You do not have to be a cybersecurity expert to make your personal information harder to misuse. In fact, most people get more value from a handful of sensible habits than from downloading fifteen intimidating tools and hoping for the best.
Digital privacy for activists is not about disappearing from the internet. It is about reducing unnecessary exposure. Your priorities depend on who might target you, what information you handle, and how damaging a compromised account could be.
1. Lock down your most important accounts
Start with your email account because it often controls password resets for everything else. Use a unique, long password stored in a reputable password manager. Turn on multifactor authentication; a passkey or authenticator app is generally preferable to relying only on text messages where available. Review recovery email addresses and phone numbers before you need them.
2. Update devices and remove what you do not use
Security updates fix known vulnerabilities. Enable automatic updates for your phone, computer, browser, and major applications. Remove unused extensions, especially ones that can read everything you type or view in a browser. Old software and forgotten accounts are unnecessary openings.
3. Match the communication tool to the conversation
End-to-end encryption can protect message contents in transit, but it does not make participants trustworthy, erase screenshots, or hide every piece of metadata. Agree with your group on what belongs in a chat and what should never be recorded there. For tips or sensitive document submissions, look into purpose-built tools such as the SecureDrop and GlobaLeaks resources listed in our privacy collection, but use only the official submission channel designated by the receiving organization.
4. Think before you publish location and identity clues
A photo may reveal faces, license plates, signs, and the location where it was taken. Review the image itself and its metadata before sharing. Ask permission before identifying other participants, and avoid posting real-time locations when doing so could create risk for others. Privacy should be part of planning, not an apology after a post goes viral.
5. Have a simple recovery plan
Write down what you would do if an account were compromised: change credentials from a trusted device, sign out of unfamiliar sessions, contact relevant collaborators, and preserve evidence of harassment. Keep secure backups of essential files. A plan is more useful when you can follow it under stress.
The best tool is the one you understand
Privacy software differs in purpose, cost, and trust model. Some products limit data collection; others help with encrypted reporting or offline maps. None is universal protection. Explore the Digital Privacy directory, read each provider’s current documentation, and favor tools that fit your actual needs.
Want to help others build safer habits? Share this article with your group and spend twenty minutes reviewing your accounts together. Practical preparedness is not glamorous. Neither is discovering your email has been hijacked.
Sources and further reading
CISA: Secure Our World
Electronic Frontier Foundation: Surveillance Self-Defense
Resistance Directory: Digital Privacy
