Doxing, also spelled doxxing, is the act of publicly revealing personally identifiable information about an individual or organization, usually via the internet. The term "dox" comes from the slang "dropping dox," which emerged from hacker culture in the 1990s. Doxing is often used as a means of revenge via the violation of privacy, and it can be a malicious act used against people with whom the hacker disagrees or dislikes.

Doxing can include revealing someones real name, home address, job, or other identifying information without their consent. The aim of doxing is to humiliate, bully, harass, or otherwise harm a victim. Doxing can be a tool in the culture wars, with rival hackers doxing those who hold opposing views. Regardless of the motivation, the core purpose of doxing is to violate privacy, and it can put people in an uncomfortable situation, sometimes with dire consequences.

Some methods used to dox people include data broker doxxing, where doxxers purchase victims personal information from data brokers, which gather info from publicly available records, customer loyalty cards, online search histories, and other sources. Doxxers can also follow breadcrumbs, small pieces of information about someone scattered across the internet, to build up a picture that leads to uncovering the real person behind an anonymous username and exposing that persons real identity online.

Doxing is illegal in many countries, and victims of doxing can take legal action against their attackers. To prevent doxing, individuals can take steps such as using a VPN, avoiding sharing personal information online, and using strong passwords.