How to send tips and information securely to ThinkProgress

Think you have the next big story? Notice something wrong? Let us know!

For general inquiries, shoot us a line here: general@thinkprogress.org

For tips and leaks, read below!

What makes a good tip

Good tips can take a number of forms, but often involve information that would not be readily available to a journalist or an outside observer. This includes more traditional leaks involving proof of illegal activity by an individual, such as a businessperson, elected official, law enforcement head, political action group, medical professional, influential faith leader, celebrity, or public figure. But leaks and tips can also include proof of systemic malpractice, wrongdoing, or unethical behavior by larger entities, such as companies, government agencies, nonprofit organizations, hospitals, prisons, or public works systems, among many groups.

What’s more, sometimes good tips just point to stories or policy concerns that other news outlets might miss or ignore but deserve attention and scrutiny.

A note about anonymity

Leaks and tips are rooted in trust. As such, ThinkProgress reporters frequently agree to protect the identity of sources when they request it. We understand individuals leaking sensitive information may be putting themselves or their jobs at risk, so if we agree to keep you anonymous, we will strive to protect you and will work to prevent our organization or our reporters from being forced to disclose the identity of any sources.

If you choose to remain completely anonymous from the start, however, we suggest sending us information via physical mail.

Basic suggestions for protecting your identity

When sending ThinkProgress sensitive information over the internet, we recommend using public WiFi, such as a coffee shop or cafe. Even more secure is the use of the Tor Browser, which makes it difficult to track your location, as well as booting off a USB/thumb drive that contains TAILS, an operating system that leaves no trace of your actions on your computer.

Other best practices include creating a throwaway email account and avoiding locations with security cameras. We encourage you not to use your work email or phone. If mailing information or documents, do not use a post office near your employer.

Also, if you are attempting to share internal documents from a government agency or another organization, be aware that some intranets track when certain documents are accessed or downloaded, and by whom. In addition, many laser printers include hard-to-see yellow “tracking dots” that indicate when a color document was printed or the serial number of the printer itself.

Other methods include taking screenshots of a document instead of printing it, or taking a photograph with another device.

Ways to send information securely to ThinkProgress


Physical mail
One the most secure options for sending information is snail mail. Officials would require a warrant to intercept and open it in transit.

When mailing to us, we recommend using a sidewalk postal box away from home or work, not including a return address, and avoiding licking any stamps or envelopes you use.

Feel free to address mail to a specific reporter. Send paper documents, or digital files (on a thumb drive or other physical media) to:

P.O. Box 34716, Washington, D.C. 20043

Signal
Signal is a free, open source messaging app with “end-to-end encryption,” meaning only the sender and the recipient can read messages, photos, videos, voice messages, documents, and calls — all of which can be sent by the app. The program logs no metadata on the communications themselves, and retains only three pieces of information: your phone number, when you registered with the service, and the last time you were active. Signal messages can also be set to “self-destruct”: after the recipient sees the message, the program can delete it after a set period of time. It does not provide voicemail, however, so it can be used for texts, attachments, and live calls.

Add our Signal number: 202–684–1030

WhatsApp
WhatsApp is a free messaging app owned by Facebook that, like Signal, allows full end-to-end encryption when sending messages, photos, videos, voicemails (unlike Signal), documents, and calls. You can limit some account information, but WhatsApp does record phone numbers involved messages, as well as other metadata, such as message timestamps.

Add our WhatsApp number: 202–684–1030

Threema
Threema is another messaging app featuring end-to-end encryption. Although it is neither free nor open source, it has won devoted users in Europe for its various features. In addition to messages, users can send images, videos, locations, voice messages and files.

Add our Threema ID: FKUDWXYZ

Peerio
Peerio is a free, end-to-end encrypted messaging app that provides fully encrypted cloud storage for files. It is useful for larger file transfers, as Peerio allows users to share files as large as 400 megabytes.

Add our Peerio username: TPtips

Encrypted email
You can send ThinkProgress encrypted email using using Pretty Good Privacy (PGP) software. There are number of popular services that help you encrypt your emails, such as the Mailvelope Chrome/Firefox browser extension and GPGTools.

Although PGP encrypts the contents of any email you send, it does not encrypt additional metadata such as the sender, recipient, subject or information about when the email was sent (this information will be available to your email provider).

Public Key: Download the file here/link to text here
Fingerprint: 4171 299A 9C59 0CA4 384D 2B9E 194C 5002 F641 183C
Email: thinkprogresstips@gmail.com