Jobseeker Cybersecurity & Privacy Tips
Practical privacy and cybersecurity guidance for people looking for work. Most job seekers do not think about this until it is too late.
Section 1
Your job-search email
Every job you apply to adds your email to recruiter databases, applicant tracking systems, and marketing lists. Use a dedicated job-search email so your primary inbox stays clean and your identity stays compartmentalized.
Gmail (separate account)
gmail.comCreate a dedicated account like yourname.jobs@gmail.com. Free and universally accepted.
Outlook (separate account)
outlook.comSame approach — one dedicated account used only for job hunting.
The rule: Never use your primary personal email on a job application.
Section 2
Your job-search phone number
Your personal phone number is tied to your identity, your bank, and your social media accounts. Once it lands on an application, you have no control over where it travels. A second number — typically a VOIP line that forwards to your real phone — keeps callbacks reaching you without exposing your primary number.
JMP.chat
jmp.chatOpen source, privacy-focused VOIP on the XMPP protocol. Real US number, around $3/month.
MySudo
mysudo.comMultiple private numbers and emails in one app. Built for compartmentalizing your identity.
Google Voice
voice.google.comFree real US number that forwards calls and texts to your actual phone.
TextNow
www.textnow.comFree US number, calls and texts over WiFi.
The rule: Use a separate number for job hunting. Forwarding means you will not miss callbacks.
Section 3
Your home address
Service industry applications do not need your full street address. Your neighborhood and city is enough to show employers you are local. Wait until you are in formal onboarding — tax documents, direct deposit, or I-9 — before sharing your full address.
The rule: City and neighborhood only until after you are hired.
Section 4
Your browser
Job boards routinely track which listings you view, how long you spend, your IP address, and your device fingerprint. A privacy-respecting browser, paired with a tracker blocker, limits how much of your search behavior is collected.
Firefox + uBlock Origin
www.mozilla.orgOpen source browser with the most effective tracker blocker available. Free.
Brave
brave.comOpen source, Chromium-based browser that blocks trackers and ads by default. Free.
Avoid browsing job listings while signed into Chrome with your primary Google account — every listing you open feeds your advertising profile.
Section 5
Your authenticator app
Two-factor authentication is the single most effective protection for your accounts. Even if someone gets your password, they cannot sign in without your second factor. An authenticator app generates a six-digit code that changes every 30 seconds — more secure than SMS and works without a cell signal.
Proton Pass
pr.tnOpen source password manager with a built-in 2FA authenticator. Free tier on iOS and Android.
Aegis Authenticator
getaegis.appAndroid only. Open source, locally encrypted vault, no cloud sync required. Free.
2FAS
2fas.comOpen source, iOS and Android. Local storage with optional encrypted cloud backup. Free.
Google Authenticator
apps.apple.comFree, iOS and Android. Simple and widely supported.
Microsoft Authenticator
www.microsoft.comFree, iOS and Android. Cloud backup available through your Microsoft account.
The rule: Enable 2FA on every account you create during your search. Start with your email, then job boards, then everything else.
Section 7
Your passwords
Job hunting creates accounts on job boards, employer portals, and application platforms — many with poor security. One breach can expose you everywhere if you reuse passwords. A password manager generates and stores a unique strong password for every account so you only need to remember one master password.
Proton Pass
pr.tnOpen source, end-to-end encrypted, includes a built-in 2FA authenticator. Free tier on all major platforms.
Bitwarden
bitwarden.comOpen source, free, cross-platform. Independently audited. The best free standalone password manager available.
Apple Passwords
support.apple.comBuilt into iOS and macOS, syncs across Apple devices. Free, no setup.
Google Password Manager
passwords.google.comBuilt into Chrome and Android. Free. Better than nothing if you are already in the Google ecosystem.
The rule: Never reuse passwords across job sites. One unique password per account.
Section 8
Your cloud storage
Resumes, cover letters, certifications, and references all contain your full name, address, work history, and contact information. End-to-end encrypted storage means only you can read what you store — even the storage provider cannot.
Proton Drive
pr.tnOpen source, end-to-end encrypted, Switzerland-based. Free tier available.
Cryptomator
cryptomator.orgOpen source encryption layer that works on top of any existing cloud storage. Free desktop app, small one-time fee on mobile.
iCloud Advanced Data Protection
support.apple.comApple's optional end-to-end encryption for iCloud. Enable under Settings → Apple ID → iCloud → Advanced Data Protection.
Google Drive + Cryptomator
drive.google.comUse Cryptomator to encrypt files before they leave your device, then store them in Google Drive's 15GB free tier.
The rule: Store your resume and personal documents in encrypted storage. If your cloud account is breached, encrypted files are unreadable.
Section 9
Data broker removal
Data brokers collect and sell personal information scraped from public records, social media, and purchased datasets. When you are actively job hunting, your data is often fresher in their databases than you realize. There is no widely available open source tool for automated removal — this is one category where the honest options are DIY effort or a paid service.
Privacy Rights Clearinghouse — Opt-Out Guide
www.privacyrights.orgFree, manually maintained directory of opt-out links for hundreds of data brokers.
JustDeleteMe
justdeleteme.xyzOpen source directory rating how difficult it is to delete your account from hundreds of services.
Google Results About You
myactivity.google.comFree Google tool to request removal of your personal contact information from Search results.
DeleteMe
joindeleteme.comSubmits opt-out requests to major data brokers on your behalf and monitors for re-listing. ~$129/year.
Incogni
incogni.comAutomated removal requests to 180+ data brokers. ~$77/year.
The rule: Search your full name before you start actively applying. What you find is what employers and scammers find too.
Section 10
What ShiftMap does (and does not do)
- Job seekers are never required to create an account. Browse and apply without registering.
- We never sell your data.
- We never use your data for advertising.
- We never share your data with third parties for any purpose other than operating the service.
- Employer contact details are loaded in real time when you tap to reveal them. They are never embedded in page source where scrapers can collect them.
- We do not track individual browsing behavior or build profiles on job seekers.
- Your application goes directly to the employer. We are not a party to the conversation and do not receive copies of what you send.
- ShiftMap runs no ads. We are funded entirely by employer listing fees.
We cannot protect you once you leave our platform. But we can make sure we are not part of the problem.
A note on our Proton recommendations
We recommend Proton products throughout this page — Proton Mail, Proton VPN, Proton Pass, and Proton Drive — because they are open source, independently audited, and headquartered in Switzerland with a privacy-first business model. Proton offers free versions of all of their core products that are sufficient for most job seekers.
In the interest of full transparency: if you click a Proton link on this page and sign up for a paid plan, ShiftMap may receive a referral fee. This does not affect the price you pay, and we would recommend Proton either way — but you deserve to know.
Job hunting is stressful enough. Your personal data should not be the price of admission.
