Skip to content



Freelance journalists use email regularly to communicate with editors, colleagues and sources, as well as family and friends.

As a result, your account will most likely contain a significant amount of data about you and your contacts, so if your email is compromised it could put you, your family, your colleagues and your sources at risk.

Best practice: email

  • Use separate email accounts for personal and work contacts. If your email is hacked then the adversary will only have access to one.
  • Review what information is in your emails. You may have information that, if stolen, could be used to impersonate your identity, including bank details, passport and visa information as well as CVs and covering letters. Think also about any personal information included in emails, including photos and documents. Is there anything that could be used to damage you and your credibility?
  • Create a strong and long password for your accounts or consider using a password manager. See our section on passwords for advice on how to do this.
  • Avoid accessing your email account on public computers, for example, at Internet cafes or in press rooms. If you have no alternative, you should avoid logging into personal accounts. You should also clear your browser history and ensure you log out of - and not just close down - everything.
  • You should always log out of your email account even when you are using your own computer.
  • Some browsers will give you the option to stay logged into your email account. This is convenient, but not secure. Remember to uncheck this option when you are logging in. This is especially important if you are using a shared computer.
  • Be wary of phishing and spear phishing attacks. See our guide on how to protect yourself against these.
  • Consider encrypting your email communications. See our guide on how to do this.

Two-step verification

You can add an extra layer of protection to your email and social media accounts by using two-step verification. Both email servers and social media companies offer this service. The service is not perfect and may not be useful for journalists who travel a lot.

1. Email:
Two-step verification Gmail
Two-step verification Hotmail
Two-step verification Yahoo

2. Social Media:
Two-step verification Facebook
Two-step verification Twitter
Two-step verification Instagram

If you are concerned about account security and you have previously been targeted by an adversary, such as a government, you may want to sign up for Google's Advanced Protection Programme.

We use cookies to give you the best experience of using this website. To accept our cookies, click here or read our Cookie Policy for more information.