The story inside your software updates
If your web browser is asking you to install software updates, it may also be asking you to protect itself from getting hacked.
Your password was breached. Now what?
Data breaches, and in particular those including personal passwords for websites or apps, are evergreen news stories that repeat themselves like an Advent calendar for cybersecurity failures. Although these breaches are a regular phenomena, they are trailed by a long, drawn-out window of time where other attackers use breached data …
Proton Mail like a pro
Proton Mail is a Switzerland-based email client that offers end-to-end encryption between its users by default. This means that communication between anyone whose email is managed by Proton Mail can only be viewed by members of that party; No outside parties, including Proton Mail itself, can view the content of …
Encryption toolkit for media makers: An introduction
No matter who we are or where we work, each of us has information to keep secure and private. For media makers working in film, journalism, and the arts, data protection is essential. Audio, video, image, and text files make up the bulk of their work, and their livelihoods. The …
Encryption toolkit for media makers: Disk Utility guide
This piece is a part of a series of guides about encryption for media makers; take a look at the full collection here. We recommend you review our introduction to encryption piece for pro-tips and a technical glossary before proceeding with the step-by-step instructions below.Looking for a different tool? …
Encryption toolkit for media makers: VeraCrypt guide
This piece is a part of a series of guides about encryption for media makers; take a look at the full collection. We recommend you review our introduction to encryption piece for pro-tips and a technical glossary before proceeding with the step-by-step instructions below.VeraCrypt not the tool you're …
Security, the gift that keeps on giving
This year we're gifting simple security guidance, which I think we can all agree is better than another internet-connected kitchen appliance.
The first time they reach out, protect sources from themselves
Most sources don’t reach out with terribly sensitive information. But sometimes they do.
Locking down Signal
Also available in Spanish.
Why security specialists love to hate cellphone networks
Learn who else could be on the line when making a call on your cell.
Verifying open source software
Verifying software should be your first priority whenever you download a new piece of software. If you are downloading software by verified individual developers or an organization like Apple or Microsoft, the verification process is handled for you. However, you may want to use software built by developers who haven’t …
Why reporters should always turn on Signal’s disappearing messages
The app's easy-to-use "disappearing messages" feature can prevent sensitive conversations from getting into the wrong hands — when used as a part of a larger practice of secure communications.
An in-depth guide to choosing a VPN
A virtual private network, or VPN, is a useful tool for protecting your online activity. But figuring out which credible, secure VPN to use can be a challenge. This guide will show you what to look for when shopping for a VPN.
Everything you wanted to know about media metadata, but were afraid to ask
What is metadata?Metadata is data about data. Every single digital artifact has it. It describes the who, what, when, where, how, and sometimes even, why, for any document, video, photo, or sound clip. This information comes in handy sometimes, like when you’re flipping through old pictures by date, or …
11 tips for protecting your privacy and digital security in the age of Trump
Many fear how the Trump admin will use surveillance to stifle dissent. Here's a beginner's guide to upping your privacy and security game.
How journalists can protect themselves while covering protests
For journalists covering political movements, reporting on protests is crucial, but these events come with unique security challenges. Here's how you can better protect your privacy and security.
Mobile security tips: How to respond to confiscation and compromise
Before heading to an event, read our piece about mobile security for activists for detailed context.
Mobile security tips: Nine steps to prepare your phone before an action
Before heading to an event, read our piece about mobile security for activists for detailed context.
What to do if your phone is seized by the police
So, you’ve been arrested covering an event. You’re taken to the police station, you’re booked, and your phone is confiscated. When you’re let out, after a few hours or even a few days, your phone is handed back to you in a plastic baggie, the SIM card and SD card …
Three types of passphrases
The first step to a healthy digital life is an easy-to-implement strategy for managing your account credentials. You’ll notice that we’re using the term “passphrases” instead of “passwords.” Do you wonder why? In short, because passwords are obsolete. They’re too short, they tend to be unimaginative, and chances are, they’re …
Phishing prevention and email hygiene
Journalists and newsrooms are increasingly the victims of hacking and malware, and hackers often target them through email. Virtually every “sophisticated” hack of an individual reporter or entire newsroom involves a relatively simple email attack: phishing and spear phishing.Phishing is a social-engineering attack where an adversary crafts an email …
