Learning path · 20 steps
Under Surveillance
Surveillance is cheap, automatic and increasingly targeted. This path hardens the device first, then your communications, then your movement across the network, because each layer depends on the one beneath it.
Who it is for Activists, journalists, organisers and dissidents whose communications are, or may be, watched.
-
01
Threat Modeling for Sovereign Individuals
Decide who you are defending against before choosing tools.
-
02
Hardening a Phone with GrapheneOS
Your phone is the most likely point of compromise; harden it first.
-
03
Passkeys and Security Keys
Choose account credentials and plan how to recover after losing a device or key.
-
04
Choosing a Secure Messenger
Pick a messenger by what it reveals about you, not just whether it encrypts.
-
05
Choosing a private messenger
Compare identifiers, delivery services, encryption defaults and offline operation.
-
06
Metadata Resistance
Understand why who-talks-to-whom matters as much as what is said.
-
07
Using Tor Safely
Hide what you read and where you are from the network and the sites you visit.
-
08
Tails, Qubes OS and Whonix
When one mistake is catastrophic, let the operating system enforce discipline.
-
09
OnionShare
Understand the host and access-key trust model before sharing files over Tor.
-
10
SecureDrop
Learn the separate source, newsroom and isolated-viewing roles for confidential submissions.
-
11
Sanitizing Documents Before Sharing
Review metadata and redaction before sharing sensitive documents.
-
12
Encrypting Files, Disks and Backups
Make a seized or stolen device worthless to whoever holds it.
-
13
Private File Sync and Backup
Keep working copies on chosen devices and test a separate offline recovery copy.
-
14
Reducing Tracking: Browsers, DNS and Fingerprinting
Remove the commercial tracking that feeds data brokers and investigators.
-
15
Map: Threat Models
A map of the adversaries, trust assumptions and failure modes across this library.
-
16
Responding to Suspected Device Compromise
Prepare a response plan with trusted communication, evidence preservation and expert help.
-
17
Verify software before installing it
Check publisher signatures and understand reproducible-build evidence.
-
18
Mobile location privacy
Separate cellular, local wireless and application location exposure.
-
19
Magic Wormhole
Assess the code, mailbox and relay used for a one-off file transfer.
-
20
CryptPad
Check encrypted collaboration against the instance and sharing-link trust model.