By Charles Joseph | Cybersecurity Researcher

 Published on March 20th, 2023

This post was updated on November 25th, 2023

A sock puppet is an online identity that can be used for deception, privacy, or operational security (OPSEC) by investigators, journalists, or penetration testers.

OPSEC protects both the investigator and the target when evidence doesn’t lead anywhere.

Thank you for signing up, we'll be in contact soon.

Stay One Step Ahead of Cyber Threats

Want to Be the Smartest Guy in the Room? Get the Latest Cybersecurity News and Insights.

Subscribe

We respect your privacy and you can unsubscribe anytime.

7 Steps to Set Up a Sock Puppet

1. Use a dedicated computer for investigations.
2. Use an encrypted email service like Proton Mail.
3. Get a burner phone number or a Wi-Fi phone number.
4. Create a social media profile on a platform where your target is most active.
5. Set up a few virtual machines.
6. Create a blog or website (using free platforms like WordPress, Blogger, or Medium).
7. Use a VPN.

SOURCE: Creating an Effective Sock Puppet for OSINT Investigations

Articles to Assist in Creating Sock Puppets

• The Art of the Sock (article)
• Reddit user’s process for setting up anonymous sockpuppet accounts
• Fake Name Generator
• This Person Does Not Exist
• Use privacy.com to get a burner credit card
• Video on the process