Privacy Tips for Activists

Privacy Tips for Activists

Activists can face heightened privacy and security risks due to the nature of their work, so strong privacy practices are especially important. This article offers general privacy tips for activists. Importantly, because activists' risks vary greatly by situation and can be serious, this is general guidance — those facing significant or specific threats should seek current, situation-specific expertise from trusted organizations that support activists' digital security.

An Important Note First

Given the stakes, start here:

Seek situation-specific expert guidance: Activists facing significant or specific threats should consult current, expert resources and organizations specializing in activists' and human rights defenders' digital security. General tips are a foundation, but tailored guidance for your specific situation, risks, and region is important, since threats and best practices vary and evolve.

Assess your risks: Consider your specific situation and risks (your threat model), which shapes the precautions appropriate for you.

Strengthen Account Security

Accounts are common targets:

• Use strong, unique passwords and a password manager: So a breach of one account does not compromise others.
• Enable strong 2FA: Use app-based 2FA or security keys (security keys are especially phishing-resistant) on important accounts. Prefer these over SMS.
• Secure your email: Your email is the key to your other accounts, so secure it strongly.
• Be very alert to phishing: Activists may be targeted by phishing; be cautious with login links and credential requests, and log in directly.

Secure Your Devices and Communications

Protect your devices and messages:

• Keep devices updated and locked: Keep devices updated (patching vulnerabilities) and locked with strong passcodes and encryption.
• Use encrypted communications: Use reputable end-to-end encrypted messaging for sensitive communications, so their content is protected.
• Be cautious with what you install: Install apps from official sources, and be cautious with links and attachments (common compromise routes).
• Be mindful of device security: Protect against malware and device compromise through good security habits.

Protect Your Privacy and Reduce Exposure

Limit what is exposed:

• Be mindful of your digital footprint: Be aware of the personal information about you that is public, and reduce unnecessary exposure.
• Use privacy tools thoughtfully: Use a VPN on untrusted networks, privacy-focused browsing, and temporary email like Temp90 for less-trusted signups, reducing exposure.
• Be careful with location and metadata: Be mindful of location sharing and metadata (in photos and posts) that can reveal information.
• Compartmentalize where appropriate: Consider separating activities and identities where appropriate to your situation.

Be Mindful of Physical and Situational Security

Digital and physical security connect:

• Be aware of surroundings: Be mindful of shoulder-surfing and device security in public.
• Understand regional considerations: Be aware of the specific legal and situational context of your region and activities, which affects your risks and precautions.
• Seek trusted support: Work with trusted organizations and communities that support activists, who can provide resources and current guidance.

Frequently Asked Questions

What are the most important privacy tips for activists?

The foundational tips are strong account security (strong, unique passwords with a password manager, and strong 2FA — app-based or security keys, which are especially phishing-resistant — on important accounts, plus a strongly secured email), being very alert to phishing (a common targeting method — log in directly and be cautious with credential requests), and securing your devices and communications (keeping devices updated, locked, and encrypted, and using reputable end-to-end encrypted messaging for sensitive communications). Beyond these, reduce your digital footprint and use privacy tools thoughtfully. Most importantly, because activists' risks vary and can be serious, those facing significant or specific threats should seek current, situation-specific guidance from organizations specializing in activists' digital security.

Why should activists seek specialized security guidance?

Because activists' privacy and security risks vary greatly by situation, region, and the nature of their work, and can be serious — so while general tips provide a foundation, the precautions appropriate for a specific person depend on their specific situation and threats (their threat model), which general advice cannot fully address. Threats and best practices also evolve over time. Organizations specializing in activists' and human rights defenders' digital security provide current, tailored guidance for specific situations, risks, and regions, along with resources and support. For anyone facing significant or specific threats, this situation-specific expertise is important, complementing general practices like strong account security, device security, and encrypted communications.

What communication tools should activists use for sensitive discussions?

For sensitive communications, use reputable end-to-end encrypted messaging, so the content of your messages is protected and readable only by the intended recipients. End-to-end encryption is the key property to look for, ensuring even the service cannot read your messages. Beyond the tool, use good practices: keep your devices secure (updated, locked, encrypted, free of malware), since a compromised device can undermine even encrypted messaging, and be mindful of metadata and your broader security. For significant or specific threats, seek current guidance from organizations specializing in activists' digital security, who can recommend appropriate tools and practices for your specific situation, since the best choices depend on your circumstances and evolve over time.

Conclusion

Activists can face heightened privacy and security risks, so strong privacy practices are especially important — though because risks vary greatly and can be serious, this is general guidance, and those facing significant or specific threats should seek current, situation-specific expertise from organizations specializing in activists' digital security. Start by assessing your specific risks. Strengthen account security with strong, unique passwords and a password manager, strong 2FA (app-based or security keys, preferred over SMS), a strongly secured email, and vigilance against phishing (logging in directly). Secure your devices and communications by keeping devices updated, locked, and encrypted, using reputable end-to-end encrypted messaging for sensitive communications, and being cautious with what you install. Protect your privacy and reduce exposure by being mindful of your digital footprint, using privacy tools thoughtfully (a VPN, privacy-focused browsing, temporary email like Temp90), and being careful with location and metadata. Be mindful of physical and situational security, understand your regional context, and work with trusted organizations that support activists. By combining these foundational practices with situation-specific expert guidance, activists can better protect their privacy and security.