A Free Educational Resource Created by Carnegie Mellon University to Empower You to Secure Your Part of Cyberspace

Online Identity

A social identity that network users establish in online communities

An online identity is a social identity that network users establish in online communities. To protect their privacy, most Internet users prefer to identify themselves by means of pseudonyms. In some online contexts, including Internet forums, instant messaging, and massively multiplayer online games, an online identity might include an image called an avatar. As other users interact with an established online identity, it acquires a reputation, which enables them to decide whether the identity is worthy of trust.

By means of online identities, people are free to redefine themselves as they wish. While some may choose to redefine themselves as fictitious characters for fun, there are others who may choose to impersonate real people. While playing your favorite cartoon character is harmless, impersonation can be a serious offense.

Besides impersonation, many Internet users assume multiple online identities. Nothing prevents a person from using multiple, distinct online identities in two or more communities.

Internet users commonly believe an online identity gives them anonymity; however, a determined investigator can often draw a connection between an online identity and a "real life" legal identity. Web server and Internet service provider (ISP) logs keep a record of the IP address that is associated with a given online identity. In the U.S., an ISP must divulge this information when it is subpoenaed. In addition, users often disclose personally identifiable information in their user profile pages. Also, it can be possible to draw a connection between a online user's writing style and text posted elsewhere on the Web, which may reveal a "real life" identity.

The future of online anonymity depends on how an identity management infrastructure is developed. Law enforcement officials are often opposed to online identities, which allow criminals to disguise themselves. An identity management infrastructure would irrevocably tie an online identity to a person's legal identity. In most proposals, the system would be developed in tandem with a secure national identity document. In contrast, civil rights advocates argue there is no need for a privacy-invasive system because technological solutions, such as reputation management systems, are already sufficient and are expected to grow in sophistication and utility.

Protective Measures

Practices

  • Protect your personal information: It is easy to pretend to be someone else on the Internet. Be cautious when interacting with anyone online and don't exchange personal information with contacts you're not sure you can trust.

References

My home page