Online identity is the self-image a person builds and manages through profiles, posts, usernames, photos, and activity across platforms. It includes not only what someone says about themselves, but also the data trail they leave behind, such as followers, comments, metadata, and linked accounts.
In cyber security, online identity matters because it is often the first thing attackers study. Criminals use public posts and profile details for profiling, phishing, impersonation, and account-takeover attempts. A convincing fake account can mimic tone, job title, or social connections well enough to trick a target into clicking a link, sharing a code, or approving a login. Defenders treat online identity as part of attack surface management: limit exposed personal data, use strong authentication, review privacy settings, and watch for unusual login or profile changes. Good identity hygiene reduces both social-engineering risk and the damage caused when accounts are copied or stolen.