Secure Communication
Signal, encrypted email, group chats and metadata.
Why E2EE matters
End-to-end encryption (E2EE) means only the people in the conversation can read it — not the service provider, not a network attacker, not a regulator with a subpoena to the provider. For NGOs handling sensitive sources, partners or beneficiaries, this is not optional.
Choose tools by default behavior, not features list
Email realities
Standard email between two random providers is not end-to-end encrypted. Even with TLS in transit, the providers see content. For sensitive content, prefer Signal attachments, Proton Mail-to-Proton Mail, or encrypted archives with a separately-shared password.
Verification and trust
Once, verify "safety numbers" / fingerprints in Signal or your encrypted email tool with each high-risk contact, ideally in person or via another verified channel. If a contact's safety number changes unexpectedly, ask them why before sending sensitive material.
Metadata is real
E2EE protects content. It does not necessarily protect the fact that two accounts communicated at 22:14 from particular IP addresses. For high-risk work, think about who knows you are talking to whom — not just what you say.
The most secure message is the one you decided not to send through the wrong channel.