# Security for journalists

## Quick tips/wins

*  if sharing passwords etc when people can't access Passbolt or whatever, send half over WhatsApp and half over Signal – never a whole one and especially not over here
* a couple of useful tests around getting phished – I nearly got had by someone who was pretending to be Tara Miran using a fake email the other day <https://phishingquiz.withgoogle.com> and <https://shira.app> plus another where you can test sus URLS <https://urlscan.io>
* if you've never been on here before, always good to check your personal email security <https://haveibeenpwned.com> this is also built into firefox in the menu under passwords.
* this tool which looks useful for social media mining – and can also be used to check your own online identity – it shows a scary amount of info <https://lampyre.io>
* Crypt pad, which is a secure open-source Google drive alternative, not practical for the whole Cable to use but if media team set up an account then we could use it to store supporting docs for stories etc allowing us to collaborate better and make confidential material available to one another – which could be extremely useful for example if someone is away from work <https://cryptpad.fr>

### Tor Browser

Want to browser websites with out being tracked? <https://www.torproject.org/projects/torbrowser.html.en>

### Firefox

Sounds like a conspiracy but Chrome by default saves all of your search history and mines your information to pay for the browser, which could give a person the shivers! If you find Tor too slow then <http://getfirefox.com/>! Highly recommend the privacy badger and ublock orgin as addons

1. &#x20;[uBlock Origin](https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/) - stop trackers and adverts
2. &#x20;[privacy Badger](https://www.eff.org/privacybadger) - eats tracking cookies as it goes
3. &#x20;[facebooks container](https://addons.mozilla.org/en-US/firefox/addon/facebook-container/) - keep facebook from running in none facebook tabs

If you use these sort of plug-in in chrome it's a bit useless as google all the time are making new ways of tracking that circumvents the plugins that it runs!

### Tails

This is particularly useful if you don't have an open source operating system like macosx or windows and need to research something securely. Tor browser makes it hard to be spied on, Tails makes it **very very hard** to be spied on. Best ran from a usb, see: <http://tails.boum.org/>

## General

Want generalised help with something specific i highly recommend [privacytools.io](https://privacytools.io/) it's great!

## Security Guides <a href="#firstheading" id="firstheading"></a>

* &#x20;[CIJ manual for journalist](http://tcij.org/node/1080)
* &#x20;<https://securityinabox.org/>
* &#x20;<http://en.flossmanuals.net/tech-tools-for-activism/index/>
* &#x20;<https://riseup.net/en/security>

## Security testers <a href="#firstheading" id="firstheading"></a>

<http://www.uk-osint.net/privacy.html>

<https://panopticlick.eff.org/>

\
&#x20;has my email address and password been stolen?

<https://haveibeenpwned.com/>