Ideas & tips for human rights defenders from Frontline Human Rights Defenders.
This guide is available in Arabic, French, Russian, Spanish, Portuguese, Turkish, Chinese, and Farsi.
Besides the emotional and physical tips, the guide by Frontline Human Rights Defenders discusses IT and technology tips such co-working on documents and spreadsheets with other people using encryptions.
Some of their tips:
You may want to edit simultaneously with others same document using simply your browser on services like:
- CryptPad – end-to-end encrypted service for editing documents and spreadsheets or organising polls, etc. You can store up to 1GB information for free. You can register for free to have your documents store permanently (without registration documents are deleted after 3 months of inactivity).
- Riseup Pads – simple documents co-editing. You can set that your document will be deleted after 1 day, 60 days or 1 year. It is using EtherPad software.
Note that both of above services allow everybody who knows the link to your document access and edit it! It is important to guard the link.
There are also commercial solutions similar to above like Google Docs or Microsoft Office 365.
Working remotely, you will certainly want to securely communicate with others. Please note that all regular mobile phone calls and SMS are not secure and your mobile phone company has full access to them. Instead of using those we recommend using one of these end-to-end encrypted free options:
- Signal: one-on-one text and voice communication and group text communication. We recommend switching on: Settings > Privacy > Screen lock, Screen security, and Registration lock. Also we recommend that you set Disappearing Messages for each conversation you have.
- Wire: one-on-one or small groups text and voice communication. You can use email to register as well as phone number. Just consider that it is a company
- Delta Chat: one-on-one and groups text communication. It is well resistant against blocking it as it works over email, so registration with existing email address is required.
Please see our Guide to Secure Group Chat and Conferencing Tools for recommendations on tools and advices on video calls, webinar or online training.
You will most likely want to keep using your regular email. Do observe normal security best practices, like having good password, switching 2-factor authentication, reviewing settings of your email account including are your email not being forwarded to other addresses, what are devices connecting to your email, what is activity on your email account – when account was logged in, etc. – all this depending on availability on your email account. However, in case you need a new secure email address, FLD recommends using:
- Protonmail – additionally set two-factor authentication (go to Settings > Security and enable two-factor authentication. You’d need to install application andOTP, Duo Mobile or Authy on your phone to complete this step and scan the code on the computer screen with this app).
- Tutanota – additionally setup two-factor authentication (go to Settings > Login > Second factor authentication)
Be aware that only emails between accounts on the same service – Tutanota or Protonmail – are end-to-end encrypted. Emails that are sent outside are not (usually).
Health tracking devices/apps: Some governments have imposed requirements for incoming visitors to download an app and provide one’s mobile phone number so they could track you for public health reasons. These requirements may last longer than necessary. Check with airlines, ministries of foreign affairs or embassies of your destination country, IATA and other authoritative websites before making a decision to travel. If you can, consider running those type of app in a Shelter app profile.
Other guides:
- How journalists can work from home securely – Freedom of the Press Foundation
- Digital Resilience in the Time of Coronavirus – Equality Labs
- How to Work From Home Without Losing Your Mind – Wired.com
- Remote Work and Personal Safety – Tor Project
- How to improve your digital safety while working remotely – SMEX
- GitLab’s Guide to All-Remote – GitLab
- Community Resources for COVID19 – Internet Freedom Festival
General digital protection guides:
- Security in-a-Box – Front Line Defenders and Tactical Technology Collective
- Surveillance Self-Defense – Electronic Frontier Foundation
- Digital First Aid Kit – Digital Defenders Partnership
- Security Planner – Citizen Lab
- Hygiene in Digital Public Square
- The Motherboard Guide to Not Getting Hacked
- Totem: Digital Security Training for activists and journalists – Greenhost and Free Press Unlimited
Emotional protection resources:
- Capacitar Practices for Wellbeing
- Peter Levine’s 2 Step Self-Holding Exercise by Heidi Hanson
- Brightmind Meditation App
- Somatic Meditatio Dharma Ocean
- Remote Working Support – Reigniting Your Health
- Resources for Supporting Children’s Emotional Well-being during the COVID-19 Pandemic
- Free Guide To Living With Worry And Anxiety Amidst Global Uncertainty