This module will not provide an exhaustive look at this topic, but will instead provide the starting point for students to know how to investigate their digital security questions as needed.

This lecture and activities will briefly introduce several foundational topics on digital security, including the basics of risk assessment, account security, digital and physical device security, and communication security. It will also provide some details on additional resources they can investigate to learn more.

If time permits, instructors can have students set up and send each other some test messages with Signal. Note that having a second instructor or assistant (perhaps even a student who fancies themself security savvy!) will help expedite the Signal installation and test.

Prerequisites

(None)

Estimated time

While possible to present in a single session, we recommend delivering this module over the course of multiple classes. This will better enable space for student engagement and questions on these fundamental topics.

Timing for each of the topics included in this module: risk assessment (15 minutes), account security (45 minutes), device security (45 minutes), and communication security (45 minutes).

Objectives

  • Upon successful completion of this module, students will be able to identify factors in conducting a threat analysis.
  • Students will understand the importance of encryption for privacy when communicating online.
  • Students will be able to identify a few contemporary communication encryption tools used in newsrooms, and understand the relevant security properties that distinguish them.
  • Students will be able to identify a phishing email.
  • Students will understand best practices for authentication safety on the web.
  • Students will have a basic understanding of how to strengthen the security of their computing devices.

Why this matters

This lesson intends to help students begin gestating on the basics of digital security, and learn about strong practices. Because it is so abbreviated, this lesson is best treated as an "opener" for continued conversations and assignments that integrate digital security tools and practices.

Homework

(After class)

  • (Optional) Students can try setting up two-factor authentication on at least one email account they have access to, document which “factor” they chose, why, and how this compares to alternatives. For additional help setting up 2FA, have students read this article by our team at Freedom of the Press Foundation: “Two-factor authentication for beginners”
  • (Optional) Install a password manager with a free trial (e.g., 1Password)
  • (Optional, if not done during class) Students should try installing the Signal app and send you a message.

Sample slides

Digital Security 101 (Google Slides)

Activities

  • If time permits, have students install and use Signal to send you a message, or if they feel comfortable, send a message to one another. Freedom of the Press Foundation provides detailed instructions on setting up and using Signal: "Signal, the encrypted messaging app: A guide for beginners" Have students pair on installing Signal and sending each other one message. Start by visiting https://signal.org/download/
  • Note: If you or your students feel uncomfortable with the idea of sharing a personal phone number, you'll want to set up a username in Signal. Learn more about how to keep your phone number more private with a username in our guide to locking down Signal.