A face is one of six things in a video that identify you, and it is the only one most people think about. Here is the rest of the list, in the order it is worth working through — and what it takes to be honest about which of them you have actually dealt with.
Anonymity is not a feature you add. It is the property of a file, an account and a moment in time all failing to point at you simultaneously — and it fails whole. One slip is not a partial failure; it is identification.
1. The face
The one everybody starts with, and the one people most often do badly. Two rules, both argued at length in the guide on whether a blur can be reversed: do not use a blur, because it keeps the face in the file in smeared form; and check the export frame by frame rather than trusting the preview, because the frames where a tracker slips are the frames that get screenshotted.
How much to cover depends on who is looking. A bar across the eyes defeats a stranger and most automated matching. It does not defeat somebody who knows you — a jaw, a hairline and the way you hold your mouth are enough for that, and no amount of eye covering helps.
2. The voice
Underrated, consistently. Voice is biometric: speaker-identification systems perform well on a few seconds of speech, and long before any system is involved, everyone who has met you recognises you immediately. A video with a covered face and your own voice on it is not anonymous to the people most likely to be looking.
- Remove the audio and caption the video. Crude, free, and the only option on this list that cannot be undone.
- Do not rely on a pitch shift. A constant shift is a single parameter, and reversing it is one slider. It defeats casual listening and nothing else.
- Watch the background audio too. A train announcement, a school bell or a neighbour’s dog locates you as reliably as a coordinate.
3. The metadata
Photographs carry EXIF, which on a phone usually includes the exact coordinates where the shutter was pressed. Video containers carry their own equivalents — creation and modification timestamps, device model, and on many phones a location tag written into the MP4 itself. None of it is visible when you watch the file. All of it is one command away for anybody who downloads it.
Check a file you were about to post. On a Mac, mdls will show you most of it; anywhere, exiftool shows all of it. It takes ten seconds and it is the step that catches the mistake that would have mattered most.
Platforms do strip most of this when they re-encode. That protects the public copy and not you, because the upload they stripped it from is the one that had it. Strip it before it leaves the device.
4. What is behind you
The background is the identifier people notice last and investigators use first. A street sign, a skyline, a distinctive window frame, a poster on a wall, the view through a doorway — geolocating an ordinary interior from a few seconds of footage is a hobby with a large and enthusiastic community, and they are good at it.
- Reflections. Glasses, a window, a screen, a kettle. A reflected face is a face.
- Documents and screens. A visible monitor or a piece of post lying on a desk will be read at full resolution, not at the size you watched it.
- Everything that is yours. A tattoo, a ring, a watch, a scar, a jacket that appears in a photograph on another account. Hands are in almost every video and are almost never covered.
5. The account
The most common single failure, because it does not feel like part of the video. A perfectly redacted clip posted from an account with three years of ordinary life on it has been posted by a named person. So has one posted from a brand-new account created from the same device, at the same address, with the same recovery email.
The file and the account are one document. Whichever is weaker is the one you published.
6. The timing
When you post is data. A clip that appears forty minutes after an event narrows the author to whoever was present; a schedule of posts that always falls inside one country ’s waking hours narrows it further. If the timing is meaningful, put a delay between the event and the post, and do not make the delay a habit either.
The order to work through it
Roughly by how permanent the mistake is. Anything you can fix before the file leaves your device is free; anything you notice afterwards is not fixable at all, because the upload already happened.
- Cover the faces, in the pixels, and check the export frame by frame.
- Remove or replace the audio.
- Strip the metadata and confirm it is gone.
- Watch the whole clip once looking only at the background, and once looking only at hands, reflections and screens.
- Post from an account with no other history, from a network that is not your home.
- Wait long enough that the timing says nothing.
And if the consequence of being identified is serious — a legal matter, a safety matter, a story with a subject who can retaliate — this checklist is a starting point and not a substitute for advice from somebody whose job it is. Organisations that support journalists and at-risk sources do this for a living and will talk to you.
Questions people ask next
Does blurring my face make a video anonymous?
No. It removes one identifier out of several. Your voice, the metadata inside the file, what is visible behind you, when you posted and which account you posted from are all still there, and any one of them can be enough on its own. Covering the face is necessary and it is not sufficient.
Does uploading a video strip its metadata?
Usually, and you should not rely on it. Major platforms re-encode what you upload and discard most of the container metadata in the process — but that happens after they have received the original, which still had it. Strip it yourself, before it leaves your device, so that the copy on their servers never contained it either.
Can my voice identify me in a video?
Yes, and it is routinely underestimated. Voice is biometric, speaker-identification systems work well on short samples, and anybody who knows you recognises you instantly regardless of any system. If the face is worth covering, the audio is worth removing, replacing with text on screen, or altering with more than a pitch shift — a naive pitch shift is straightforward to undo.
Is a VPN enough to post anonymously?
A VPN hides your network address from the platform and shifts the trust to the VPN provider. It does nothing about your face, your voice, the file’s metadata, your posting schedule, your writing style or an account that has your other videos on it. It is one item on a list, not the list.
What is the most common mistake?
Posting from an account that has a history. The video is clean, the file is clean, and the account has three years of ordinary life on it. Anonymity is a property of everything visible at once, and the account is the part people forget because it does not feel like part of the video.
The first item on the list, done properly.
Sitr covers every face in a video or a photo and keeps the cover on it through movement and turns, then decodes the finished file and checks it again. It runs entirely in your browser, so the unredacted original is never uploaded to anybody — including us.
2 files freeNo cardNothing uploaded