Some of the most important investigative stories start with tips from sources who have firsthand knowledge or access to revealing documents. News organizations rely on these confidential submissions to uncover information about companies, government agencies, and the impact of technology on daily life. If you have encountered something the public should know about, your tip can be the starting point for a critical story. This guide explains how to send tips securely using email, the encrypted messaging app Signal, and other methods, while protecting your identity from reprisals.

Why Secure Tipping Matters

When you share sensitive information with journalists, you may be at risk of retaliation from employers, governments, or other powerful entities. Secure communication channels help reduce that risk. Encrypted tools ensure that only the intended recipient can read your message, and they limit the metadata that could link you to the tip. Using personal devices and networks instead of work equipment further protects your anonymity. Best practices for secure tipping have been developed by organizations such as the Freedom of the Press Foundation, which provides guidelines for journalists and sources alike.

Email Tips

Email remains the simplest way to reach a newsroom. Most news organizations have a dedicated tips address, such as tips@newsorg.com. However, standard email is not encrypted end-to-end, meaning it could be intercepted or accessed by third parties. For basic tips that do not involve high risk, standard email may be acceptable. But if you are concerned about reprisals, you should take extra precautions. Never use your work email, work Wi-Fi, or work device when sending a tip. If possible, create a new, anonymous email account using a service like ProtonMail, which offers end-to-end encryption. When composing your message, avoid including identifying details unless necessary. Attach supporting documents only if they are essential, and consider encrypting files with a password before sending.

Signal for Encrypted Communication

Signal is a free messaging app that provides end-to-end encryption for text messages, voice calls, and file transfers. It is widely recommended by security experts for confidential communication. Signal stores your phone number and the last time you accessed the app, but it does not store the content of your messages or who you are communicating with. This makes it significantly more private than standard SMS or many other messaging apps. To use Signal for tipping, follow these steps:

• Download the Signal app from your device’s official app store onto a personal phone, not a work device.
• Register with your personal phone number. Signal requires a phone number for registration, but you can use a secondary number if you have one.
• Find the Signal username or phone number of the journalist or news organization’s tips account. This information is often listed on the newsroom staff page or in the tip guidelines.
• In Signal, add the contact to your address book (if required by your version of the app). You can delete the contact after the conversation has started.
• Send your message along with any encrypted documents or photos. Be aware that Signal’s security features may be undermined if the person you are communicating with does not follow best practices.
• After the conversation, you may want to enable disappearing messages to reduce the digital footprint.

The Freedom of the Press Foundation offers additional guidance for hardening Signal’s settings, such as disabling notification previews and using a PIN to secure your account. It is important to note that Signal stores your registration phone number and last online time, so if law enforcement compels Signal to provide that data, it could theoretically be used to identify you. Therefore, using a burner phone or a secondary number is advisable for highly sensitive tips.

Other Secure Methods

Beyond email and Signal, there are other encrypted communication tools that sources can use. ProtonMail offers end-to-end encrypted email and is based in Switzerland, which has strong privacy laws. For sharing large files, services like OnionShare allow you to send files anonymously over the Tor network. Some news organizations provide a secure web form, often accessible only through the Tor browser, which submits tips without logging IP addresses. Additionally, encrypted messaging apps such as Wire or Threema offer similar protections to Signal but may be less commonly used by journalists. Before using any tool, check the newsroom’s tip page for their preferred methods and any specific instructions.

What Makes a Good Tip

A tip is most valuable when it includes firsthand experience or direct evidence. Journalists are more likely to pursue a story if you can provide documents, photographs, audio recordings, or detailed accounts that can be verified. Hunches or secondhand rumors are less useful. When submitting a tip, clearly explain what you know, how you know it, and why you believe it is in the public interest. If you have sensitive documents, describe their contents before sending them, so the newsroom can assess their relevance. Always prioritize your safety: if you are at risk of reprisals, do not use any device or network connected to your employer. Consider using public Wi-Fi and a VPN, but remember that VPNs can also be tracked. For maximum security, use a burner device and connect through Tor.

Legal Protections for Sources

Many countries have shield laws that protect journalists from being compelled to reveal their sources. However, these protections vary widely and do not always extend to whistleblowers. If you are considering leaking classified or proprietary information, consult with an attorney who specializes in whistleblower law. Some news organizations have legal teams that can advise you, but they represent the journalists, not the source. Using secure communication does not guarantee anonymity if you are investigated, but it significantly reduces the likelihood of interception. Remember that the best protection is to never reveal your identity in the first place.

This guide is based on best practices recommended by the Freedom of the Press Foundation and other security advocates. The page serving this information is delivered over HTTPS without third-party analytics or ad trackers to ensure that your reading of this guide is not monitored. By following these steps, you can contribute to important journalism while safeguarding your personal security.

Source:The Verge News