Your Phone Can Protect You, Or Expose You
Here’s how to lock down your device before showing up.
📌 NOTE FOR NEW READERS: This is an independent Substack covering 50501, No Kings, and the broader pro-democracy and civic-action ecosystem. Subscribe to join our community and to keep us posting.
When you show up to a protest, your phone is the most sensitive object you carry.
Hardening your device is what security professionals call OPSEC, Operational Security, but here, we also define it as community care.
Protecting your digital footprint is an act of solidarity that keeps your friends, family, and organizers safe from being “stitched together” into a map of movement activity. You don’t need to be a hacker to be safe. You just need to raise the “cost” of watching you so high that surveillance systems look for an easier target. You don’t have to disappear, you just have to stop making it easy for them.
Phones are tracking devices by design. However, you can take back control without throwing your phone in a lake. This guide walks through the essential “locks” for your device like strong passcodes, revoking app permissions, and using encrypted messaging for safer organizing.
Protest Morning Checklist
(*You can Screenshot and Save This for Later)
A quick-action guide to use before you leave the house for a protest.
[ ] Update Your Software: Tapping “update” patches the security holes that forensic tools often use to get in.
[ ] Back It Up: Use Data Protection (iOS) or zero-knowledge backups (Android) so your data is safe even if the device is lost or seized.
[ ] Set a 6+ Digit PIN: Move beyond basic patterns or four-digit codes. A long, random passphrase is harder for a machine to guess than a short, clever password.
[ ] Disable Biometrics: Turn off FaceID or TouchID. In many jurisdictions, you have stronger legal footing to refuse a passcode than you do to prevent someone from physically holding the phone to your face.
[ ] Prep Your Signal (Or other encrypting message app): Enable Registration Lock so your account can’t be hijacked, and turn on Disappearing Messages to keep your history tidy and safe. (Note: Recipients can still take a photo of a disappearing message with a second camera).
[ ] Check App Permissions: Revoke “Location,” “Microphone,” and “Contacts” from any app that doesn’t strictly need them.
[ ] Go Offline: Download Offline Maps and consider Airplane Mode. (Note: Apps can still store your GPS location and transmit it the moment you reconnect to the internet).
[ ] Know Your Rights: Police generally need a warrant to search the contents of your phone, but they may still seize the device during a lawful arrest.
Threat Modeling: Asking Questions
Security experts use the term “threat modeling,” basically just means asking yourself: Who are you protecting yourself from, and what would it cost you if they got in?
The answer looks different for everyone and no it’s not usually malicious or because you’re breaking any laws…
For example:
A nurse worried about an abusive ex has a different threat model than a journalist covering an ICE raid, who has a different one than a retiree who just doesn’t want a scammer draining their savings. None of those people are wrong, they’re just protecting against different things.
The Lockdown: Immediate Steps for the Street
Your phone holds your messages, your location history, and a running diary of your life. When you’re in the thick of an action, treat it like the sensitive object it is.
The Biometric Trap: Under current U.S. law, which is still in flux, using a biometric scan like your face or fingerprint currently offers less legal protection than a memorized passcode. In some cases, officers could physically compel you to unlock a device with your face or finger, whereas a passcode kept in your head has stronger Fifth Amendment footing against compelled disclosure. So before you arrive, disable biometrics. On an iPhone, holding the power button and a volume button until the power-off screen appears immediately forces a passcode on the next unlock. On Android, use the “Lockdown” option in your power menu.
The Connectivity Tradeoff: Airplane Mode stops your phone from constantly pinging cell towers, but it isn’t bullet proof. Even in Airplane Mode, apps can still store your GPS location and transmit that data the moment you reconnect to the internet. To truly stop location tracking, you must power the phone off completely.
Forensic Tools: If a device is seized, law enforcement may use forensic tools like Cellebrite to try to extract images, contacts, and location history. These tools are most successful on older or unencrypted devices. This is why keeping your software updated is vital, updates often patch the security holes these tools use to get in.
Lockdown Mode (Apple): Apple’s “Lockdown Mode” is an optional, extreme protection that blocks most message attachments and strips location data from shared photos. Be aware that it will cause your phone to not function normally (e.g., blocking some web features).
The Foundation: Two Deadbolts for Every Door
If you do nothing more, take care of these two things right now. It takes just a few minutes and raises the “cost” of attacking you significantly.
Use a Password Manager: Reusing passwords is like having a master key for your house, your car, and your bank. If one site gets hacked, attackers will try that leaked password everywhere else. Use a manager like Bitwarden (which is free and open-source) to give every account a unique, long passphrase.
Passphrases over Passwords: A long, silly string of words like
correct-battery-horse-stapleis much harder for a machine, hacker, or AI to guess than a short, clever password with symbols. Length is what actually wears down the hackers.Two-Factor Authentication (2FA): This adds the second lock so that even if your password is stolen, they still need a secondary code from you. Pro-tip: Codes sent via text message can be hijacked through “SIM swapping”. Whenever possible, use an authenticator app instead.
Encrypted Messaging: Private Conversations
Regular texts and many chat apps can be read by your carrier or the company running the app. Signal has been a useful standard because it scrambles your messages so only you and the recipient can read them.
Signal is a nonprofit that collects almost no metadata about you.
In past court cases, the only data Signal could provide was the date a user registered and the last date they connected. To make your Signal even tougher:
Registration Lock: Set a PIN so no one can hijack your number to a new device.
Usernames: You can now connect with people on Signal without sharing your phone number at all.
Helpful Note: Encryption protects a message while it’s traveling. It can’t protect a message if someone is holding your unlocked phone. Furthermore, disappearing messages don’t prevent a recipient from taking a photo of their screen with a second camera or screenshots.
The Data Broker Audit: Cleaning the Bargain Bin
There’s a quiet industry that buys and resells your home address, phone number, and relatives’ names on sites like Spokeo or Whitepages. This is often where harassers start their search. You can opt out of these one by one, which is tedious but effective so that you can’t be found through them. Organizations like EFF (Surveillance Self-Defense) publish free, regularly updated guides to walk you through the process.
What’s NOT worth your anxiety:
Digital safety advice can easily spiral into anxiety.
You don’t need to have a perfect digital footprint. Perfect security doesn’t exist for anyone. You’re just aiming to be a harder target than the next person.
You do don’t need to buy expensive items or software. The most powerful tools like Signal, password managers, and 2FA are free.
You don’t need to do it all today. Start small and work your way up. Every lock you set is a small, deliberate refusal to be an easy target.
Which part of phone safety feels the most confusing: Signal, location settings, passwords, biometrics, or data brokers?
And if you have a phone-safety tip that helped you, please share it in the comments so someone else can use it too!
Resources to Learn More
Digital safety for protests
Electronic Frontier Foundation: Attending a Protest
Know your rights at a protest
ACLU: Protesters’ Rights
Signal privacy tools
Signal: Disappearing Messages
Signal: Usernames & Phone Number Privacy
Phone security settings
Apple: Lockdown Mode
Apple: Location Services & Privacy
Google: Android Location Settings
Personal security checklist
Consumer Reports: Security Planner
Support for people at higher risk
Access Now: Digital Security Helpline
Much needed practical advice in our increasing surveillance state! I took a screenshot as suggested for quick reference.
Proton, which is a Swiss company, provides end-to-end encryption and is the most secure email out there. They also have other secure products which are alternatives to Google.
Thanks for all these tips.