# Unique Identification of 50,000+ Virtual Reality Users from Head & Hand Motion Data

arXiv: https://arxiv.org/abs/2302.08927 · HTML: https://mlsanity.com/paper/2302.08927/

## Key facts

- Cited by 18 papers in the map (data through 14 Oct 2026).
- Builds on 4 of its 44 references that are in the map.
- First posted on arXiv 17 Feb 2023.

## Builds on (most cited first, 4 of 4)

- [BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding](https://mlsanity.com/paper/1810.04805/) (2018)
- [MotioNet: 3D Human Motion Reconstruction from Monocular Video with Skeleton Consistency](https://mlsanity.com/paper/2006.12075/) (2020)
- [SoK: Data Privacy in Virtual Reality](https://mlsanity.com/paper/2301.05940/) (2023)
- [You Can't Hide Behind Your Headset: User Profiling in Augmented and Virtual Reality](https://mlsanity.com/paper/2209.10849/) (2022)

## Built on by (most cited first, 18 of 18)

- [Frame by Familiar Frame: Understanding Replication in Video Diffusion Models](https://mlsanity.com/paper/2403.19593/) (2024)
- [Explainable XR: Understanding User Behaviors of XR Environments using LLM-assisted Analytics Framework](https://mlsanity.com/paper/2501.13778/) (2025)
- [Investigating Memorization in Video Diffusion Models](https://mlsanity.com/paper/2410.21669/) (2024)
- [HaHeAE: Learning Generalisable Joint Representations of Human Hand and Head Movements in Extended Reality](https://mlsanity.com/paper/2410.16430/) (2024)
- [Motion-Based User Identification across XR and Metaverse Applications by Deep Classification and Similarity Learning](https://mlsanity.com/paper/2509.08539/) (2025)
- [Towards Secure AI-driven Industrial Metaverse with NFT Digital Twins](https://mlsanity.com/paper/2412.15716/) (2024)
- [Unobtrusive In-Situ Measurement of Behavior Change by Deep Metric Similarity Learning of Motion Patterns](https://mlsanity.com/paper/2509.04174/) (2025)
- [Cognitive State Inference from VR Motion via Motion Foundation Model](https://mlsanity.com/paper/2509.24255/) (2025)
- [PrivateXR: Defending Privacy Attacks in Extended Reality Through Explainable AI-Guided Differential Privacy](https://mlsanity.com/paper/2512.16851/) (2025)
- [Robo-Saber: Generating and Simulating Virtual Reality Players](https://mlsanity.com/paper/2602.18319/) (2026)
- [HarassGuard: Detecting Harassment Behaviors in Social Virtual Reality with Vision-Language Models](https://mlsanity.com/paper/2604.00592/) (2026)
- [Deep Learning for Virtual Reality User Identification: A Benchmark](https://mlsanity.com/paper/2604.16341/) (2026)
- [Privatar: Scalable Privacy-preserving Multi-user VR via Secure Offloading](https://mlsanity.com/paper/2604.17476/) (2026)
- [BEACON: A Multimodal Dataset for Learning Behavioral Fingerprints from Gameplay Data](https://mlsanity.com/paper/2605.10867/) (2026)
- [TSAI-MetaFraud: A Benchmark Dataset for Financial Fraud Transaction and Behavioral Risk Detection in Metaverse Ecosystems](https://mlsanity.com/paper/2607.09528/) (2026)
- [Account Consistency from Gameplay Traces: Same-Player Verification in Counter-Strike 2](https://mlsanity.com/paper/2608.24893/) (2026)
- [Hidden In Plain Gaze: Gaze Representations as Privacy Controls for Utility and Re-identification Risk in XR](https://mlsanity.com/paper/2609.04592/) (2026)
- [MoSign: Challenge-Response Motion-Watermark Authentication for Anonymous Virtual-Reality Users](https://mlsanity.com/paper/2609.29603/) (2026)

## Abstract (arXiv)

With the recent explosive growth of interest and investment in virtual reality (VR) and the so-called "metaverse," public attention has rightly shifted toward the unique security and privacy threats that these platforms may pose. While it has long been known that people reveal information about themselves via their motion, the extent to which this makes an individual globally identifiable within virtual reality has not yet been widely understood. In this study, we show that a large number of real VR users (N=55,541) can be uniquely and reliably identified across multiple sessions using just their head and hand motion relative to virtual objects. After training a classification model on 5 minutes of data per person, a user can be uniquely identified amongst the entire pool of 50,000+ with 94.33% accuracy from 100 seconds of motion, and with 73.20% accuracy from just 10 seconds of motion. This work is the first to truly demonstrate the extent to which biomechanics may serve as a unique identifier in VR, on par with widely used biometrics such as facial or fingerprint recognition.