Back to blog
Security4 min read

Why Separate Online Personas Are No Longer Optional

Linking accounts is a solved commercial problem. The useful question is not whether you can stay unlinked, but which specific links you most need to prevent.

MC
Marcus Chen
Persona Kit

Most people meet this subject as a vague unease and leave it there, because the standard advice is unactionable. Use a pseudonym. Do not overshare. None of it engages with how accounts are actually joined together, so none of it tells you what to change on a Tuesday afternoon.

Joining accounts is a mature commercial function with a name — identity resolution — and an industry built around it. Its ordinary use is unglamorous: reconciling a customer who appears in three of a company's own systems. The same machinery works just as well across companies, and the data to feed it is bought and sold in volume. The result is that linkage should be assumed by default and prevented deliberately, rather than assumed absent until proven otherwise.

The useful move is to stop thinking about anonymity and start thinking about join keys, ranked by how strong they are. At the top sits the email address, because it is deliberately unique, entered by hand into nearly every account you own, and shared onward as a matter of routine. Then the phone number, which is worse in one respect: it is harder to change, tied to identity documents in many countries, and increasingly demanded for verification rather than contact.

Below those sit payment instruments, which link accounts through a name and a billing address held by an intermediary. Then the network address, which links anything used from one connection within the same window. Then the device fingerprint, which links anything used from one machine. At the bottom, weakest individually but hardest to shed, sit behavioural and temporal patterns — when you are active, how you type, what you write like.

Ranking them this way makes the strategy obvious in a way that general advice never does. Effort spent on the bottom of the list while the top is unaddressed is wasted. There is no point fingerprint-hardening two accounts that share a recovery email; the email alone links them, cheaply, permanently, and in a form that holds up as evidence rather than as inference.

So the first question is not how many personas to have. It is which links would actually hurt. For most people the answer is a small number of specific pairs — professional and personal, research and employer, purchasing and the profile that gets sold on — and the compartments should be drawn around those, not around services. Drawing them around services is how people end up with forty compartments they cannot maintain, which reliably collapses back into one.

That collapse is the real failure mode, and it is a maintenance problem rather than a discipline problem. A compartment needs its own email that still works months later, its own credentials you can retrieve, its own browser state that persists so you are not signing in constantly, and its own exit address. Assembled by hand out of a disposable inbox, a spreadsheet, and a browser profile, the cost of the fifth compartment is high enough that most people stop at three and then start reusing.

This is the actual argument for holding a persona as one object rather than as a folder of loosely related workarounds. The identity, the working inbox, the stored logins with their TOTP seeds, the saved session state, and the assigned exit belong to the same thing, so adding a compartment costs about the same as the first one did. Compartmentalisation is not hard to understand. It is hard to keep up, and the only version that works is the version whose marginal cost is low.

It is worth naming the leaks that survive good tooling, because they are the ones that get people. Reusing a phone number for verification across two personas links them, in the platform's own records, permanently. Reusing a password links them the moment either service is breached. Signing up with a real postal code because the form was annoying links them to a place. Being active on both accounts within the same five minutes from the same connection links them by timing. None of these are exotic; all of them are habits.

Which points at the one habit worth building. Before a persona exists, decide what it is allowed to know about you and what it is for, and write that down where you will see it again. Persona Kit has tags and notes on each persona for exactly this reason, and it is the least technical feature on the list. The rest of the tooling stops signals from crossing between compartments. Nothing except that note stops you from carrying something across yourself, six months later, having forgotten which compartment you were in.