I have personal email and social media accounts along with accounts under various aliases.
All these accounts are linked to each other, either through an account switcher, IP address, etc.
After migrating to Qubes I would like to continue using some of these accounts, and I’m curious what the best practice would be in this scenario. Should I make a dedicated Qube for these connected accounts? Should I use them in the same Qube as my personal accounts?
– proximitygrain
Hi, it is not about what you should do but what you want to achieve. Why do you want to isolate these accounts?
I don’t think you will find “best practices”, so tell us more about your needs.
It’s also worth saying that you do not need to use a single qube, even
where the accounts are linked. You may feel it worthwhile to separate
out activities within a domain, and have one qube for email, one for
social media (or one for each platform), etc. You can link the qubes by
color. As you work with Qubes these possibilities become more obvious:
you can start with a single qube and then separate out activities;
you can also start with separate qubes, and then amalgamate them as you
judge the risks. If they are already linked, nothing will be lost by
either approach, I think.
I never presume to speak for the Qubes team.
When I comment in the Forum I speak for myself.
You might find this guide useful, AnarSec | Qubes OS for Anarchists it contains information on organizing your qubes and how to isolate things for different purposes and scenarios. I think it’s always worthwhile to isolate depending on how much convenience you need (and how much ram you have) but if your goal is to achieve complete disconnection between the already linked accounts in the eyes of adversaries I think it’s not possible just through qubes isolation, you’d need to make new accounts using different network qubes etc.