An operational identity is a persona purpose-built for a specific activity (reporting on a sensitive story, contacting a source, traveling to a hostile country, organizing in an adversarial jurisdiction) and isolated from the operator’s real-life identity. It has its own email, its own phone number, its own payment method, its own social presence, and often its own device. It lives only as long as the operation requires it.
What it means in practice
The realistic operational identity sits between the throwaway alias (a single-use email, no history, never seen again) and the deep-cover legend (multi-year construction, dedicated supporting infrastructure, the kind of effort intelligence services invest). Most journalists, NGO staff, and divorce clients need the middle tier: a persona that survives a six-to-eighteen-month operation, that withstands casual scrutiny, that does not link back to the real identity through metadata, billing, or social signals. The supporting infrastructure is the work: a Proton account or burner Gmail, a SimpleLogin alias for sub-services, a Mullvad subscription paid in cash, a phone number from MySudo or a dedicated burner SIM, a payment card under the persona name when the operation requires transactions.
Where it shows up
Standard tooling for: investigative journalists during source-contact phases, NGO staff coordinating with field partners in monitored countries, lawyers maintaining a public-facing persona separate from privileged client work, domestic-violence survivors during the relocation window, executives during sensitive M&A or whistleblower scenarios, and activists in jurisdictions where association with a movement carries personal risk. The common thread: the identity exists for an operation, not for a life. The discipline is to retire it cleanly when the operation closes, not to drag it forward indefinitely until it accumulates enough cross-references to break.
What you can change today
If you are about to start an operation that needs a separate identity, do the setup this week, not the week before the first contact. Steps: (1) pick a name distinct from yours and any name you use elsewhere, (2) create a Proton or Tutanota email account with a recovery email also at the same provider, (3) create a Mullvad account paid in cash by post or Monero, (4) get a separate phone number (MySudo for the lighter version, a cash-bought burner SIM for the heavier), (5) create the social presences your cover requires, age them for at least 30 days before active use. The compartment is real only if you never let the two sides of your life see each other.