Metadata and Doxxing: How to Remove Hidden Data That Can Expose You

Metadata is the invisible data attached to files that describes how, when, and where they were created. Think of it as the “data about data.” While helpful for organizing content, it’s also a goldmine for doxxers looking to extract location info, software versions, device IDs, or timestamps from your uploads.

One careless image or document can silently expose your:

• Exact GPS coordinates
• Device make/model
• Operating system
• Author name
• Creation and modification timestamps
• App version used

Real-World Doxxing Scenarios from Metadata

• Geo-tagged Photos: A selfie taken at home uploads exact coordinates, making it easy to pinpoint your house.
• Word Docs with Author Data: Job applications or essays saved with your real name in the metadata, even if your resume doesn't include it.
• PDFs with Editing Trails: Internal files shared on forums that retain your username, workstation ID, or timestamp trail.

The person posting thinks they're anonymous — but the metadata tells a different story.

Types of Files Most at Risk

Even screenshots and memes you create may retain metadata like screen resolution and timestamps.

How to View Metadata

You can inspect metadata manually using:

• Windows: Right-click → Properties → Details
• macOS: Right-click → Get Info or open in Preview → Tools → Show Inspector
• Linux: Use exiftool or mat2 in terminal

For online checks:

• Metadata2Go
• Exif.tools

How to Remove Metadata Before Uploading

Images

Windows:

• Right-click → Properties → Details → "Remove Properties and Personal Information"
• Choose to create a copy with all possible properties removed

macOS:

• Use Preview to export as a new image (removes some data)
• Use sips command in Terminal for full removal

Cross-platform Tools:

• ExifCleaner (GUI for batch image scrubbing)
• mat2 (CLI tool on Linux for all major file types)
• ImageMagick: Run convert input.jpg -strip output.jpg

Documents (Word, PDF, etc.)

• File → Info → Check for Issues → Inspect Document → Remove metadata

DPDFs:

• Use PDF Redact Tools (Linux) or PDF24 Creator (Windows)
• Print to PDF using a "virtual printer" to create a clean version

Best Practice:

Never upload original documents. Use sanitized PDFs or re-exported formats like plain text when sharing online.

Videos

Use:

• FFmpeg: Run ffmpeg -i input.mp4 -map_metadata -1 -c copy output.mp4
• Shutter Encoder: Free GUI tool to remove metadata from video and audio files

Automation: Build Metadata Cleaning Into Your OPSEC Workflow

Make metadata removal a reflex before posting or sharing. Some tips:

• Automate with scripts if you deal with high volumes of content
• Integrate into your upload process (e.g., before sharing to forums or Reddit)
• Sanitize on mobile using apps like Scrambled Exif (Android) or Metapho (iOS)
• Avoid apps that auto-embed GPS like some camera apps or social platforms

Mistakes to Avoid

• Editing a photo and uploading it without re-exporting — edits may reintroduce metadata.
• Uploading PDFs directly from Microsoft Word — unless explicitly cleaned.
• Copy-pasting between Office docs — hidden data may persist between documents.
• Assuming social media strips metadata — some platforms do, others don’t.

If your OPSEC depends on anonymity, don’t leave it to chance.

Recommended Metadata Removal Tools

FAQ

Is metadata removal 100% effective?

If you use trusted tools and methods, yes. But some platforms may still attach new metadata during upload — so always re-check after posting.

Does screenshotting remove metadata?

It often removes EXIF data but may add screen resolution, OS info, or time overlays depending on how the screenshot is taken.

Do social platforms remove metadata?

Some (like Twitter) remove EXIF, but many others do not. Assume nothing unless explicitly tested.

Is it illegal to remove metadata?

No — you own your data. Removing metadata is a privacy step, not a legal violation.