Prepare for a Direct Action
This guide will show you how to protect yourself if you need to bring your phone to a direct action or nonviolent civil disobedience action.
This guide is written for the following situation:
This is an action that is centrally organized enough that you can set agreements around digital security that everyone will follow.
You have encouraged most people attending the action to not bring their phone
Some people still need their phones to coordinate your deployment.
Once deployed, you don't need your phones anymore and can turn them off.
The risk of arrest is high, or you are trying to be arrested.
You expect the police may try to use phone-cracking tools to access the data on the phones they confiscate.
You are not concerned with surveillance to and from the action.
If any of these don't apply to your action, you may need to take more precautions. Check out the protest enhanced phone security section or consider bringing a secondary phone (sometimes called a "burner phone").
Why does this matter?
We know social movements have been surveilled, infiltrated, discredited, and obstructed by government agents (local cops, FBI, CIA, NSA, etc) for decades. The rise of technology means we’re all being tracked and profiled (even if you've never been arrested).
But there are actions we can take to protect our movements! This guide offers some simple things we can all do before and during a protest/action to keep ourselves and the most vulnerable folks in our movements safer.
Threats to consider
Phone seizure and searching - If arrested, police can try to break into your phone to access your messages, photos, and other private information to use as evidence
Monitoring of communications - Police can intercept regular SMS texts and calls to gather info about protest plans and participants
Location tracking - Your phone constantly broadcasts signals that can reveal your location and prove you were at a protest
Mapping activist networks - By getting data from one person's phone, police can identify entire communities of activists and organizers connected to them
Leading up to the action
If you have very sensitive data on your phone or are at high-risk of being targeted by the cops, we recommend following all of the steps in this guide using a secondary phone.
Use Signal to communicate (texts/calls) for protests/actions
End-to-end encrypted messages protect your privacy from surveillance, while regular texts can be intercepted and read.
How to install and use signal
Install Signal on your phone
Message or call your existing contacts using their phone number or ask someone for their signal username. They must have Signal installed also.
Check out our Signal Checklist for detailed instructions on configuring Signal to be as secure as possible.
Update your phone to the latest version of its operating system
This helps protect you from hackers, spyware, and passcode-cracking tools.
The cops often use tools that rely on weaknesses in your operating system that get fixed in the latest versions.
How to update your phone's operating system
On iPhone: Go to Settings > General > Software Update > If you see an option to update, tap Install now
On Android: Settings > System > System update (or Software update) > Tap Check for update or Download and install if an update is available.
If your operating system is not up to date, many of the other recommendations in this guide will not protect your data or communications.
Disable face/fingerprint unlock (biometric)
You have stronger legal standing with a passcode than with biometric unlock. Cops can try to force you to unlock with biometrics.
How to disable face/fingerprint unlock
On iPhone: Settings > Face ID & Passcode > Disable "Use Face ID for iPhone Unlock" (you can leave the rest enabled)
On Android: Settings > Lock Screen (or Security) > Biometrics and Security > Disable both "Face Recognition" and "Fingerprint Unlock" for unlocking your phone
Caveat: Face and fingerprint unlock let you use stronger passwords without typing them all the time. If you have to choose, it's better to have a longer passcode than to turn off face/fingerprint unlock.
iPhone locking tip: If you leave face/fingerprint unlock on, you can temporarily disable pressing the side button 5 times. This will make it so the passcode is required for the next unlock.
iPhone camera tip: You can take photos without unlocking your phone by swiping left on your home screen. (In case you get arrested while filming.)
Set your phone passcode to 8 to 10 random digits
It takes years for cops to crack an 8-digit random passcode. They can probably guess your current passcode in less than 5 minutes with automated tools.
How to change your passcode
Generate a random 8 to 10-digit passcode using this random passcode generator. (Don't make one up yourself—humans are bad at choosing randomly!)
Change your passcode:
On iPhone: Settings > Face ID & Passcode > Change Passcode > Passcode Options > Custom Numeric Code
On Android: Settings > Security > Screen Lock > Enter Current Lock > PIN/Password > Enter a Passcode
Practice the new passcode at least 10 times in a row right now so are more likely to remember it. (Disabling biometrics will force a passcode request every time you lock the phone.)
Write your new passcode on paper and keep it somewhere safe at home until you've memorized it. Then destroy it after 2–3 weeks. Setting a reminder on your phone can help.
How long does it take to crack a passcode?
Type
| Time it takes to crack (average)
| Example
|
|---|---|---|
6-digit easy-to-guess pattern
| Less than 24 hours to crack
| 333666 (common pattern) 110585 (date pattern for Nov 5, 1982) |
6-digit random code
| 200 days to crack
| 238253
|
8-digit random code
| 40+ years to crack
| 34780026
|
Note: These times only apply to phones. Computers can be cracked much more quickly, and need much stronger passwords.
Sources: The estimates in the table above assume real-world observed attempts/second from police forensic hacking tools. If you need more security, use a 10-digit passcode, which will protect you even under the highest-possible cracking scenarios. See the sources linked in the passcode FAQ here.
Immediately before the action
Disable GPS location tracking until you are home (Airplane Mode is not enough!)
This keeps your location more private and protect you from surviellance.
For maximum privacy, disable location tracking before you leave for the action and use paper maps to get to your destination. But at the very least, make sure you disable location tracking a few blocks away from the action.
How to disable GPS location tracking
Disable location tracking
On iPhone: Settings > Privacy & Security > Disable "Location Services" (Quicker shortcut: Say to Siri "Disable location tracking")
On Android: Settings > Location > Disable "Use Location"
Make sure to print maps or save offline maps use on your phone.
If you have any smart watches or bluetooth "lost my keys/wallet" trackers, make sure to leave them at home or disable tracking there as well.
Other tips:
It's also important to make sure your photos app doesn’t have location permissions, otherwise all your photos/videos will have a location attached.
It's also good to disable location tracking permissions for as many apps as possible.
Disable Bluetooth and Wi-Fi
Cops can use tracking tools to identify who is in an area based on the Bluetooth and Wi-Fi signals your phone is emitting.
If you're brining your phone, we assume you're using it to communicate and need a cell connection, and that turning on airplane mode probably won't work for you. Given that, it's best to disable Bluetooth and Wi-Fi to reduce tracking.
iPhone Warning: Swiping down and using "control center" to disable Bluetooth/Wi-Fi doesn't actually turn it off. It just disconnects you from current networks, but it is still transmitting signals that can be tracked. To fully turn it off, you need to follow the instructions below.
How to disable Bluetooth and Wi-Fi
On iPhone:
Settings > Bluetooth > Disable Bluetooth
Settings > Wi-Fi > Disable Wi-Fi
On Android:
Settings → Bluetooth → Advanced (or three-dot menu) → Disable Bluetooth and turn off "Bluetooth scanning"
Settings → Wi-Fi → Advanced (or three-dot menu) → Disable Wi-Fi and turn off "Scanning" or "WiFi scanning"
Leave Signal groups that might put others at risk
This helps protect your network if your phone is confiscated.
If your phone is confiscated by law enforcement, one of the biggest risks is exposing your entire network. Even if people aren't using their real name on their Signal account, there is still a unique ID behind every Signal username. And the cops can use this to correlate someone's identity across many seized devices.
You need to both leave AND delete the group:
If you only leave the group, old messages stay on your phone as well as the history of who was in the group.
If you only delete the group, new messages will still come through and the thread re-appears.
How to leave AND delete a Signal group
Make a plan to re-join afterwards: When headed into a situation with possible arrest, make a list on paper at home or somewhere safe of all the groups and who you need to message who can re-add you after the action or border-crossing is complete.
To leave the group: Signal > [Group] > Tap the group icon at the top > Click “Leave group” at the bottom.
If you're the only admin, you have to either remove all members or assign another admin.
To delete the group from your phone: Signal > Main screen > Swipe left on the thread > "Delete.”
This won't delete it for anyone else.
Security hygiene tips:
Set a recurring remind to clean up your Signal thread every 3 months.
Make sure you take note of which groups you are leaving and who you can ask to re-add you after the action.
Note: If you find this process very annoying and cumbersome (because it is!), that's another good reason to use a secondary phone for actions. That phone would only ever be in the one or two groups needed to pull of the action that day.
During the action
ImportantFully power off your phone immediately after the action starts
When your phone is fully powered off, it's more secure against data extraction by the cops. The data is encrypted until after you enter your passcode for the first time.
Therefore, the number one thing you can do to protect your data is turn your phone off as soon as you no longer need it. This is usually once you're at the location and the action has begun.
How to power off your phone
On iPhone: Press the screen lock button on the side on the side 5 times to quickly bring up the "Power off" option.
On Android: Press and hold the power button until the power menu appears, then tap "Power off"Practice this a number of times so you can do it quickly.
During the action, remind everyone nearby who brought a phone to power theirs off at the same time you do.
If possible, hand your phone to someone not risking arrest
Not having your phone on you when you are detained is the best way to protect your data and the movement.
If you are in a situation where the arrest risk seems to be increasing, there may be people who choose to leave the scene and not take that risk. If there is someone you trust in that group, consider handing them your phone. This isn't always possible, but it is good to do when you can.
Ideally you would identify this person in advance and make a plan for how you will coordinate to get the phone back.
Make sure you have brought essential items with you like your ID card and credit card or cash, so you can commute back to the person who has your phone.
Other protest safety tips (optional)
Follow our advanced Signal configuration checklist
How to secure signal
Complete all the steps in our Signal Checklist to make signal more secure and private.
Pick a phone number you'll call if you're arrested. Write it on your body in sharpie.
This is the number you will call if you’re arrested that can support you from the outside. This is relevant for higher risk situations.
How to select a phone number to call if you're arrested
Decide who to call if you're arrested:
If you're not sure whether there is an active jail support hotline in your area, pick someone as your emergency contact and use their phone number. This can be a friend or trusted comrade who can help you get legal support. Make sure to get their consent in advance.
If you're doing a higher risk action, the organizers may have already established a specific legal hotline number for you to use.
If you're in a larger city, there may be a National Lawyers Guild jail support hotline that is staffed to support activists. Check out the list of NLG jail support hotline numbers here. We only recommend using a hotline if you've submitted a jail support form in advance, so they can call your contacts for you while simultaneously getting you support.
Write the legal hotline number on your body in sharpie where it can’t easily be rubbed off (upper arm, leg, torso). Call that number if you’re arrested and given a phone call to use.
Dress to blend in, consider hiding your face if you want more privacy
Cops can use facial recognition technology to identify you from security camera footage. Our adversaries often use “reverse image search” tools to find you and harass you online.
How to blend in
Wear neutral/dark colored clothing that is hard to identify.
Cover tattoos or anything identifiable that would cause you to stand out in photos/videos.
Wear a KN-95 mask for both COVID safety and additional anonymity.
Plan your trip with surveillance in mind
Think through the level of risk you’re taking and consider the level of effort you want to put in to avoiding surveillance.
Some tracking to be mindful of:
Automated License Plate Readers: These are everywhere, but especially prevalent at toll booths and bridges.
Surveillance cameras: Cameras exist inside and outside most businesses/stores/etc and on public transportation. Also think about consumer cameras that exist on things like smart doorbells.
Transit Card: If you are taking public transit using a transit card, this creates a digital trail. Consider paying in cash or buying a single use card when traveling to a protest. (Also: Most public transit always have a lot of surveillance cameras.)
Credit Card: If you use your credit card or tap to pay, you are creating a digital trail that places you at a certain location at a specific time. Consider using cash when possible to increase privacy.
Rideshare apps (Uber/Lyft): Using a Ride Share App to arrive at the protest will create a clear record of your movements and location.
Learn More
Electronic Frontier Foundation - Attending a Protest guide (updated 2024)
CLDC - Expect the Unexpected: Secure Your Phone Against Confiscation or Loss (2021)
Freedom of the Press Foundation - What to do if your phone is seized by the police (2016)
Freedom of the Press Foundation - Your smartphone and you: A handbook to modern mobile maintenance (2024)
The Markup - How Do I Prepare My Phone for a Protest? (2024)
Have Questions?
Let us know if you have questions or feedback so we can make these guides as useful as possible.