Mobile Safety: Protecting Your Smartphone
Smartphones are often the most important — and most exposed — devices activists carry. They hold messages, photos, location history, contacts, accounts and authentication tools. This chapter explains how to secure phones before everyday use, travel, protests and high-risk situations.
Overview
Smartphones combine communication, identity, location, documentation and account access in one small device. That makes them useful — and risky. A lost or seized phone may expose messages, photos, contacts, social accounts, cloud files and 2FA codes.
Mobile safety means reducing what a phone can reveal, limiting what apps can access, securing the device against theft or search, and preparing before travel, protests or other high-risk situations.
Securing access to your mobile device
The first layer of mobile safety is simple: make it hard for someone else to unlock the device. A phone without a strong lock is not a secure device. It is a pocket-sized data leak.
Use a strong PIN or passphrase
Use at least a 6-digit PIN, or better, an alphanumeric passcode. Avoid obvious patterns, birthdates, 123456, or easy swipe patterns.
Set quick auto-lock
Configure the phone to lock after a short period of inactivity. Also lock it manually when you stop using it.
Hide lock-screen content
Message previews, verification codes and sensitive notifications should not be readable from the lock screen.
Use biometrics carefully
Fingerprint and face unlock are convenient, but in some high-risk scenarios a passcode gives better control.
Before protests, border crossings or situations where someone may try to force access, consider disabling fingerprint or face unlock. Use a memorized passcode instead.
Apps, permissions and device settings
A phone is only as safe as the apps installed on it and the permissions those apps receive. Many mobile risks come from installing too much, granting too much, and reviewing too rarely.
Use trusted app stores
Install apps from official stores where possible. Avoid unknown APKs and random download links.
Review permissions
Limit access to camera, microphone, contacts, files, location and notifications.
Update apps
Keep mobile apps updated. Old versions may contain known security weaknesses.
Remove unused apps
If an app is no longer needed, delete it. Dead apps still create living risk.
Be especially careful with apps requesting accessibility permissions, device administrator rights, full file access or background location. These permissions can be powerful and should only be granted when clearly justified.
A flashlight app does not need your contacts. A simple game does not need your microphone. If an app asks for too much, treat that as a signal, not a detail.
Networks, location and wireless features
Phones constantly connect to networks and produce location-related traces. Public Wi-Fi, Bluetooth, NFC, GPS, app tracking and cloud sync can all expose information if left unmanaged.
Use public Wi-Fi carefully
Use a VPN when using public networks, especially in airports, hotels, cafés or events.
Limit location sharing
Review which apps can access precise location and disable location access when not needed.
Turn off unused radios
Disable Bluetooth, NFC and AirDrop-like features when you do not need them.
Check sync settings
Photos, contacts and documents may automatically upload to cloud accounts.
Location data is often more revealing than people expect. It can show routines, meetings, protest attendance, travel history or relationships between devices and people.
Before sensitive meetings or field work, check location sharing, wireless features and cloud sync. If a feature is not needed for the task, turn it off.
Travel and protest safety
Mobile safety changes when the phone enters a high-risk environment. Protests, border crossings, sensitive meetings, hostile regions and police encounters require preparation before the event, not panic during it.
The key principle is data minimization: carry only what you need. If the phone is taken, searched or damaged, it should not expose your entire personal and organizational life.
Remove unnecessary sensitive data before travel or high-risk events.
Consider using a clean or temporary phone for high-risk situations.
Disable biometric unlock before protests, checkpoints or possible detention.
Enable remote locate and remote wipe before you need them.
Back up important photos or evidence quickly and securely.
If a phone was out of your control, treat it as potentially compromised.
A burner phone is a temporary device with minimal sensitive data, used for high-risk situations where carrying a main phone would expose too much. It is useful only if it is kept separate from your main identity and accounts.
Mobile safety checklist
Use this checklist before everyday work, travel, protests or high-risk meetings.
My phone uses a strong PIN or passphrase.
Auto-lock is enabled and activates quickly.
Lock-screen notifications do not reveal sensitive message content.
I disable fingerprint or face unlock before high-risk situations when appropriate.
I install apps only from trusted sources.
I regularly review app permissions for location, camera, microphone, contacts and files.
My phone operating system and apps are updated.
I use a VPN on public Wi-Fi when needed.
Remote locate and remote wipe are enabled.
I reduce sensitive data before travel, protests or border crossings.
I know what to do if I suspect spyware or compromise.
I have key contacts available somewhere other than only on my phone.
Useful tools and references
These tools and references can help with mobile device protection, remote wipe, safer communication and spyware response. Choose based on your threat model and local context.
Test your understanding, then continue to social media security
Take the short anonymous quiz for this chapter. Your individual result is not stored on the server. After that, continue with privacy settings, doxing risks, harassment, audience management and safer social media use.
Download the full Digital Security Toolkit
Prefer reading offline or sharing the material with your team? Download the full PDF version of the Digital Security Toolkit.