The Digital Security Digest, by Freedom of the Press Foundation (FPF), is a weekly newsletter with security tips that keep you, your sources, and your devices safe. If someone shared this newsletter with you, please subscribe here.

Digital security tools we love

An advertisement appeared in my inbox that captures January 2026 perfectly: now on sale, heart-shaped stress balls, available in both pink and red. (Reader, I bought one.) Perhaps you can relate. Even against the backdrop of press freedom violations in 2025, the raid on the home of a Washington Post reporter earlier this month is a shocking development.

As any heart-shaped stress ball demonstrates, multiple ideas coexist. We can and should be alarmed that a journalist’s digital equipment was seized. And we can also build some measure of psychological safety by leaning into protective measures that reinforce the bulwark between sensitive data and the possibility of future incursions. So, during this season of chocolates and flowers, we’ll be writing odes about our favorite digital security tools. More than ever, we appreciate the availability and access to security-forward technologies, particularly those that marry security with usability.

Signal

It’s no secret that we are massive fans of the secure messaging app Signal. Those following FPF on Bluesky may have noticed our executive director, Trevor Timm, included it in his three tips for digital security following the raid on the Post reporter’s home. From our vantage point, Signal is easy to love. Here’s why:

  • Signal is easy to use. Once you’ve downloaded Signal from Apple’s App Store or Google Play, getting started with messaging sources, colleagues, friends, and family already on the app is a breeze.
  • Signal was built on state-of-the-art encryption protocols. This means that only you and your message’s recipient can read the contents. On top of that, work continues apace to develop encryption standards that can maintain the confidentiality of communications sent through the app even as computing becomes more powerful.
  • Signal goes the extra mile to maintain your privacy. Features like disappearing messages mean that your messages are erased after a set amount of time. You can set notifications up so you can receive an alert about a new message on Signal without any indication as to who it came from. And you can protect the privacy of your phone number — which can contain highly revealing data about you — by setting up and sharing your username instead. For these tips and more, see our guide to locking down Signal for maximum protection.

There are, of course, caveats. It’s important to verify who is on the other end of your messages, especially if the conversation contains national secrets. Similar to any other app on your device, the security of said device is important to making sure your Signal messages stay private. Challenge yourself to go beyond the six digits currently required by creating unique passphrases for your devices, and turning off Face ID and other forms of biometric authentication when prudent.

An easy way to keep unwanted eyes out of your Signal account is to power down when entering into spaces where law enforcement is typically present, and also overnight, given that many raids occur early in the morning.

In the news

Wired reported the discovery of a database containing millions of account usernames and passwords, including credentials for government systems and bank accounts. The database appears to have been created and maintained as a result of deployment of infostealer malware, which can track your typing during the login process. To avoid having your information added to a database like this one, keep your devices updated, take a second to analyze links before tapping or clicking, and handle attachments with care. It’s worth protecting your data by using unique passwords (and storing them in a password manager) and setting up two-factor authentication, a second mode of identification required in order to unlock your accounts.

Updates from our team

Our team is always ready to assist journalists with digital security concerns. Reach out here, and stay safe and secure out there.

Thank you for reading, and stay warm,
Davis

–

Davis Erin Anderson
Senior Digital Security Trainer

Freedom of the Press Foundation