How to audit your digital footprint and find your photos online

A digital footprint audit is a structured check of what anyone can find about you: your names and usernames in search, the photos of you that are public, and the pages that reuse them. Do it in one sitting with a simple log, fix what you control first, then send targeted requests for the rest and repeat the check a few times a year or whenever something changes.

This guide covers the whole loop: building an inventory, searching names and photos, which photos are worth checking, how to triage what you find, what to do about wrong records, how to cut down future reuse, and how often to look again. It is written for checking yourself. The same tools should not be used to profile a stranger or find out where someone lives.

What a self-audit should cover

Keep the scope small enough to finish in an afternoon. A useful audit answers four questions:

1. What comes up for my name and handles? Search results, profiles, directories, people-search sites.
2. Where do my photos appear? Exact copies of pictures you published, plus pages showing other photos of your face.
3. Is anyone pretending to be me? Accounts using your photos with a different name, or your name with your photos.
4. What exposed details matter most? Home address, personal phone, recovery email, date of birth, children's school, workplace details you did not intend to share.

Exposure that can cause real harm (an address, an impersonation account asking people for money) comes before cosmetic issues like an old haircut on a forgotten forum.

Step 1: Build your inventory

Before searching anything, write down what you expect to find. This "known list" is what makes the audit fast, because every expected result can be ticked off in seconds and only unfamiliar ones need attention.

• Names: your full name, maiden or previous names, common nicknames, and the name plus your city or employer.
• Handles: every username you have used, including old gaming, forum and email-prefix handles.
• Accounts: the profile URLs of every account you know about, including ones you stopped using.
• Photos: the original files of your current and past profile pictures, professional headshots, creator avatars and any photo you know was published widely.
• Permissions: places you knowingly gave a photo to (employer site, conference, podcast, guest article, agency).

Store the originals in one folder. You will search with them, and you will need them later as proof that a picture is yours.

Step 2: Search your names and handles

Run these while signed out of Google, or in a private browser window, so personalised results do not hide what strangers see.

1. Search your full name in quotes, then with your city, employer and school.
2. Search each username in quotes. Old handles often lead to forgotten profiles that still show a photo.
3. Check the Images tab for each name search, not only the web results.
4. Look at the first three pages of results, not just the first.
5. If you are in the US, check whether people-search sites list your address and phone. Most have their own opt-out page.

Google also offers Results about you, which lets you request removal of results showing your phone number, home address or email, and can alert you when new ones appear. It needs a Google account and covers contact details, not photos in general.

Step 3: Search your photos

Names find pages that mention you. Photos find pages that show you, including those that never mention your name, which is exactly where impersonation usually lives. Two kinds of search do different jobs:

Run each important photo through at least one copy search. For a face search, use a clear, front-facing photo of yourself; a cropped headshot from a group photo works if your face is large enough. The face search vs reverse image search guide explains why the two return such different results.

Facehunch runs a face search for $4.99 per search with no subscription and shows each result with its source link and a similarity score. It is a one-off check rather than a monitoring service, so it fits a periodic audit better than daily use. If you want to compare options first, see how to choose a reverse image search tool.

Read every result on its source page before reacting. A face-search match is a similarity, not proof: if a result only looks like you, treat it as unconfirmed.

Which of your photos to check first

Old profile pictures

Changing your avatar does not change copies elsewhere. Old profile photos are the most commonly stolen because they are public, square-cropped and attached to accounts that may be abandoned. Search each past avatar separately and sort results into three buckets:

• Your own old accounts. Log in and update or delete them. If you cannot log in, use the platform's account recovery or its form for reporting an account you no longer control.
• Legitimate old uses. A conference speaker page from 2019 still showing your old photo is usually fine, even if dated. Ask for an update only if it matters.
• Third-party reuse. A different account presenting your face as its own portrait. This is the case to document and report.

Professional headshots

Headshots travel: employer pages, speaker bios, guest posts, directories, press kits. Search every version you supplied (square crop, wide crop, colour and black-and-white). For each result, open the full page and check:

1. Is the role and affiliation still accurate?
2. Does the page imply a current endorsement you never gave, such as a sales page using your face next to a product?
3. Did you give permission, and did it have limits (one event, one year)?

A past-role bio on an event archive is normal. A product page implying you endorse it today is a different use and worth a specific correction request.

Creator avatars and brand photos

If you publish content, fan pages and reposts are expected. What you are looking for is an account that claims to be you. Search your avatar and one common crop, then read the bio and linked site of each unfamiliar account. A page clearly labelled as a fan account is different from one using your face, your name and a payment link. If followers are being targeted, post your official links from your verified accounts rather than encouraging people to pile on an account you are not sure about.

How to triage what you find

Every finding goes into one of these rows. Work top to bottom.

For anything you want taken down, the guide to removing images from a website and from Google explains which route fits which problem, and the photo removal request templates give you wording to send.

When a record is wrongly linked to you

People-search sites, background-check reports and aggregator pages sometimes attach the wrong record to your name or photo, usually because someone shares your name. A matching name or similar face is not identification.

1. Capture the error precisely. Save the URL or report reference, the date and one sentence on what is wrong.
2. Find where the error starts. Is the original record wrong, or is a third-party page linking the wrong person to a correct record? The fix is different.
3. Use the official correction route. Contact the issuing agency, the screening company or the site's correction or opt-out form. Send the minimum evidence they ask for through their own secure channel, never in a public post.
4. Chase copies separately. Correcting the source does not update every database or search snippet that copied it. Keep the confirmation and send it to the others.
5. Get help if a decision depends on it. If the error affects a job, tenancy or loan, a formal dispute process may apply. In the US, the Fair Credit Reporting Act gives you the right to dispute inaccurate information in a background-check report with the company that produced it. Qualified advice is worth it when the stakes are high.

A face search cannot authenticate an official record or settle a disputed identity; it only shows where similar photos appear.

Reduce future reuse

No setting stops every copy of a public photo. You can make reuse less likely and easier to deal with:

• Choose the audience before posting. Check whether the account and the specific post are public. A private audience reduces exposure but any approved viewer can still screenshot.
• Look at the whole frame. Remove photos that show your address, car plate, ID badge, mail, school uniforms or other people who did not agree to be public.
• Strip location data. Phones can store GPS coordinates in the photo file. Apple explains how to manage location metadata in Photos; most social apps also strip it, but files you send directly or post on your own site may keep it.
• Keep the original, publish a smaller copy. Store the full-resolution original privately with its date. It is your best evidence that a picture is yours.
• Use watermarks for credit, not protection. A watermark helps in casual sharing but can be cropped out. It does not replace a report or a licence.
• Retire old accounts properly. Delete accounts you no longer use instead of leaving them with your face on them.

How often to repeat the audit

Constant searching produces noise, not safety. A schedule tied to real events works better:

Use the same original photos each time so results are comparable, and review new sources before rechecking known ones. Close resolved items in your log. A quiet check means nothing turned up in that search; no tool's index covers the whole web, so it is not proof that no copy exists. Facehunch does not offer ongoing monitoring; it is a single search you run when you choose. The find my photos online page walks through running one.

Keep an audit log

A one-page log turns a scary pile of screenshots into a short to-do list. Use a spreadsheet with these columns:

Record the date of each search and which tool you used. When you send a request, note the reference number and recheck the page later; search results often lag behind the source by days or weeks. For how your own uploaded photos are handled during a search, see photo search privacy.

Written by Facehunch with AI assistance and checked against the cited sources. Our editorial policy.