Someone posts a screenshot of a stranger’s rude comment online. Within an hour, a reply lists that stranger’s real name, home address, and employer. The original argument is already forgotten. What’s left is doxxing, and it’s a much bigger problem.

What does “doxxing” mean?

Doxxing means publishing someone’s private identifying information online without their consent. That can include a real name, home address, phone number, workplace, or family details. The point is usually to strip away anonymity and expose the person to harassment, intimidation, or unwanted attention. Sharing someone’s already-public job title isn’t doxxing on its own. The word applies once private, identifying details get compiled and released with intent to expose.

Where did the term come from?

“Dox” is old internet slang for “docs,” short for documents. It goes back to 1990s hacker culture. Rival hackers would compile documents on an anonymous opponent to strip away their cover. Dropping someone’s “dox” became a way to end a feud by force, not persuasion. The term outgrew hacker circles fast and now covers any exposure of private information meant to intimidate.

How does doxxing actually work?

Doxxing rarely requires illegal hacking. Most of the time, someone just cross-references scattered public information nobody had bothered to connect. A property record here, an old forum post there, a tagged photo from years ago. None of it looks dangerous in isolation. Assembled together, though, it becomes a complete profile of a private person.

That assembly step is what actually qualifies as doxxing. Looking someone up out of curiosity isn’t the same thing. Compiling that information and posting it publicly, with an apparent goal of enabling others to find or target the person, is. Context and intent both matter here, not just the act of searching.

The information doesn’t even need to be accurate to cause harm. Mistaken identity has led to the wrong person’s address circulating online more than once. Once information spreads across enough platforms, correcting the record rarely catches up to the original post. A single re-post on a large enough account can outrun any later retraction within minutes, and the correction almost never reaches the same audience as the original claim.

A concrete example

An online argument escalates past the original topic. One participant gets doxxed, and their home address starts circulating in a group chat. Strangers begin showing up at the address, or ordering unwanted deliveries there. None of it happened because of anything illegal. It happened because private information moved into public hands, and someone decided to act on it.

What it’s not

Doxxing isn’t the same as a legitimate background check run through proper channels, like a landlord or employer verifying an applicant’s history. Consent, context, and purpose separate the two. It’s also not the same as journalism identifying a public figure responsible for a newsworthy act, though the line gets debated often in specific cases. And it isn’t “swatting,” which is a separate, more dangerous act: falsely reporting an emergency at someone’s address to draw an armed police response. Swatting frequently depends on doxxed information as a first step, but the two terms describe different acts.

Where you’ll encounter it

The term comes up constantly in discussions of online harassment, gaming and streaming communities, and political disputes that spill over from anonymous accounts into real identities. It also shows up in debates over platform moderation policy, since most major platforms now explicitly ban sharing someone’s private information without consent. Workplace disputes and breakups are common, less-discussed sources too, since both involve someone who already holds enough private detail on the other person to make an exposure genuinely damaging.

Related terms

• Virtue Signaling (L19)
• Culture War (L20)
• Deepfake (L21)