OSINT for Beginners: What the Internet Already Knows About You
An ethical introduction to open-source intelligence: the free techniques investigators use to map a digital footprint, and how to run the same checks on yourself defensively.
Published · Updated · 9 min read
Open-source intelligence, OSINT, is the discipline of drawing sharp conclusions from publicly available information. No exploits, no hacking: just search engines, public records, archived pages and patient correlation. Journalists verify sources with it, recruiters vet candidates with it, and yes, criminals scope victims with it. Learning the basics is doubly valuable: it shows you what strangers can assemble about you, and it teaches the defensive habits that shrink that picture.
This primer covers the core techniques honestly and ethically, framed around auditing your own footprint first.
Rule zero: ethics and legality
OSINT means public information accessed legitimately. Logging into someone's account, buying stolen data, or harassing research targets crosses legal and ethical lines everywhere. Investigate yourself, consent-based subjects, or professional engagements. When you find someone else's exposed sensitive data, responsible disclosure, notifying the owner, is the only right move.
Start with search engines
Google indexes vastly more than people assume. Quoted exact phrases, site-scoping (site:linkedin.com), and filetype filters (filetype:pdf) turn a search box into a recon console. Security teams routinely find their own stray spreadsheets, config files and staging servers this way, our Dork Builder composes these operators point-and-click.
Try your name, email, usernames and phone number in quotes. Then repeat on DuckDuckGo and Bing: indexes differ more than you'd expect, and older caches sometimes retain deleted content.
Usernames are sticky identifiers
People reuse handles across platforms for years. Once one handle is known, checking whether the same string exists on GitHub, Reddit, Steam, Twitch and dozens of other services is mechanical, probing profile URLs returns found/not-found. That linkage turns scattered profiles into a coherent portrait of interests, employers and social circles.
Run our Username Cross-Search on your usual handle. Anything surprising? Old forums you forgot, perhaps, each is a password-reset surface and a social-engineering prop.
Emails, breaches and correlation
An email address links everything: newsletter subscriptions, shopping accounts, breach dumps. Breach lookup shows which incidents contain it; combined with a username search, an outsider quickly maps which services you use and where your credentials may be compromised. This is exactly how targeted phishing gets its convincing details.
Data brokers amplify this: people-search sites aggregate names, addresses, relatives and phone numbers from public records. Opt-out processes exist for the major brokers and are worth doing annually, tedious but effective footprint reduction.
Network-level traces
- IP addresses reveal ISP, organization and approximate location, visible to every server you visit and embedded in email headers you send.
- Photos frequently carry EXIF metadata: GPS coordinates, device models, timestamps. Strip location data before posting, or check what a photo leaks before sharing it.
- Archived snapshots (Wayback Machine) preserve deleted pages indefinitely; assume anything ever published remains retrievable.
Building your defensive habit
- Quarterly: breach-check your active emails; rotate any exposed passwords immediately.
- Twice yearly: re-run username searches for forgotten profiles; delete or lock dormant accounts.
- Annually: audit social-media privacy settings and old posts; opt out of newly appeared broker listings.
- Ongoing: unique passwords via a manager, 2FA everywhere, and a pause before publishing anything you wouldn't want correlated a decade from now.
OSINT isn't sinister by nature, it's literacy about how the modern internet remembers. Audit yourself with LeakLens' free tools, close the gaps you find, and the picture strangers can build about you shrinks to what you actually chose to share.