Skip to content

6 min read

Digital Security

Summary

The practice and pedagogy of protecting activists, their data, devices, communications and organisations from digital surveillance, harassment, and attack.

Body

The practice and pedagogy of protecting activists, their data, devices, communications and organisations from digital surveillance, harassment, and attack.

Digital security for activists covers threat modelling, account and device hygiene, secure communications (Signal, encrypted email), data minimisation, two-factor authentication, and organisational incident response. Tactical Tech produces the canonical practitioner material — Data Detox, Glass Room, and the Holistic Security Manual — translated into many languages [source: tactical-tech]. Blueprints for Change publishes practical security guides for US organisers, with attention to the legal context (can a border agent compel device access? what is the Fifth Amendment reach?) [source: blueprints-for-change]. The Civic Tech Field Guide places digital-security tooling within the broader civic-tech stack and points to vetted implementations [source: civic-tech-field-guide].

The canonical English-language entry point is the Electronic Frontier Foundation’s Surveillance Self-Defense, which pairs a threat-modelling curriculum with step-by-step tool guides and a “Security Planner” that recommends tools for a stated profile [source: ssd-eff]. Tactical Tech and Front Line Defenders’ Holistic Security Manual is the standard reference for integrating digital security with psychosocial wellbeing and organisational security — defenders who adopt Signal without first understanding who might compel a device unlock, or who adopt encrypted email without first agreeing on what may be written down at all, create new vulnerabilities in the act of fixing old ones [source: holistic-security-tactical-tech]. For threat modelling as a discipline, the standard move is to start with the question “who might want what we have, and what would happen if they got it?” before picking tools [source: holistic-security-tactical-tech][source: ssd-eff].

The non-English-language canon fills in the language gaps that an Anglophone-centric literature leaves open. Digitalcourage’s Digitale Selbstverteidigung hub is the leading German-language set-up guide for activists, with concrete recipes for passwords, two-factor authentication, secure messaging, encrypted email, F-Droid, Tails, and secure browsing under a Creative Commons Attribution 4.0 license [source: digitalcourage-digitale-selbstverteidigung]. Nothing2Hide’s Guide de survie numérique pour militant·es is the French-language printable zine (40 pages, double-sided cahier format, 2024 edition) covering Signal, encrypted email, smartphones, passwords, and social-media hygiene under CC-BY-SA [source: nothing2hide-guide-numerique]. The Guide d’autodéfense numérique (guide.boum.org) is the deeper French-language reference for a defender with time to read: a two-volume work, Tome 1 (“Hors connexion”, ~180 pages) and Tome 2 (“En ligne”, ~156 pages), with worked examples and command-line recipes that assume a reader willing to learn about cipher suites and metadata structure, not only app recommendations [source: guide-survie-securite-numerique-activistes]. Cuidando la Red is the Spanish-language zine specifically designed for street-action contexts — phone-wiping decisions, secure-messaging setup, what to take to a protest and what to leave at home — and ships as a foldable PDF for distribution at actions [source: cuidando-la-red-zine].

The Amnesty International Security Lab’s Digital Security Resource Hub is the curated directory of vetted guides, helplines, and tools organised by audience (journalists, activists, human-rights defenders) and by risk level (low, medium, high); for an activist who does not yet know which tool or guide to use, it is the front door [source: amnesty-digital-security-hub]. When prevention has already failed and an account, website, or device is under active attack, the Access Now / RaReNet Digital First Aid Kit is the standard emergency guide, structured around the question “something bad just happened — what now?” with a triage tree that ends in either self-remediation or a referral to a helpline [source: accessnow-digital-first-aid]. See digital-first-aid for the dedicated method page.

Digital-security tooling sits within the broader civic-tech stack mapped by the Civic Tech Field Guide directory civic-tech, and the operational communications discipline it enables is captured in secure-messaging and encrypted-email.

Use it for

Running a digital-security training for activists; assessing an organisation’s threat model; responding to a doxxing or account-compromise incident; choosing between provider-side encrypted email and self-managed PGP/GPG; running a pre-action briefing on phone-wiping and secure messaging at a protest; finding vetted French-, German-, or Spanish-language material for a non-English-speaking cohort.

Worked examples

Learn more

Video

Embedded YouTube CC clips related to this page:

Meredith Whittaker discusses encryption's role in protecting communications against surveillance, directly relevant to digital security for activists.
DEF CON talk on OPSEC for protesters, covering communication strategies and digital security risks for activists.
Tutorial on installing and using Signal for encrypted chat and calls, directly teaching secure communications for activists.

Open Questions

(none)

FAQ

What is digital security?

Digital security is the practice and pedagogy of protecting activists, their data, devices, communications, and organisations from digital surveillance, harassment, and attack. For activists, it covers threat modelling, account and device hygiene, secure communications, data minimisation, two-factor authentication, and organisational incident response [source: tactical-tech].

What should activist digital security training cover?

It should cover threat modelling, account and device hygiene, secure communications such as Signal and encrypted email, data minimisation, two-factor authentication, and organisational incident response. Threat modelling begins by asking who might want what we have and what would happen if they got it, before choosing tools [source: holistic-security-tactical-tech] [source: ssd-eff].

How does holistic security relate to digital security?

The Holistic Security Manual integrates digital security with psychosocial wellbeing and organisational security. A defender who adopts Signal without understanding who might compel a device unlock, or encrypted email without agreeing what may be written down, can create new vulnerabilities while fixing old ones. This frames digital protection as one dimension of broader security practice [source: holistic-security-tactical-tech].

What is the difference between digital security and digital first aid?

Digital security is preventive, while Digital First Aid is an emergency guide for an account, website, or device under active attack. The Access Now / RaReNet kit uses a triage tree ending in self-remediation or a helpline referral. Amnesty’s Security Resource Hub surfaces vetted guides, helplines, and tools by audience and risk level [source: accessnow-digital-first-aid] [source: amnesty-digital-security-hub].

Sources & verification

Last verified: 2026-07-01