old party pictures, images used on accounts that aren’t yours, or your photo on a page with someone else’s name.

Step 3: Old and forgotten accounts

Most people have far more accounts than they remember. You’re not just looking for public profiles; you’re finding accounts that could leak data later or be taken over.

1. Search your email inboxes for words like “welcome”, “verify your email”, “confirm your account” and “your order”. Each hit is an account.
2. Check your password manager or browser’s saved passwords for sites you’ve logged in to.
3. Look at “Sign in with Google” or “Sign in with Apple” connections in those account settings, which list the apps and sites you’ve linked.
4. Search your old usernames in quotes on a search engine to find forums, gaming sites and communities.

For each account, note whether it’s public, whether you still use it and whether you can still log in. That last column matters later, because accounts you can’t access need a different fix.

Step 4: People-search sites and data brokers

People-search sites compile addresses, phone numbers, relatives and age from public records and commercial data, and often rank well for names. Search your name with your city on a few of the larger sites and note each listing and its URL.

You’ll probably find several, some with outdated or mixed-up details. Our hub on how to remove yourself from people-search sites lists the opt-out routes when you’re ready to act.

Step 5: Data breaches

Breached data isn’t usually visible on Google, but it’s a big part of your passive footprint and a common route into accounts. Enter each email address and phone number into Have I Been Pwned and note which breaches each appears in and what data was exposed. Check your password manager’s security or password checkup feature too, which flags saved passwords known to have leaked.

Step 6: What other people post about you

This is the part you control least and the part that often matters most.

• Tagged photos and mentions on Facebook, Instagram and other networks. Check the tagged-in sections of your own profiles.
• Reviews and comments that name you, especially if you run a business or work in a customer-facing role.
• Forum threads, Reddit posts and news comments that mention your name or username.
• Public records such as court records, property records and professional licenses that appear in search.

Step 7: Score and sort what you found

A long list is only useful once it’s sorted. Give each item two quick ratings.

Rating	High	Low
Visibility	First page for your name, or on a profile people check	Deep in results or only findable with an exact username
Harm	Exposes your address or phone, is false or damaging, or could be used to hack you	Old but harmless, or simply outdated

Then put every item into one of four groups: delete it (things you control), request removal (things others control), outrank it (things that can’t be removed) and keep it (good, accurate results worth strengthening). The high-visibility, high-harm items go to the top of your list.

A worked example

This is an illustrative scenario, not a real client.

Priya is about to start interviewing for management roles and wants to know what a hiring manager might find. She spends an afternoon on a digital footprint check and ends up with this short list:

• Search results: her LinkedIn ranks first, but page one also shows a people-search listing with her current address. High visibility, high harm.
• Images: a reverse image search finds her old profile photo on a forum she stopped using years ago. Low visibility, low harm.
• Old accounts: an inbox search turns up an old blogging account with a handful of posts she no longer agrees with. Medium visibility, medium harm.
• Breaches: one email appears in two breaches, and her password manager flags a reused password. Invisible to employers but a real security risk.
• Others’ posts: nothing concerning.

Her order of work: change the reused password that day, opt out of the people-search listing, then delete or privatize the old blog. Only after that does she think about building more positive profiles.

Common mistakes

• Searching only your name while signed in. Personalized results can hide what others see. Use a private window and try more than one search engine.
• Skipping the passive side. Your own accounts are only half the picture.
• Starting deletions before the audit is done. You may delete something harmless while missing something serious. Finish the list, then prioritize.
• Paying a stranger for a “footprint scan”. Most of this is free to check yourself, and some paid scans are really lead forms for data removal subscriptions. If you’re weighing one, read whether data removal services are worth it.
• Doing it once. Your footprint keeps changing. Repeat the check every few months and after major life events.

Going further: data companies hold privately

A standard check covers what’s publicly findable. Companies also hold data about you that never appears in search, such as purchase histories, location data and ad profiles. Depending on where you live, privacy laws may let you ask a company what it holds. In the EU and UK, and in several US states, you can make a formal request; our guide to making a data subject access request explains how.

When to get help

A self-audit works well for most people. It’s worth bringing in help if your check turns up damaging content you can’t get removed, results that confuse you with someone else, or more items than you have time to handle. Our personal reputation management service starts with this kind of audit and a realistic plan for what can and can’t be changed. We’re also building a free Name Scanner, launching soon, designed to help with the search step.

Frequently asked questions

How do I check my digital footprint for free?

Search your name, emails, phone numbers and usernames on Google and Bing in a private window, run a reverse image search on your photos, check people-search sites, and enter your emails into Have I Been Pwned. All of this is free.

How long does a digital footprint check take?

For most people, an afternoon covers the main sources. It takes longer if you have a common name, many old accounts or a public-facing job.

How often should I check my digital footprint?

Every few months is a reasonable routine, plus after a job change, move, breakup or anything that puts your name in the news. Alerts on your name can fill the gaps between checks.

Can I erase my digital footprint completely?

Not completely. You can delete what you control, request removal of much of what others hold, and push the rest down with better results. Public records and news coverage are usually the hardest to remove.