Digital safety for LGBTQ+ people: shared devices, accounts and traces

Digital safety is not about making yourself invisible or turning every device into a fortress. It is more like checking the weather before you leave: decide who might see what, consider the consequences, and choose precautions that do not create a new risk. For LGBTQ+ people, a search history, chat screenshot, notification preview, photo library or locally stored quiz result can reveal more than a spoken introduction ever would.

Keep two principles in mind: you do not owe anyone extra information to prove who you are; and if a security step could alert someone around you, waiting is allowed. Advice should fit your situation, not become another assignment.

Start with a small threat assessment

You do not need specialist vocabulary. Write down four answers:

1. Who might access the device or account? A family member who borrows your phone, a classmate who can see your screen, or a parent who controls the household plan?
2. What could they see? Browsing history, notifications, photos, cloud backups, payment records, or a conversation with someone?
3. What would discovery mean? Embarrassment, questioning, loss of financial support, housing risk, or physical danger?
4. When is the risk highest? A family gathering, exam week, a new job, after coming out, or when someone temporarily takes your device?

If the consequences could include violence, being forced out of your home, being sent to a “conversion” program or being confined, put physical safety and trusted people first. Do not suddenly change every password on a monitored device just to clean up traces. Use a safer device to contact someone you trust or view the support directory instead.

Shared devices: protect the places that reveal the most

Screen locks and notification previews. Use a device lock that others cannot easily guess. Check whether the lock screen shows message contents, verification codes or email subjects. If a family member manages the device, consider whether changing a setting would itself trigger questions.

Browsers and accounts. On a shared device, do not leave social accounts, email or cloud storage signed in. Sign out, and check whether the browser saved passwords, autofill entries or downloads. Private browsing can reduce local history, but it is not invisibility: network administrators, schools and workplaces may still log activity, and accounts you sign into still know what you do.

Photos, screenshots and sharing. A screenshot may sync to a cloud photo library or appear in Downloads and Recent Items. Before deleting it, check where it has synced. “Disappearing” messages and timed posts also cannot guarantee that another person has not taken or shared a copy.

Account security: make one change that will not raise alarms

• Use a different long password or passphrase for each important account, and prefer multi-factor authentication. Consider who can see the recovery email address and phone number.
• Review active sessions and signed-in devices. If you find an unfamiliar one, record what you need and sign it out from a safer device.
• Treat recovery email, cloud photos and family-sharing accounts as entrances, not afterthoughts. Changing one chat password is not enough if someone still controls an entrance.
• If an account may be compromised, stop entering new passwords or codes on the suspicious device. From a trusted device, change the password, revoke sessions and preserve evidence if it is safe.

When you share an Apple, Google or other cloud account with family, deleting something from one phone does not mean it is gone everywhere. Sync, backups and administrator permissions may expose it on another device. If you are unsure, move new sensitive material to a safer device instead of repeatedly testing the old one.

Using OpenLGBT: “not uploaded” does not mean “no local trace”

OpenLGBT quizzes score in your browser; answers are not sent to a server. Progress stays in the current session by default. Results are stored in this browser after you actively choose “remember”. The data-flow demo explains how to check this, and the privacy page describes the architecture.

The browser can still keep page history, autocomplete entries or screenshots. On a shared device:

1. Do not choose “remember my results” if someone else regularly checks the device.
2. When finished, use the browser’s actual controls to clear site data, then check history, downloads and recently closed tabs.
3. Do not save quiz results in a photo library that syncs automatically.
4. Use Quick exit when you need to leave quickly, but remember that it only navigates to a neutral page. It cannot erase browser history, the back stack or synced copies on another device.

That is why the digital safety page separates what the site can do from what it cannot. A privacy promise should be verifiable, and its limits should be plain.

Chats, communities and coming out: keep control of the story

Before sending a message, assume it could be screenshotted, forwarded or shown in a notification preview. Share only what the other person actually needs, especially for addresses, schools, workplaces, identity documents and medical information. Digital safety is not the same as physical safety when meeting someone you know online: choose a public place and tell a trusted person your plan.

If you are considering coming out, prepare three versions: what you can say publicly, what you will tell one trusted person, and what you are not ready to say. Coming out is not an all-at-once disclosure. You can say “I am still figuring this out”, or wait. The guide to coming out to parents offers questions to consider, but no guide can assess your risk for you.

If someone shares your identity or private messages without permission, do not rush to answer everyone. If it is safe, record dates, links and screenshots, tighten account permissions, and tell one reliable person. For threats, blackmail or immediate danger, contact local emergency services or support organisations first. Access Now’s Digital Security Helpline mainly serves activists, journalists, human rights defenders and related organisations facing digital risks; they assess eligibility and are not a substitute for local emergency help.

A checklist that should not create new risk

• I know who may access my devices and what they could see.
• Lock-screen notifications, autofill, downloads and cloud sync do not expose information I want private.
• Important accounts do not share passwords, and recovery methods are not easy for someone else to access.
• I do not treat disappearing messages, private browsing or Quick exit as absolute guarantees.
• I have not chosen to remember sensitive quiz results on a device others inspect.
• I know whom to contact if the risk increases, and when to stop an operation.

If identity, family or online exposure is frightening right now, you do not have to solve every security problem before you deserve support. Start with the support directory. If there is immediate danger, use Get help now.