Your phone is a tracking device. Your messages aren't private. Your data is for sale. Here's how to fight back and protect yourself.
"Security" isn't one-size-fits-all. A casual activist needs different protections than an organizer working with undocumented communities. Before you act, think about your specific risks.
What do I have that's worth protecting? Contact lists, communications, location data, photos, organizational plans?
Who might want to access it? Law enforcement, employers, stalkers, political opponents, hackers, data brokers?
What are the consequences if they do? Embarrassment, job loss, legal trouble, deportation, physical danger?
How likely is each threat? Focus your energy on the most probable and most dangerous scenarios.
Basic hygiene. Low effort, high impact.
Unique, strong passwords for every account. Bitwarden is free and open source. 1Password is excellent.
Use an authenticator app (not SMS). Authy or Google Authenticator work well. Enable on email first.
Use a 6+ digit PIN, not biometrics (cops can force your thumb, not your memory). Enable auto-lock after 30 seconds.
End-to-end encrypted messaging. Enable disappearing messages. Signal is free and trusted by security researchers worldwide.
Software updates often patch security holes. Enable automatic updates on all devices.
If you're coordinating actions or working with vulnerable communities.
Encrypts your internet traffic and hides your IP. Mullvad or ProtonVPN are trusted, privacy-focused options.
ProtonMail or Tutanota for sensitive communications. Regular email is a postcard—anyone handling it can read it.
If your laptop is lost or seized, encryption protects everything on it. Enable FileVault (Mac) or BitLocker (Windows).
Firefox with uBlock Origin, or Brave. Avoid Chrome—it's a Google surveillance tool.
Turn off location for all apps that don't absolutely need it. Your location history is a map of your life.
Journalists, legal observers, those facing serious threats.
Routes traffic through multiple servers to anonymize your browsing. Essential for researching sensitive topics.
A portable operating system that leaves no trace. Boots from USB, routes everything through Tor.
For protests or sensitive meetings. Prepaid, purchased with cash, never connected to your identity.
YubiKey or similar for unphishable 2FA on critical accounts. The gold standard in account protection.
"Arguing that you don't care about privacy because you have nothing to hide is like saying you don't care about free speech because you have nothing to say."
Your phone is a tracking device and a potential source of evidence. Prepare before you go.
At borders, your normal rights are significantly reduced. Devices can be searched without a warrant.
Your home network is a vulnerability. Anyone on it can potentially see your traffic.
Signs include: accounts being accessed from unknown locations, devices behaving strangely, or people knowing things they shouldn't.
Your security is only as strong as the weakest link in your network. If you're using Signal but your contacts aren't, your messages are still exposed on their end. If you're careful but your organization stores data insecurely, you're all vulnerable. Build a culture of security together.
I use a password manager with unique passwords for each account
I have 2FA enabled on email, social media, and banking
I've checked which apps have access to my accounts and revoked unused ones
My phone uses a PIN (not just biometrics) and auto-locks quickly
My computer has full disk encryption enabled
All my devices have automatic updates enabled
I use Signal for sensitive conversations
I have disappearing messages enabled on Signal
I'm careful about what I share over unencrypted channels
I've reviewed and restricted location services on my phone
I use a privacy-focused browser (Firefox/Brave) with an ad blocker
I've opted out of data brokers (DeleteMe or manual opt-outs)
Electronic Frontier Foundation (EFF) — eff.org/issues/privacy — Surveillance self-defense guides and digital rights advocacy.
Access Now Digital Security Helpline — accessnow.org/help — Free, direct assistance for activists, journalists, and human rights defenders.
Security in a Box — securityinabox.org — Comprehensive digital security guides for activists worldwide.
Freedom of the Press Foundation — freedom.press — Security resources specifically for journalists and sources.
You can't organize effectively if you're being watched. Protect yourself so you can protect democracy.
Take Action →