Want improved adoption of digital security practices? Tell a good story.
Research concerning digital security narratives in journalism
Check if your account has been breached
If you have found your email in a data breach and the affected account is still active, you’re going to want to change the password for the relevant service right away.
Learn from the social media breach at SEC
On Jan. 9, 2024, the U.S. Securities and Exchange Commission’s account on X, formerly known as Twitter, was hijacked and used to post about the approval of a Bitcoin exchange-traded fund. This could have happened to anyone, whether an individual or a well-resourced organization. Learn how to mitigate similar attacks in this week's edition of our digital security digest
2024 resolution: Get started with security keys
Two-factor authentication (2FA) is great because it helps harden your account security. The strongest 2FA option commonly available today depends on a piece of hardware, a security key — a little device you can plug into your USB port to help log in.
Private browsing isn’t that private
On all major browsers, research suggests many users overestimate the privacy promises of private browsing mode, with many believing that it allows them to hide their IP address, encrypt their web traffic, browse anonymously, and more. That’s why you’ll want to read about what private browsing mode does and doesn’t do.
Audio: Every season is spooky season with Meta’s chatbot AI
October is cybersecurity awareness month and Martin Shelton, principal researcher at Freedom of the Press Foundation (FPF), explores Meta’s new AI chatbot features. What he finds is security news that’s creepier than any ghost and a tool that bleeds more than fake vampire fangs.With Meta releasing AI chatbot abilities …
Overcoming challenges when setting up newsroom Signal tiplines
We outline important decisions for newsrooms when setting up Signal tiplines
Lessons from a newsroom raid: How to encrypt your devices to protect yourself
Police raid on Marion County Record underscores digital security threats to media orgs.
Protección avanzada para Signal
También disponible en inglés.
Signal, la app de mensajería segura: Guía para principiantes
También disponible en inglés.
Aumenta la seguridad de tu WhatsApp
También disponible en inglés.
¿Cómo elegir un gestor de contraseñas?
También disponible en inglés.
Autenticación de dos factores para principiantes
También disponible en inglés.
Signal, the secure messaging app: A guide for beginners
Also available in Spanish.
How journalists can work from home securely
Both the newsroom and individual journalists must make some changes to work from home securely.
Choosing a password manager
Also available in Spanish.
Passkeys: Passwordless logins for beginners
One of the most common ways people get hacked is through phishing — when an attacker impersonates a trusted website to trick you into entering your credentials. But what if you never had to type in a password? Passwordless logins — known as passkeys — reduce your risk by enabling …
From Tik to Tok: Security considerations for newsrooms using TikTok
By the end of 2021, TikTok reached one billion monthly users, becoming one of the most popular social media platforms globally. In the United States, the platform was one of the few that significantly increased its share of users who said they regularly use the platform to get their …
How technology is changing the harassment of journalists — and what newsrooms can do about it
A study of mob censorship of journalists, and how media organizations and platforms are responding.
Taking care with source security when reporting on abortion
What journalists can do to better manage digital security for sources when reporting on abortion.
To protect your sources, protect your address book
Source protection is a paramount concern for journalists in every beat. Platforms like SecureDrop and apps like Signal allow you the ability to securely and privately speak with whistleblowers to break important stories. Beyond protecting the confidentiality of these conversations, however, is the concern for the metadata, or data about data, that identifies who you’ve been talking to.
So you want a second Signal account
If you use Signal, the secure messaging app, you may have thought about getting a second account. The good news is you don’t need another phone plan to use a second Signal account, and you may be able to set it up on a range of devices.We’ll walk …
How secure are journalists’ favorite transcription tools?
Journalistic work often depends on transcription services for creating written logs of recorded audio, from assisting in research to captioning videos to publication of interviews. But uploading audio to a transcription service means giving a copy of that — sometimes sensitive — recording over to a company.
Filmmakers, take action: A new digital security resource and free digital security clinic
Today, we're launching an interactive digital security platform and free clinic for filmmakers.
What journalists should know about detecting and mitigating Pegasus spyware
At Freedom of the Press Foundation, we assist journalists on their digital security habits to help them work more safely and sustainably. So we take it a little personally when private spyware companies are actively making journalists less safe by selling their services to repressive governments. We are now learning …
