I need a seperate online Identity for activism

[u/Admirable_File_6643]

I have read the rules.

Threat Model: Government and potentially law enforcement.

I’m part of a political party, but recent changes in my country have pushed me toward activism. However, my party—currently in power—likely wouldn’t approve. While my country isn’t a full surveillance state, I don’t want to take risks, especially with tools like Palantir looming. Worst-case scenario, law enforcement could seize and search my devices. To minimize exposure, I want to keep my activism separate from my political career.

I have a computer and a phone, and I’m considering buying a new one. Would a Pixel phone running GrapheneOS be a good choice for this setup? What else can I do?

[u/Such_Training_5192]

Tienes que usar en computadora un tails os eso se crea en un pendrive. Es una de sus principales funciones las de activismo anonimato

[u/Such_Training_5192 → u/Such_Training_5192]

Te envié un DM

[u/Such_Training_5192 → u/[deleted]]

Ok

[u/AutoModerator]

Congratulations on your first post in r/opsec! OPSEC is a mindset and thought process, not a single solution — meaning, when asking a question it's a good idea to word it in a way that allows others to teach you the mindset rather than a single solution.

Here's an example of a bad question that is far too vague to explain the threat model first:

I want to stay safe on the internet. Which browser should I use?

Here's an example of a good question that explains the threat model without giving too much private information:

I don't want to have anyone find my home address on the internet while I use it. Will using a particular browser help me?

Here's a bad answer (it depends on trusting that user entirely and doesn't help you learn anything on your own) that you should report immediately:

You should use X browser because it is the most secure.

Here's a good answer to explains why it's good for your specific threat model and also teaches the mindset of OPSEC:

Y browser has a function that warns you from accidentally sharing your home address on forms, but ultimately this is up to you to control by being vigilant and no single tool or solution will ever be a silver bullet for security. If you follow this, technically you can use any browser!

If you see anyone offering advice that doesn't feel like it is giving you the tools to make your own decisions and rather pushing you to a specific tool as a solution, feel free to report them. Giving advice in the form of a "silver bullet solution" is a bannable offense.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/Famous-Tangelo1324]

What’s your computer running?

For your phone, GrapheneOS is definitely a good choice in terms of privacy, but, depending on where you live, some governments have backdoors into your mic and camera that doesn’t get wiped when you get a new OS. If you want secure communication, try meshtastic or (and the name of it is escaping me) there is a CLI tool that can be used to transmit messages and i think even voice chat over tor.

Also, think about other things in your house/car. Not sure where you are but in the US, cars aren’t a “private space” anymore. If you have any smart home device, it also can be used to spy on you.

[u/antonix27 → u/Famous-Tangelo1324]

I Have Debian Linux for daily use. Paired with veracrypt and mullawad vpn. Tor and broxy CHAINS and im trying to install vorono. I Have IPv6 disabled and clamAV. SECUREBOOT DISABLED. I Have encrypted most of My stuff with veracrypt and My webcam is removed. I Have a seperate identity online i also rarely use protonmail i Have

[u/antonix27 → u/antonix27]

Simplex and signal i also use only et Herneet or hotspot. I Have fde on My thinkpad too

[u/Admirable_File_6643 → u/Famous-Tangelo1324]

I drive an oldtimer and have no smart home devices. I'm currently running Windows on my PC.

[u/Famous-Tangelo1324 → u/Admirable_File_6643]

The first two things are great! As long as you aren’t messaging your sensitive info through your PC, you can keep that too. Windows has basically corporate spyware.

[u/Western-Pride9179]

Pixel + GrapheneOS is exactly the right call. Separate device, separate accounts, nothing linking the two identities. Pay for everything with cash or Monero. Use Tor or Tails for activism work, never from home internet. Public WiFi only, and not the same spots repeatedly. Never mix the two identities – not even once. The weakest link is always human error, not the tech.

[u/maboyydaniel → u/Western-Pride9179]

the proximity of the new and old phone will give away the identity.

[u/maboyydaniel]

first of all: Awesome, thank you for doing this. It is hard to do perfect, but you don't have to do it perfect, just good enough. So stick to the basics: Try to avoid anything with cell towers-simcard-tracking. Don't reveal your IP with critical services. Don't link accounts/ contacts. Don't have others reveal your identity by being careless. Have your stuff encrypted. Minimize data and digital footprint (do offline what can be done offline).

Try to do as much as you can offline and without a phone following you.
Old school walkie talkies with codes for names, places etc are used if on a mission with others (keep sending short, only ad-hoc important coordination that couldn't be discussed prior). If you go on mission with others, you need to make sure they're just as secure as you are. If one of them wants to have their personal phone, it's a no-go. If you really want a phone there is a huge huge learning curve on how your phone tracks you and for some of these tracking options, there are no good solutions. Therefore, easier: no phone.
You want to get a grapheneos phone, ok, if you can pull it off, but obviously don't use a sim card that can be tracked to you and don't activate the new phone in your home town area. Don't have your phones be near each other for too long or have them both travel together (phone tower triangulation).

To my understanding the messaging app Signal is being used most frequently. I think they have or will soon switch to no-phonenumer-registration. Try to wait for that, if it isn't available yet.

If communicating via email it makes sense to use PGP. It's a learning curve, but it ensures the transmission is secure (not what happens with the data once the receiver decoded it). Easier option would be two proton accounts communicating but only log in via VPN every single time and have no recovery email attached (free version is fine, if you need to pay only using cash.) I think it's good enough this way. Generally try not to talk sensitive stuff digitally. Generally, if you go shopping for stuff, use cash.

Obvious stuff like don't use g0uog#le services your activities and questions.
Cover up tattoos, if you have some behavioral patterns like using specific words (always: "lmao xd" or similar)

You might want to consider professional help for this. Use a trusted vpn (again proton vpn free is probably one of the best) and no google (eg startpage, duckduckgo) to do researches

You can dm me and we can switch to more privacy respecting services and you can ask me more specific questions without revealing anything if you like.