This guide provides practical information about evidence preservation. It is not legal advice. If you are in immediate danger, contact local emergency services. For ongoing harassment, consider consulting a lawyer or contacting a support organization listed at the end of this article.
- Preserve evidence BEFORE you block, report, or confront the harasser
- Save the full page (not just screenshots) — including URLs, timestamps, and the harasser's profile
- Kiroku archives pages with SHA-256 hash verification and requires no account — important for privacy
- Keep a chronological log of all incidents with archive URLs for law enforcement
When you're experiencing online harassment, the instinct is to block, report, and move on. But if you may need legal protection later, preserving evidence first is critical — because harassers delete posts, change accounts, and cover their tracks. This guide explains exactly how to document harassment with free tools, what evidence matters most, and how to organize it for law enforcement or legal proceedings.
Someone is sending you threatening messages. They're posting defamatory content about you. They're creating fake accounts to harass you. Your first instinct might be to block them, report the account, and try to move on. But before you do any of that — preserve the evidence. Once you block or report, the harasser may delete their posts, change their username, or create new accounts. If you ever need to take legal action, you'll need proof of what happened.
This guide walks you through exactly how to document online harassment using free tools. It covers what to save, how to save it properly, how to organize your evidence, and what steps to take next. You don't need technical skills or expensive software — just a browser and a few minutes.
Rule #1: Preserve Evidence Before You React
The most common mistake harassment victims make is reacting before preserving. Blocking the harasser, reporting to the platform, or replying to the posts can all trigger the harasser to delete evidence. Platforms may also remove content after a report, which means your evidence disappears too. Always save everything first, then take action.
- Blocking the harasser (they may notice and delete posts)
- Reporting to the platform (the platform may remove the content)
- Replying or confronting (alerts the harasser to cover tracks)
- Waiting too long (posts get deleted, accounts get suspended)
- Only saving the most recent incident (pattern of behavior requires all instances)
If you are in immediate physical danger, contact emergency services first. Evidence preservation is important, but your safety comes first.
What Evidence to Save
Effective harassment documentation captures not just the harmful content, but everything needed to identify the harasser and establish a pattern. Courts and law enforcement look for specific elements that connect incidents together and prove who was responsible.
- The harassing post or message itself (full content, not just a snippet)
- The URL of the post (critical for identification and verification)
- The harasser's username, display name, and profile page
- Timestamps — when the post was made and when you saved it
- Your relationship to the harasser (if known)
- Any replies, likes, or shares that show the reach and impact
- Related posts that establish a pattern of behavior
- Screenshots of any direct messages (with URL bar visible if possible)
- The harasser's bio, followers count, and account creation date
- Any evidence connecting multiple accounts to the same person
Save the harasser's PROFILE PAGE separately from individual posts. If they later delete their account or change their username, the profile archive proves who they were.
How to Save Evidence Properly
A screenshot on your phone is better than nothing, but proper evidence preservation goes further. Here's the hierarchy from weakest to strongest evidence — and the good news is that the strongest free option takes less than a minute.
| Method | Strength | URL | Timestamp | Tamper Proof | Effort |
|---|---|---|---|---|---|
| Phone screenshot | ★☆☆☆☆ | × | × | × | Low |
| Screenshot with URL bar visible | ★★☆☆☆ | ○ | △ | × | Low |
| Manual PDF save | ★★☆☆☆ | ○ | △ | × | Medium |
| Wayback Machine Save Page Now | ★★★☆☆ | ○ | ○ | × | Low |
| Kiroku (free, no account) | ★★★★☆ | ○ | ○ | ○ (SHA-256) | Low |
| Legal forensic tool ($149+) | ★★★★★ | ○ | ○ | ○ | Low (but expensive) |
Step-by-Step: Preserving Harassment Evidence with Kiroku
Kiroku is especially suited for harassment documentation because it requires no account creation (protecting your privacy), provides SHA-256 hash verification (proving content hasn't been tampered with), and archives the full page including metadata. Here's how to use it.
On social media, use the share button or click the timestamp to get the direct link to the post. On websites, copy the URL from the address bar.
No account creation, no email, no personal information required. This protects your privacy — particularly important when you're dealing with a harasser who might try to find your accounts.
Kiroku captures a full-page screenshot, creates a self-contained HTML archive, generates an AI summary, and records a SHA-256 hash. The entire process takes 30 to 60 seconds.
Toggle the privacy setting so only you can view the archive. This prevents the harasser from discovering that you're collecting evidence.
Record the Kiroku archive URL alongside the date, time, and a brief description of the incident in your log.
Repeat for EVERY incident. A single post might not seem significant on its own, but 20 documented incidents over three months establishes a clear pattern of harassment that law enforcement and courts take seriously.
Creating an Incident Log
An organized incident log turns scattered evidence into a compelling case. Law enforcement officers and attorneys strongly prefer chronological, organized documentation over a pile of screenshots dumped into a folder. Taking a few minutes to log each incident as it happens will save you hours later.
- Date and time of the incident
- Platform (X, Instagram, email, Reddit, etc.)
- URL of the harassing content
- Kiroku archive URL
- Brief description of what happened
- Any context (was this in response to something? part of a pattern? escalation?)
A simple spreadsheet or document works perfectly. Include columns for: Date | Platform | Original URL | Archive URL | Description. This format is easy to share with an attorney and easy to hand to law enforcement.
Platform-Specific Tips
Different platforms have different quirks when it comes to evidence preservation. Here are practical tips for the most common ones.
- X/Twitter: Save the tweet URL and the harasser's profile URL separately. If they're using multiple accounts, save each account's profile. Kiroku extracts tweet metadata (author, text, timestamp) automatically.
- Instagram: Save post URLs and story screenshots immediately — stories expire in 24 hours. DM screenshots should include the conversation header showing the username.
- Facebook: Save public post URLs. For private messages, screenshot with the message header visible. Friend-only posts cannot be archived externally.
- TikTok: Save video page URLs. Comment threads can be archived separately using their permalinks.
- Email: Forward harassing emails to a separate secure email account. Screenshot the full email headers (these contain sender IP and routing information).
- Reddit: Save comment or post permalinks. Reddit restricted Wayback Machine access in 2023, so proactive archiving is essential for Reddit content.
- Text/SMS: Screenshot with the contact info visible. Some jurisdictions accept phone carrier records as supporting evidence.
After Preserving Evidence: Your Options
Once you have your evidence documented and organized, you have several paths forward. You don't have to choose just one — and you don't have to do everything at once. The important thing is that your evidence is safe, so you can take action on your own timeline.
- Report to the platform — now that you've saved everything, reporting won't risk losing evidence
- Contact local law enforcement — bring your incident log and archive URLs. A printed summary helps.
- Consult an attorney — many offer free initial consultations for harassment cases
- Contact a support organization (listed below) for guidance, emotional support, and practical resources
- Apply for a restraining order or protection order if the harassment involves threats or stalking
- If you're a public figure or journalist, contact organizations like PEN America or the Committee to Protect Journalists for specialized support
Support Organizations and Resources
You don't have to handle this alone. These organizations provide free support, guidance, and resources for people experiencing online harassment.
- PEN America Online Harassment Field Manual — comprehensive guide for writers, journalists, and anyone facing online abuse
- Cyber Civil Rights Initiative — support and resources for victims of online abuse and nonconsensual pornography
- StopBullying.gov — US government resources for cyberbullying prevention and response
- National Domestic Violence Hotline (1-800-799-7233) — for harassment connected to domestic violence or intimate partner abuse
- Electronic Frontier Foundation (EFF) — digital rights, online safety resources, and legal guidance
- Your local legal aid society — free legal assistance for qualifying individuals in your area
Summary
When you're experiencing online harassment, the instinct is to block, report, and move on. But if you may need legal protection later, preserving evidence first is critical — because harassers delete posts, change accounts, and cover their tracks. This guide explains exactly how to document harassment with free tools, what evidence matters most, and how to organize it for law enforcement or legal proceedings.
FAQ
Do I need to save every single incident?
Yes, if possible. Courts and law enforcement look for patterns of behavior. A single post might be dismissed as a one-time occurrence, but 20 documented incidents over three months establishes a clear, undeniable pattern of harassment. Each archived incident strengthens your case.
What if the harassment is happening through private messages?
For DMs and private messages, take screenshots that include the sender's username and the message timestamp. Make sure the URL bar or app header is visible in the screenshot. For Kiroku, you can only archive publicly accessible content — but your screenshots combined with archived public posts from the same account create a comprehensive record.
Should I confront the harasser?
Generally, no — at least not before preserving evidence. Confrontation often triggers the harasser to delete posts, change usernames, or switch to new accounts. If you do choose to respond, save everything first. In many cases, not engaging is also the safest approach for your wellbeing.
How long should I keep the evidence?
Indefinitely, or at least until any legal proceedings are complete. Statutes of limitations vary by jurisdiction and by the type of offense — some harassment and stalking laws have limitation periods of several years. You may need the evidence long after the harassment stops.
Can the harasser find out I archived their posts?
Kiroku archives are set to private by default when you choose that option. The harasser cannot see that their post has been archived. Your archiving activity is not visible to them, and no notification is sent to the poster when a page is archived.
Sources
- PEN America: Online Harassment Field Manualhttps://onlineharassmentfieldmanual.pen.org/
- Cyber Civil Rights Initiativehttps://www.cybercivilrights.org/
- StopBullying.gov: How to Report Cyberbullyinghttps://www.stopbullying.gov/cyberbullying/how-to-report
- Electronic Frontier Foundation (EFF)https://www.eff.org/
- FindLaw: Cyberstalking Laws by Statehttps://www.findlaw.com/
Your safety matters. Preserve the evidence.
Harassment evidence disappears when you need it most. Kiroku lets you save pages with a screenshot, full HTML, and SHA-256 hash — no account needed, completely free. Set archives to private to keep your documentation secure.