Privacy Tips for Journalists

Privacy Tips for Journalists

Journalists often handle sensitive information and need to protect their sources, communications, and work — making privacy and security especially important. This article offers general privacy tips for journalists. Because journalists' risks vary and can be serious (especially those handling sensitive stories or sources), this is general guidance; those facing significant risks should seek current, situation-specific expertise from organizations specializing in journalists' digital security and source protection.

An Important Note First

Given the stakes, start here:

Seek specialized guidance: Journalists handling sensitive work or sources, or facing significant risks, should consult current, expert resources and organizations specializing in journalists' digital security and source protection. General tips are a foundation, but tailored guidance for your specific situation, sources, and risks is important, since threats and best practices vary and evolve.

Consider your threat model: Your precautions should match your specific situation, the sensitivity of your work, and your risks.

Protect Your Sources and Communications

Source protection is central:

• Use encrypted communications: Use reputable end-to-end encrypted messaging and tools for sensitive communications with sources, protecting their content.
• Be mindful of metadata: Even with encrypted content, metadata (who communicated with whom, and when) can be revealing. Be aware of this, and seek expert guidance on protecting source anonymity where it matters.
• Consider secure methods for sensitive sources: For sensitive source communications, specialized secure tools and methods exist; seek expert guidance on appropriate approaches.
• Compartmentalize sensitive work: Separate sensitive work and communications where appropriate.

Strengthen Account and Device Security

Secure your accounts and devices:

• Use strong, unique passwords and a password manager: Protecting your accounts.
• Enable strong 2FA: Use app-based 2FA or security keys (especially phishing-resistant) on important accounts, preferred over SMS.
• Secure your email: Your email is critical; secure it strongly, since it is the key to your accounts and may contain sensitive communications.
• Be very alert to phishing: Journalists may be targeted; be cautious with login links and credential requests, and log in directly.
• Keep devices updated, locked, and encrypted: Patching vulnerabilities and protecting device data.

Protect Your Work and Data

Safeguard your information:

• Back up securely: Back up your work securely, so it is protected and recoverable.
• Protect sensitive files: Consider encryption for sensitive files, and be mindful of where sensitive data is stored.
• Be cautious with what you install and click: Install apps from official sources and be cautious with links and attachments, avoiding malware and compromise.

Reduce Exposure and Be Mindful of Context

Limit exposure and understand context:

• Be mindful of your digital footprint: Reduce unnecessary personal exposure, and be aware of information about you that is public.
• Use privacy tools: Use a VPN on untrusted networks, privacy-focused browsing, and temporary email like Temp90 for less-trusted signups.
• Be aware of location and metadata: Be mindful of location and metadata in your communications and content.
• Understand your context: Be aware of the legal and situational context of your work and region, and seek trusted support.

Frequently Asked Questions

What are the most important privacy tips for journalists?

The foundational tips are protecting your sources and communications (using reputable end-to-end encrypted messaging for sensitive communications, and being mindful of metadata, which can be revealing even when content is encrypted), strong account and device security (strong, unique passwords with a password manager, strong 2FA like security keys, a strongly secured email, vigilance against phishing, and keeping devices updated, locked, and encrypted), and protecting your work and data (secure backups and protecting sensitive files). Most importantly, because journalists' risks vary and can be serious — especially for source protection — those handling sensitive work or facing significant risks should seek current, situation-specific guidance from organizations specializing in journalists' digital security and source protection.

How can journalists protect their sources?

Source protection is central and sensitive. Use reputable end-to-end encrypted communications for sensitive discussions with sources, protecting their content. Critically, be mindful of metadata — even with encrypted content, metadata (who communicated with whom, and when) can be revealing and expose a source relationship, so protecting source anonymity requires attention beyond just encrypting content. For sensitive source communications, specialized secure tools and methods exist, and the appropriate approach depends on your specific situation and risks. Because source protection can be high-stakes and the best practices are situation-specific and evolving, journalists handling sensitive sources should seek current, expert guidance from organizations specializing in journalists' digital security and source protection.

Why should journalists seek specialized digital security guidance?

Because journalists' privacy and security risks — especially around protecting sources and sensitive work — vary by situation and can be serious, and the appropriate precautions depend on the specific circumstances, sources, and threats involved, which general advice cannot fully address. Source protection in particular can be high-stakes, and issues like metadata, secure communication methods, and situational risks require tailored, current expertise. Threats and best practices also evolve. Organizations specializing in journalists' digital security and source protection provide current, situation-specific guidance, tools, and resources. So while foundational practices (encrypted communications, strong account and device security, reducing exposure) are important, journalists handling sensitive work or facing significant risks should complement them with specialized expert guidance for their specific situation.

Conclusion

Journalists often handle sensitive information and need to protect their sources, communications, and work, making privacy and security especially important — though because risks vary and can be serious, this is general guidance, and those handling sensitive work or facing significant risks should seek current, situation-specific expertise from organizations specializing in journalists' digital security and source protection. Consider your threat model. Protect your sources and communications with reputable end-to-end encrypted messaging, being mindful of metadata (revealing even when content is encrypted) and seeking expert guidance for sensitive source protection. Strengthen account and device security with strong, unique passwords and a password manager, strong 2FA (security keys preferred), a strongly secured email, vigilance against phishing, and devices kept updated, locked, and encrypted. Protect your work and data with secure backups, protecting sensitive files, and caution with what you install and click. Reduce exposure and be mindful of context — your digital footprint, privacy tools (a VPN, privacy-focused browsing, temporary email like Temp90), location and metadata, and your legal and situational context. By combining these foundational practices with situation-specific expert guidance — especially for source protection — journalists can better protect their sources, communications, and work.