Secure Communication: Keeping Your Conversations Private
Digital communication is central to activism — from coordinating plans to sharing sensitive information. This chapter explains how to choose safer channels, use encryption, and understand metadata and anonymity risks.
Overview
Communications can be intercepted or monitored by adversaries if not properly secured. Secure communication means choosing channels that protect message content, reduce unnecessary traces, and fit the sensitivity of the conversation.
The goal is not to use the most complex tool for every conversation. The goal is to match the communication channel to the risk: routine coordination, sensitive organizing, confidential sources, or high-risk anonymity all require different levels of care.
Why encryption matters
Encryption scrambles messages or calls so that only the intended recipient can read or hear them. Without encryption, an internet provider, government surveillance system, attacker on public Wi-Fi or compromised network could potentially access the content.
End-to-end encryption
End-to-end encryption means the message is encrypted on your device and decrypted only on the recipient’s device. Even the service provider should not be able to read it.
Transport encryption
HTTPS protects traffic between your device and a service’s servers, but the service itself may still be able to read the content.
Key verification
Some encrypted apps allow contacts to verify safety numbers or QR codes. This is useful for high-risk conversations.
Encryption limits
Encryption does not protect you if your device is compromised, unlocked, seized, or if someone in the conversation shares the content.
Secure messaging and voice calls
Not all communication tools are equal. For sensitive organizing and private conversations, use end-to-end encrypted messaging and calling whenever possible.
Signal
Strong default choice for sensitive messages, group chats, voice calls and video calls.
End-to-end encrypted by default, but metadata and cloud backup settings require care.
Wire / Element
Alternative encrypted tools that may fit teams or organizations with specific needs.
Avoid SMS
Standard SMS and regular phone calls are not suitable for sensitive communication.
For voice and video, encrypted calls through secure apps are safer than standard phone calls. For group chats, keep membership limited to people who truly need access, and use admin controls where available.
A group chat is only as secure as its members and their devices. One compromised phone, one careless screenshot or one wrong participant can expose sensitive content.
Email security and alternatives
Email is useful but was not designed for strong privacy by default. For sensitive communications, regular email should be treated cautiously.
PGP can encrypt email content, but it is often difficult for non-technical users to manage. Encrypted email services can improve privacy, especially when both sender and recipient use the same encrypted platform.
Use email selectively
Avoid putting sensitive strategy, personal details or confidential sources into regular email.
Encrypt when needed
PGP can protect email content, but subject lines and metadata may remain visible.
Secure attachments
Use encrypted file sharing or encrypted archives for sensitive documents.
Check suspicious emails
Unexpected attachments or links should be verified through a separate trusted channel.
Protecting metadata and anonymity
Metadata is “data about data”: who communicated with whom, when, for how long, from which device or location, and through which service. Even if content is encrypted, metadata can reveal patterns and networks.
If anonymity is important, consider tools and habits that reduce traces: Tor, VPNs, pseudonymous accounts, separate devices, reduced location sharing, and avoiding unnecessary written records for highly sensitive plans.
Use tools that minimize metadata where possible.
Use Tor or a trusted VPN when hiding your IP address matters.
Turn off unnecessary location sharing and geotagging.
Use separate accounts or devices for high-risk identities where appropriate.
Do not put the most sensitive details in writing unless needed.
Remember: anonymity tools do not help if you log into an account tied to your real identity.
Secure communication checklist
Use this checklist to review whether your communication habits match your risk level.
I use end-to-end encrypted apps for sensitive messaging and calls.
I avoid sharing highly sensitive information via regular email, SMS or standard calls.
I periodically clean up sensitive chats or use disappearing messages when appropriate.
I verify unexpected attachments and links before opening them.
I understand which channels reveal metadata and identity.
I take extra steps such as VPN, Tor or separate accounts in high-risk situations.
I turn off unnecessary location and metadata sharing in communication apps.
I keep communication apps updated for the latest security improvements.
Useful tools and references
These tools are mentioned as practical examples. Choose tools based on your threat model, team capacity and local context.
Test your understanding, then continue to device and data protection
Take the short anonymous quiz for this chapter. Your individual result is not stored on the server. After that, continue with securing devices, files, backups and data.
Download the full Digital Security Toolkit
Prefer reading offline or sharing the material with your team? Download the full PDF version of the Digital Security Toolkit.