Everything that links you, and what to do about it.

Graph: A map of how your accounts, handles, links and public details connect.

Verify the accounts that are yours and Kenveil builds your identity graph from official public sources: which usernames repeat, which profiles link to each other, which details are public.

• Scans start only from accounts you verified and your own email. There is no field for anyone else.
• Verify with a short bio code on GitHub, GitLab, Reddit, DEV and Hacker News, or in one click with the extension on Instagram, TikTok, X, YouTube, Twitch, Pinterest and Steam.
• Same-handle finds stay "possible match, not confirmed" until you confirm them.
• Exposure Replay keeps an encrypted snapshot of every scan so you can see how things changed.

Simulator and Fixes: Fixes ranked by impact, with your new score before you change anything.

Every exposure path comes with the fixes that break it. The simulator shows what a fix would do to your score, which paths break and which only weaken, before you touch a single account.

• Fix types: remove an account or link, hide a detail, use a different username or avatar, drop a bio link, swap a shared email for a Canary address, request a broker removal.
• Ranked by score drop, how often a problem came back, and effort.
• Simulation runs on your PC, and by design no fix can raise your score.
• The next scan confirms each fix: gone, or still found.

Limits: Kenveil never edits your accounts for you. Scores are Kenveil estimates, not a measure of anonymity.

Split: Decide which parts of your online life stay apart.

Group your accounts into Personal, Gaming, Creator, Shopping, Work or your own groups, then choose which pairs must never meet. Your score follows your choice, not someone else’s idea of privacy.

• Every pair of groups is "Keep separate" by default, or "Linking is fine".
• Preflight checks a username you plan to use against your own graph before you sign up anywhere.
• Nothing is searched online during Preflight.

Post: See what a photo gives away and save a clean copy. On your PC.

Drop in a photo before you share it. Post finds location, camera and author data, QR codes, readable text and faces, blurs what you choose and saves a clean copy.

• Reads GPS, camera make, model and serial, capture time, author and editing history.
• Finds QR codes, text such as emails, phone numbers, IBANs and handles (Windows OCR), and faces (detection only, no recognition).
• The clean copy is rebuilt from pixels, so no metadata survives; blurring pixelates first so it cannot be undone.
• The original file is never changed, and nothing is uploaded.

Canary: A unique email address for every site, so you know who leaked it.

Give each site its own Canary address. When mail arrives from anyone the address was never given to, Kenveil marks it leaked and tells you who had it.

• Sender checks with DKIM, SPF and DMARC, so forged mail pretending to be the site is flagged.
• Switch an address off and mail to it is refused.
• A text-only copy of each mail (no images, no trackers) is kept encrypted for 7 days so you can confirm sign-ups.
• No limit on the number of addresses.

Limits: Canary mail is not forwarded to your own inbox yet; you read it in the app for 7 days.

Relay: Send your traffic through the Kenveil server over WireGuard.

Sites see the Kenveil server’s address instead of your home connection. Relay creates a WireGuard connection file for the official WireGuard app.

• The key pair is made on your PC; only the public key reaches the server.
• Up to 5 connections per account, each revocable.
• Clients cannot reach each other; the relay logs counts only.
• One relay server in Spain (EU).

Limits: Needs WireGuard for Windows. IPv4 only. A relay hides your address, it does not make you anonymous.

Routes: Six ready-made profiles for your Relay connection.

Standard, Public Wi-Fi, Creator, Low latency, Private session and Maximum privacy: pick how much goes through the tunnel, which DNS answers and whether IPv6 is blocked.

• Full or split tunnel, filtered (Quad9) or plain DNS, IPv6 block or allow, keepalive.
• Adjust any profile and reset it later.
• Settings are written into the connection file when you create it.

Watch: Scheduled re-scans that tell you when something new about you goes public.

Choose how often Kenveil looks again. When a new account, link or detail appears, or your score moves, you get a Windows notification with what changed.

• Every 6 hours, daily, every 48 hours or weekly; off until you turn it on.
• Also reports Canary leaks, look-alike accounts, security emails and removal reminders.
• Alert text is encrypted on the server.

Mirror: Finds accounts that imitate yours.

Mirror checks look-alike versions of your verified handles and compares their picture, name and bio with yours, so impersonators surface before your contacts meet them.

• Checks up to 10 variants of each handle on GitHub, GitLab, Reddit, DEV and Hacker News.
• Compares username, profile picture, bio and display name.
• A likely impersonation raises a Watch alert.

Limits: Cannot check platforms that only the browser extension can read.

Reborn: Guided removals from people-search sites, with reminders to check they stay gone.

Step-by-step opt-outs for 18 people-search and data-broker services, from Spokeo and Whitepages to 192.com and Google’s "Results about you", with reminders when it is time to check again.

• Each entry has the opt-out link, instructions and a re-check interval.
• A reminder 14 days after you submit, and again after 60 to 180 days.
• Relistings are counted, so you see which services keep coming back.

Limits: You file each request yourself; Kenveil does not scan broker sites automatically.

Lock: A calm, step-by-step plan for when your privacy was compromised.

Eight steps, in the right order: review what is exposed, secure your key accounts, sign out everywhere else, check recovery options, hide the links, request removals, watch hourly and hide your connection.

• Starting Lock runs a fresh scan and turns on hourly Watch for 7 days.
• Progress is saved step by step.

Limits: Lock guides you; it does not act on your accounts.