In an era where cyber-surveillance and new forms of censorship by authoritarian regimes pose significant threats, journalists face unprecedented challenges in safeguarding their digital presence. This guide, inspired by recommendations from Reporters Without Borders (RSF), offers practical strategies to enhance digital security for journalists. While these recommendations may evolve with technology, they provide a strong foundation for protecting against current cyber threats.
While no set of tools or practices can eliminate all cybersecurity risks, adopting these measures can significantly reduce the likelihood of breaches and online surveillance. For ongoing updates and more detailed guidance, journalists are encouraged to refer to RSF’s Safety Guide for Journalists, UNESCO resources, and consult organizations like the Electronic Frontier Foundation (EFF) and Access Now for support in the event of a cyber attack.
1. Adopt a Stance of Mistrust
- Visual Privacy: Avoid working with your back to a window and use privacy filters on your screens when traveling.
- Equipment Security: Keep your devices with you at all times to prevent unauthorized access.
- Communication Safety: Do not download files or click on links from unknown sources. Verify the authenticity of emails and online interactions through additional checks or search engines.
- Webcam Security: Invest in a webcam cover to block unauthorized access to your camera.
2. Strengthen Your Password Practices
- Use Strong Passphrases: Create complex passphrases that include a mix of digits, uppercase, and lowercase letters.
- Diverse Passphrases: Employ a different passphrase for each online service and manage them with tools like LastPass.
- Two-Step Verification: Enhance security for sensitive accounts like email with two-step verification, typically involving an SMS code sent to your mobile device.
3. Guard Against Cyber Attacks
- Profile Hygiene: Regularly review and secure your social media profiles to prevent doxxing, which involves the malicious publication of personal information.
- Use Reliable Security Software: Install both antivirus and anti-malware software, like Malwarebytes, to protect against malicious attacks.
- Update Regularly: Keep your operating system and applications updated to protect against known vulnerabilities.
4. Erase Your Digital Footprints
- Online Presence Audit: Utilize tools like Namecheckr to review your digital footprint.
- Secure Sign-offs: Always log out of online sessions and clear your browsing history, especially on public or shared devices.
- Cookie Management: Regularly delete cookies or use private browsing modes to avoid tracking.
5. Encrypt Your Communications
- Secure Messaging: Use end-to-end encrypted messaging apps like Signal to protect your communications.
- Email Encryption: Tools like FlowCrypt can encrypt your emails directly within your browser.
- Self-Destructing Messages: Use services like Privnote for sending messages that self-destruct after being read.
6. Secure Your Internet Browsing
- VPN Usage: Install a VPN to encrypt your internet connection and protect your online activities from surveillance.
- Anonymous Browsing: Consider using the Tor Browser for enhanced anonymity while accessing the internet.
7. Protect Your Mobile Security in Hostile Environments
- Contact Anonymity: Store contacts under pseudonyms or codes to protect their identities.
- Preparedness: Carry spare SIM cards and be ready to physically destroy them if necessary.
- Device Security: Use strong passwords for your devices and change the default PINs of your SIM cards.
- Limit Tracking: Disable geolocation and other tracking features when not needed, especially during sensitive situations.