Passkeys, identity theft, voice cloning and practical ways to reduce the personal data attackers can turn into convincing AI impersonation.
AI makes impersonation cheaper and more convincing, but it still feeds on ordinary weaknesses: exposed personal details, reusable credentials, weak recovery routes and people trusting a familiar voice or face. The practical defence is to reduce exposed data and make identity verification independent of appearance or sound.
Audit the personal information and verification habits that could make a convincing AI impersonation easier.
Pick the question closest to yours. Each guide gives you the answer first, then the evidence, the important caveats and practical next steps.
IDENTITY & PRIVACYFor accounts that support them, passkeys are generally safer than passwords because they are phishing-resistant and do not expose a reusable secret to the website you are signing into. For accounts without passkeys, use a unique password plus strong two-step verification.
Read guide →
IDENTITY & PRIVACYAI does not create identity theft from nothing. It makes stolen names, photos, voices and personal details easier to combine into convincing impersonation. The strongest defence is still to reduce exposed data, secure the accounts that control recovery, and verify unusual requests through a separate channel.
Read guide →
IDENTITY & PRIVACYYou cannot reliably make a public voice recording “unclonable.” The practical goal is to reduce unnecessary public audio, tighten social-media exposure and—most importantly—stop treating a familiar voice as proof of identity.
Read guide →
IDENTITY & PRIVACYYou do not need to disappear from social media, but public birthdays, relatives, workplaces, routines, travel plans, children’s details and long voice/video clips can give an impersonator better material. Start by limiting the information that helps a stranger answer security questions or imitate context.
Read guide →
IDENTITY & PRIVACYIn the AI era, “I saw their face” and “I heard their voice” are weaker evidence than they used to be. For consequential requests, identity should be verified through a separate trusted channel, known contact route, shared secret or established organisational process.
Read guide →
IDENTITY & PRIVACYYou cannot erase yourself from the internet, but you can reduce the amount of high-value information available to strangers. Prioritise details that help account recovery, financial fraud or believable impersonation: email addresses, phone numbers, dates, addresses, relatives and predictable security-answer material.
Read guide →We label controlled evaluations, real-world incidents, expert forecasts and speculation differently. Read the methodology before treating any probability or timeline as a fact.