Threat Modelling

• What do you have to protect?
• Who do you have to protect it from?
• How likely is it that you will need to protect it?
• What are the consequences if you fail?
• How much hassle are you willing to go through to prevent those consequences?

Remember that …

• No one tool or software is a panacea against every security threat. All tools have strengths and weaknesses, and their effectiveness depends on how you use them and whether it’s the right tool for a given threat.
• You don’t have to do everything in order to increase your safety and security. Don’t fall prey to overwhelm. Small steps help.
• We are here to help! Bring your questions and your particular situation to us at cul-privacy@cornell.edu

Encrypted Communication with Research Subjects and Collaborators

Instant Messaging

• The most secure all-purpose instant message app is Signal.
  
• Every once in a while, there’s a misleading social-media panic about Signal’s effectiveness. Learn more about to effectively use Signal:
  • “SignalGate Isn’t About Signal,” WIRED. 26 March 2025.
  • “Why Signal Is Still Our Favorite Messaging App (And why no messaging app is perfectly secure),” NYTimes Wirecutter. 4 Feb 2026.
  • How to Protect Yourself on Signal, Signal User Support.
    
• If it’s not possible to use Signal, choose a different app. iMessage (when two iPhones text each other) and WhatsApp both offer end-to-end encryption by default, which is more secure than plain text SMS or Telegram.

Collaborative Writing on Shared Documents

• CryptPad (no fee to use)
• Mailbox.org
• Proton Drive (montly subscription fee)

Email

• Proton Mail
• Mailbox Mail

Storing and Moving Files

• Preparing Devices for Travel through a US Border, Freedom of the Press Foundation. 12 June 2025.

• The shared drive software options listed above are all options for encrypted cloud storage. A search will reveal additional encrypted cloud drives as well. In addition, depending on your threat model and use case, consider physical thumb drives or hard drives for back up and/or long-term storage. Inexpensive, and you don’t have to worry you’ll forget to pay the monthly subscription fee.