protestersguidetosmartphonesecurity-aragon2025

2025-04-03

The Protesters’ Guide to Smartphone Security

by Jonah Aragon

https://www.privacyguides.org/articles/2025/01/23/activists-guide-securing-your-smartphone/

Note
protster
activist
journalist
smartphone
mass surveillance
should you bring a phone at all?
leaving smartphone at home is probably safest
smartphones are critical for coordination, updates, or documentation
burner phone
camera
public wifi
iPhone
Android
smartphone risks at protests
..losing device
..device being confiscated
..service disrution; intentional or unintentional
..targeted surveillance
..mass surveillance
..targeted interference with communication platforms like Twitter, TikTok, Signal, WhatsApp, …
..device identification
..subpoena to cell phone companies to provide records of data near cell towers in the area
law enforcement
IMSI
SIM card
IMEI
properly securing phones, burner or not, is difficult and prone to error
buy burners with cash
do not activate or power on burners at home; locations are tracked by cell towers for at least a year
set up burners in very public places insignificant to your daily life
always keep burner powered off unless being used
purchase burners well in advance
use prepaid solutions without identification
eSIM
use a strong screen lock
6 digit PIN minimum
disable biometric authentication
Face ID
Touch ID
shoulder surfing
surveillance camera
PIN
authorities will use biometric authentication to unlock your phone
5th Amendment
passphrase
hide notifications
minimize stored data
password manager
1Password
Travel Mode (1Password)
disable lock screen actions
avoid external storage
microSD card
external storage on smartphones tend to not use as good of cryptographic standards as the phone itself
patch/update your phone
Cellebrite
spyware
Google Pixel
use hardened alternative operating systems
confiscation
disable AirDrop
AirDrop
lock down network settings.
stingray
2G, 3G, 4G, 5G
Privacy Cell
F-Droid, Google Play
use airplane mode
airplane mode
carrier
use public wifi
MAC address
WiFi
access point
cell tower
VPN
disable location services
be mindful of apps that you share location data with
disable location services entirely while at the event
check your keyboard; some may sniff keystrokes
GrapheneOS
AOSP
Gboard (Google Keyboard)
Input Method Editor
Use Signal
Facebook Messenger
end-to-end encryption
iMessage
protect access to important information
..bring extra batteries or power packs
..sharpie emergency contact, lawyers phone numbers on your body in case of arrest or injury
..ensure you will not hit a data cap at the event
check camera settings
..shutter sound
..flash
back up your data
iCloud
Advanced Data Protection (iCloud)
keep device locked
have a backup communication network
..internet blackouts
..Briar (mesh mode comms)
Bluetooth
Meshtastic
radio: walkie talkies (typically unencrypted)
if your phone was taken
..remote wipe
..find your device
..beware of legal consequences; wiping evidence is destruction of evidence in many jurisdictions
..consult with an attorney
be mindful of others
..dont post people’s faces to social media
..remove metadata from images
..some tools layer edits and blurring/scribbling over faces can be reversed

Links to this note