Why Digital Security Matters for Us
Let's be real: Black people face unique digital security risks. From targeted harassment campaigns to doxxing attacks on activists, from disproportionate surveillance to account theft schemes targeting our communities—we have specific reasons to take online safety seriously.
This isn't about paranoia. It's about protection. The same way we lock our doors and watch our surroundings, we need to secure our digital lives.
This guide covers practical steps everyone can take, with special attention to the risks our community faces.
The Fundamentals: Protecting Your Accounts
Password Security
Your passwords are the keys to your digital life. Most people's passwords are embarrassingly easy to crack.
Use Strong, Unique Passwords: Every account should have its own password that's at least 16 characters with a mix of letters, numbers, and symbols. "LetsGoHoward2025!" is better than "password123"—but a random string is better still.
Use a Password Manager: You can't remember 50 unique strong passwords. You're not supposed to. Use a password manager like 1Password, Bitwarden, or Dashlane to generate and store them securely.
Never Reuse Passwords: If one account gets breached and you've used that password elsewhere, all those accounts are now vulnerable.
Two-Factor Authentication (2FA)
Two-factor authentication adds a second layer of security beyond your password. Enable it on every account that offers it—especially email, social media, and financial accounts.
Best options (in order):
- Hardware security keys (like YubiKey)
- Authentication apps (like Google Authenticator or Authy)
- SMS codes (better than nothing, but vulnerable to SIM-swapping)
Secure Your Email
Your email is the master key to your digital life. Most password resets go through email. Lose control of your email, and you can lose control of everything.
- Use a strong, unique password
- Enable the strongest 2FA available
- Consider a privacy-focused email provider like ProtonMail for sensitive communications
Protecting Your Privacy
What You Share Publicly
Once something is on the internet, assume it's permanent and public, regardless of privacy settings. Before posting, ask:
- Would I be comfortable with anyone seeing this?
- Does this reveal information that could be used against me?
- Could this be used to answer security questions or guess passwords?
Be especially careful with:
- Your full birth date
- Your address or frequent locations
- Information about family members
- Details about your workplace
- Photos with metadata that reveals location
Location Privacy
Your location data is more revealing than you might think. Consider:
- Disable location services for apps that don't need it
- Don't check in at home or frequently visited locations
- Be careful about photos that reveal where you live, work, or spend time
- Review location history in your Google/Apple account
Privacy Settings
Actually review the privacy settings on your accounts. Most platforms default to sharing more than necessary. Key things to check:
- Who can see your posts
- Who can tag you or add you to groups
- What data is being collected and shared
- Which third-party apps have access
Specific Risks for Black Users
Targeted Harassment
Black users—especially those with visibility on social media—face disproportionate harassment. Protection strategies:
Keep Personal Information Private: Don't make it easy to be doxxed. Separate your public persona from personal details.
Document Everything: If you're being harassed, screenshot and save evidence with dates and URLs.
Use Block and Mute Liberally: You're under no obligation to engage with bad-faith actors.
Know How to Report: Understand the reporting features on each platform you use.
Have a Safety Network: Trusted friends who can monitor situations, report content, and provide support.
Doxxing Prevention
Doxxing—publishing someone's private information to facilitate harassment—is a real threat, especially for activists and outspoken community members.
Reduce Your Digital Footprint:
- Google yourself and see what's publicly available
- Request removal of personal information from data broker sites
- Use a PO Box or registered agent for anything that becomes public record
- Consider using a pseudonym for online activities when appropriate
Separate Your Identities:
- Don't link your public social media to accounts that contain private information
- Use different email addresses for different purposes
- Be careful about usernames that appear across multiple platforms
Surveillance Considerations
Black activists and organizers have historically been—and continue to be—targets of surveillance. If you're involved in organizing:
- Use end-to-end encrypted messaging apps like Signal for sensitive communications
- Be aware that social media is monitored
- Understand that phones can be tracking devices
- Consider operational security practices for in-person activities
Protecting Against Common Attacks
Phishing
Phishing attacks try to trick you into revealing passwords or personal information. They're getting more sophisticated.
Red Flags:
- Urgent requests requiring immediate action
- Requests for passwords or personal information
- Links that don't match the supposed sender
- Unexpected attachments
- Poor grammar or design (though this is less reliable now)
Protection:
- Don't click links in unexpected messages
- Go directly to websites rather than clicking email links
- Verify requests through alternative channels
- When in doubt, don't respond
SIM Swapping
SIM swapping is when attackers convince your phone carrier to transfer your number to their SIM card, allowing them to receive your 2FA codes and reset your passwords.
Protection:
- Add a PIN to your carrier account
- Use authentication apps instead of SMS for 2FA
- Be wary of unsolicited calls from your "carrier"
- Consider freezing your SIM with your carrier
Social Engineering
Many attacks rely on manipulating people rather than hacking technology. Be skeptical of:
- People claiming urgency or authority
- Requests that bypass normal procedures
- Offers that seem too good to be true
- Unexpected contact from "customer service"
Creating a Security Routine
Security isn't a one-time thing—it's ongoing practice.
Monthly:
- Review account security settings
- Check for data breaches at haveibeenpwned.com
- Review what apps have access to your accounts
When Something Changes:
- After a breakup, change shared passwords and review access
- After leaving a job, update any accounts associated with work
- After a security incident, reset passwords and review all accounts
Regularly:
- Update devices and apps promptly
- Be alert for unusual account activity
- Practice safe browsing habits
Teaching Our Community
Digital security knowledge should be shared:
- Help older family members secure their accounts
- Talk to young people about privacy and permanence
- Share this information in your communities
- Be a resource for those who need help
The Balance
Being cautious doesn't mean being paranoid or abandoning online life entirely. The goal is informed, intentional digital participation:
- Know the risks you face
- Take reasonable precautions
- Make conscious choices about what you share
- Have plans for when things go wrong
You can be present online, build community, and express yourself while still protecting your safety and privacy. It just takes some knowledge and ongoing attention.
Stay safe. Stay secure. Stay you.
What security questions do you have? Let's discuss in the community.
