Skip to content

Campaigning Wiki

3 min read

lang: en

Summary

The practice of protecting one-to-one and group communications against interception, device seizure, metadata exposure, and social-engineering attack. In 2026 the operational baseline is end-to-end-encrypted messaging (Signal, Threema, Matrix), a registration lock PIN, disappearing-message timers, safety-number verification, and lock-screen notification hygiene — but the operational discipline matters more than the choice of app.

Body

Secure messaging for activists sits at the intersection of three disciplines: cryptography (what the protocol guarantees), operational security (what the user’s habits guarantee), and metadata hygiene (what the surrounding communications ecosystem reveals regardless of message content). The standard reference recognises that no single layer is sufficient [source: ssd-eff].

The canonical operational baseline is a six-step checklist that begins with installing the messenger from the official source (App Store / Play Store / signal.org), continues with enabling a strong registration-lock PIN, setting disappearing-message timers for sensitive conversations, verifying safety numbers out-of-band before trusting identity, disabling lock-screen notification previews on phones at risk of seizure, and configuring backups off-device [source: signal-security-checklist-activists]. The checklist is short enough to be covered in an hour and concrete enough that a non-technical volunteer can adopt it before the end of a training session [source: signal-security-checklist-activists].

The defender’s reference frames explicitly what secure messaging does not solve. The metadata of who-messages-whom and when remains visible to the messenger service and to anyone with a court order; group chats are not end-to-end encrypted against the service operator; sealed-sender metadata protections are a defence against passive network observers, not against legal compulsion [source: signal-security-checklist-activists]. A defender who adopts Signal without understanding these limits creates a false sense of security that is itself a vulnerability, and the Holistic Security Manual addresses this by treating secure messaging as one of three interlocking disciplines (digital, psychosocial, organisational) that must be planned together [source: holistic-security-tactical-tech].

The non-English-language canon supplies set-up guides that account for the local ecosystem rather than translating an English-language original wholesale. Digitalcourage’s Digitale Selbstverteidigung covers Signal, Threema, and Matrix as alternatives, with set-up instructions that explicitly call out German service providers and legal context [source: digitalcourage-digitale-selbstverteidigung]. Nothing2Hide’s Guide de survie numérique pour militant·es covers Signal for a French-speaking cohort in the 2024 edition [source: nothing2hide-guide-numerique]. The guide.boum.org Guide d’autodéfense numérique (Tome 2, “En ligne”) goes deeper on messaging, encrypted email, and metadata than the shorter zines, with worked examples and command-line recipes for the reader willing to learn about protocol details [source: guide-survie-securite-numerique-activistes]. Cuidando la Red is the Spanish-language zine designed for protest-day contexts, with specific recommendations on which phone to bring, what to do with the phone that stays home, and how to handle photos and recordings without metadata leaking [source: cuidando-la-red-zine].

Secure messaging is closely related to digital-security (the broader discipline it sits within), encrypted-email (the asynchronous companion channel), and digital-first-aid (the incident-response discipline when secure messaging fails or has been bypassed).

Use it for

Running a one-hour secure-messaging training for a campaign’s volunteers; configuring Signal (or an equivalent) for a group’s day-to-day operational communications; briefing a cohort before a sensitive campaign launch; deciding between Signal, Threema, Matrix, and the messenger a contact network is already using.

Open Questions

None yet.

Sources & verification

Verified 2026-07-01 by terminal-T4.

Graph View

Backlinks