Protecting yourself, your information, and your communities in the digital space
Digital security refers to the practices, tools, and measures used to protect your digital identity, devices, accounts, data, and online activity from unauthorized access, theft, damage, or misuse.
Fake messages designed to steal passwords or credentials.
Harmful software that infects devices to extract data.
Weak or reused passwords guessed by automated tools.
Unsecured public networks or stolen hardware exposing files.
Ask yourself: "Would I be comfortable if this information, photo, or conversation became public tomorrow?"
Remembering dozens of complex, unique passwords is impossible. A password manager encrypts and stores them safely in a single vault.
Passwords can be leaked, phished, or guessed. MFA adds a required second layer before access is granted.
Never click suspicious links. Verify the message through a second, trusted channel (such as a quick call or Signal message) before taking action.
Attackers exploit human psychology instead of hacking software directly. They gain trust to manipulate victims into handing over sensitive information.
Keep your operating system and web browsers updated automatically.
Turn on BitLocker (Windows) or FileVault (macOS) to seal files.
Lock your screen instantly whenever you step away from your desk.
Never plug in unknown or untrusted USB drives or accessories.
Interview recordings, confidential case files, survivor data, photos, videos, and contact directories.
Encrypt sensitive folders using tools like Cryptomator or VeraCrypt before storing or transferring.
Limit file access exclusively to verified, authorized team members with a legitimate need to know.
Mitigate data loss caused by theft, physical damage, or ransomware infection.
What digital threats or suspicious messages have you experienced?
Which security tools or practices do you already use effectively?
What technical or social barriers make staying secure difficult?
How can journalists and defenders support each other during incidents?
Digital security is an ongoing operational routine, not a one-time setup task.
Pause before you click links or open attachments. Check sender address authenticity.
Is the message trying to make you panic, rush, or act out of excitement or fear?
Verify web domains carefully. Confirm requests through a separate official channel.
Never share passwords, MFA codes, or sensitive PINs via email or messaging apps.