Digital Hygiene We Should All Embrace

This third pivotal protection blog dives into digital protection and the hygiene steps we should all embrace to limit exposure to online threats.

Topic introduction

In an increasingly digitised world, online security threats have increased significantly. According to the ‘If I Disappear’: Global Report on Protecting Young People in Civic Space, of the young people consulted, 78% reported facing some form of digital threat. It’s true that digital spaces have changed the game, in some ways for the better: young people are digital architects in mobilising communities around a cause, increasing political and civic awareness, and sculpting creative forms of social engagement. So, while the digital landscape provides ample space for positive activism, it also brings its own set of protection issues: from privacy concerns and surveillance, to hate speech and harassment (that can manifest offline too). Digital protection is no different from physical protection, and in fact, testimonies for the ‘If I Disappear’ report suggest that there is often a connection and reinforcement between online and offline threats and violence.

For example, a young woman from Western Europe, who was criticised and ridiculed online by a far-right politician in her country, asked about the legal steps young people can take to protect themselves online, if there are measures that can be taken against people who openly inspire terrorism. A week later, there was an attack on a church where people with the same religious beliefs as this young woman congregate. When the perpetrator was interviewed about his motives, he noted that he was inspired by the criticism of the far-right politician who attacked the young woman online.

[If I Disappear, 2021]

This is one example of the connection between online and offline attacks. Phishing attempts to obtain sensitive information or data are similarly reinforcing offline consequences, for example in highly politicised and volatile conflict zones, where young activists might be targeted and their online activity might be used/attacked to identify their geographic location.

We need to treat our digital safety in the same way that we treat our physical safety; for example, where we lock our house to protect the valuables inside, we should lock our phones and accounts to protect the valuable data they contain. In this blog post, we offer a digital hygiene checklist to help enhance our digital protection, compiled from expert resources provided below.

What is digital hygiene?

Digital hygiene is all about how we, as digital users, can create a protective environment for our data and devices. The term was first used by Dr. Eduardo Gelbstein in 2006, in his book ‘Good Digital Hygiene’.

Practising good digital hygiene involves:

• Regularly updating and cleaning electronic devices
• Keeping your antivirus up-to-date and live scan on
• Using strong passwords
• Using 2-factor authentication
• Keeping your mailboxes and devices clean and secure
• Identifying phishing attempts
• Protecting your online identity and being aware of your digital footprint

Digital hygiene checklist

1. The basics

Digital hygiene can be extensive and often we don’t have the resources to do ALL of it, so let’s start with

✨ 3 golden rules: if you didn’t look for it, don’t click or download it; if you downloaded and use it, update it; if you no longer use it, remove it
✨ 3 essentials: install antivirus on all devices (Avira/Windows Defender recommended for Windows OS, Malwarebytes recommended for Mac and iPhones); update your systems regularly; secure your accounts

2. Mindset shift

? Securing our data is the same principle as locking our front door, being careful with our valuables (keys, wallet, etc.) and an important part of securing our data is understanding its value in the same way that we understand our physical assets and wellbeing. It’s also important to consider that the steps we take to protect our accounts also protect our online community.

3. Strong passwords

If you have the resources, password keepers are great; they safely store and manage your passwords in an encrypted database.
?️ Passwords are our first line of defence. A strong password is:

• Long (at least 12 digits)
• Unique (only used for ONE account)
• Random (no personal information)
• Diverse (numbers, large and small letters, special characters)
• *A strong passphrase is at least 6 random words long: YamOverUmbroTeaHaggleElbow

Does your password pass the test? Check here: https://apps.cygnius.net/passtest/ [IMPORTANT: Password checkers are good to test password strength, but NEVER submit your real password!]

4. Secure accounts

• Check if your data has been breached: https://haveibeenpwned.com/
• Enable two-factor authentication
• Recognise phishing attempts! Phishing is a fraudulent attempt to spread malware or obtain sensitive information or data, such as usernames, passwords and other sensitive details, by impersonating oneself as a trustworthy entity in a digital communication. Test your phishing awareness: https://phishingquiz.withgoogle.com/ (please use a fake/imaginary email to fill it out). Remember golden rule #1: If you didn’t look for it, don’t click or download it

5. Secure platforms

• Protonmail: secure encrypted email communications
• Signal: secure chats and calls
• Jitsi: secure video conferencing
• Also explore existing protection mechanisms within platforms you’re already using –> Gmail: email confidential mode; WhatsApp: disappearing messages; Phones: security settings

6. Safety on social media

Ways to avoid, minimise, and react to online and digital harassment:

• Limit personal information online (pseudonymisation)
• Separate identities (compartmentalisation)
• Use strong passwords
• Use two-factor authentication
• Protect your accounts and devices
• Save copies of abuse and report it
• HeartMob has great resources on a number of social media platforms! For example, for Instagram, it covers its policies (how Instagram responds to online harassment?), reporting mechanism (How to report a post or profile for abuse?), how to protect your privacy (What can I do if someone is impersonating me on Instagram or if my account is blocked?), how to block, control comments and more…

This list is by no means exhaustive, but a fabulous start to better protecting our digital life.

Resources

Data detox kit: https://datadetoxkit.org/en/home
Digital security guide to safer travel: https://guides.accessnow.org/safer_travel_guide.html
Digital security training for activists & journalists: www.totem-project.org
Security in a box toolkit: https://securityinabox.org/en/
Social media safety guide: www.iheartmob.org/resources/safety_guides
Surveillance self-defence: https://ssd.eff.org/en#index
Access Now provides support to organisations working on digital security, online discrimination, and freedom of speech. For grants, email grants@accessnow.org
Digital Defenders Partnership provides financial support for HRDs, bloggers, journalists, cyber activists, and can conduct security audits. Email ddp@hivos.org
Tech Safety provides support in the context of intimate partner violence, sexual assault, and violence against women.

Pivotal Protection Blog Series, Youth Excel: Our Knowledge, Leading Change

Written by

Charlotte Davidi, Communications & Protection Lead at UNOY Peacebuilders

This article is made possible by the generous support of the American people through the United States Agency for International Development (USAID). The contents are the responsibility of Search for Common Ground and UNOY Peacebuilders and do not necessarily reflect the views of USAID or the United States Government.