Private Internet Access Is Paying It Forward with Our New Privacy Pass

Private Internet Access (PIA) has taken a firm stance against digital repression for more than a decade. Online privacy is our core value, and over the years, we’ve worked in solidarity with dozens of organizations who support digital rights. Now, we’d like to take it a step further.

We’re proud to announce Privacy Pass, our new initiative to further protect the digital rights of those who need it most. We’re providing free PIA VPN subscriptions to journalists, nonprofits, and NGOs, who operate in high-risk areas. 

We Strive for a Safer Internet

Freedom of expression and access to information are human rights, and no one should ever be punished for exercising them. Private Internet Access is committed to internet freedom, and our track record of upholding digital privacy rights is evident in everything we do.

• We’re one of the only open-source VPNs on the market, so anyone can analyze our code and see we have nothing to hide. 
• We operate under a stringent No-Logs Policy, and we share a semi-annual Transparency Report — so you can rest assured your data will always be private.
• Private Internet Access is working with Tech To The Rescue to support charities and NGOs through digital privacy tools and training. PIA Blog is a trusted cybersecurity resource. We feel just as strongly about awareness and education as we do activism.
• Privacy Pass is our way of directly supporting those who risk everything to help others. It’s the least we can do!

Threats to Journalists in Numbers
13	Consecutive years global internet freedom has declined, according to Freedom House.
31	Countries with “very serious” situations, posing immense threat to journalists, as reported in Freedom on the Net 2023.
10000+	Reports were made to AccessNow’s Digital Security Helpline in 2021. This suggests digital threats to journalists and aid workers are increasing.
3%	Journalists reported threats of forced data handovers in a study conducted by the International Center for Journalists (ICFJ) and the Tow Center for Digital Journalism at Columbia University
4%	Respondents noted threats of targeted digital security attacks, namely phishing, DDoS attacks and malware attacks.
7%	Journalists reported threats of government surveillance.
20%	Journalists expressed their experiences with cyberattacks, harassment or online threats were more frequent during the Covid-19 pandemic, when they worked remotely and from their personal devices.

How a VPN Protects Your Digital Rights

VPNs are a simple and effective way to protect your privacy. When you connect to one, two important things happen — your traffic is redirected through encrypted tunnels, and the VPN’s server hides your IP address behind a different one. It might not sound like much, but here’s what it means for you:

1. Your Activity Is Hidden, Encrypted, and Untraceable

Much like physical addresses, IPs let other devices, servers, websites, or network providers communicate and know where to send data to. Everything you do online is associated with your IP address. Since VPNs hide your IP, your activity won’t leave breadcrumbs. VPNs also encrypt your data, so it can’t be intercepted or accessed by anyone — not even authorities. This is essential in countries where surveillance is in place, and your communications could be used against you.

2. You Can Overcome Censorship and Restrictions

Many governments oppress citizens by censoring information, and it’s almost always done by blocking independent websites, communications apps, and social media. You can circumvent these location-based restrictions by changing your IP with a VPN. This means you’ll be able to access unbiased and uncontrolled information, and stay connected to home.

3. You’re Protected from Cyberattacks

Authoritarian governments often use intimidation tactics to shake journalists, aid workers, and sometimes even disagreeable civilians. A common method is to launch Distributed Denial of Service (DDoS) attacks — wherein a website, server, or personal device is flooded with requests and forced offline. DDoS attacks — and other cyber attacks, like swatting — are far easier when your true IP address is exposed, so VPNs can help protect you from them.

Digital Security Tips for NGO Workers and Journalists

In oppressed countries and conflict zones, accessing the internet could be precarious at best and dangerous at worst. The following tips will make your life easier, and add an extra layer of protection if you find yourself in harm’s way.

1. Use a VPN

If you ever travel to a high-risk country, never have sensitive communications without VPN protection. Authoritarian governments typically have full control of service providers and networks, and use them to spy on civilians, humanitarians, and reporters. Anything you say and do can (and probably will) be used against you, so VPN encryption is non-negotiable.

2. Wipe Your Digital Footprint

If you ever land in hot water and you’re investigated, held hostage, arrested, or have your devices confiscated, it’s crucial you don’t have anything even remotely incriminating associated with your name.

Before traveling, comb through your emails, chats, and social media accounts, and delete everything you feel might be problematic, controversial, or damaging. Remove all political, opinionated, or religious posts, and make sure nothing harmless you’ve said or shared can be taken out of context.

You’ll also want to update your privacy settings for all of your accounts, and back up and wipe your devices before you travel. This is to ensure deleted files can’t be recovered.

3. Secure Your Devices

Make sure your devices can’t be broken into by brute force. Ensure you’ve installed recommended updates for your devices and software, and make sure your firewalls are up. It’s important to do this before you arrive, as software updates could be a cover for malware or spyware when you’re on the field. Invest in antivirus and antimalware software, encrypt your hard drives, and make sure your passwords are up to code.

4. Beware of Phishing Scams

Depending on your work, or circumstance, adversaries might attempt to pry sensitive information out of you, impede your efforts, or even punish you. One of the easiest ways to do so is through phishing scams — a type of social engineering wherein cyberattacks trick you into forfeiting your privacy.

Threat actors accomplish this by crafting emails, text messages, or even websites, profiles or pages that mimic people or services you know and trust. They might ask personal or confidential questions directly, or send malicious links designed to steal your credentials or infect your devices with malware. 

Vigilance is key in protecting yourself from these attacks.

• Always verify who you’re talking to before you divulge sensitive, personal or confidential information.
• Never click on embedded links or download suspicious attachments. This applies to email, social media, and text messages.
• Make sure the websites and pages you visit are legitimate and not convincing fakes. 
• Use data protection tools, like a VPN and multi-factor authentication.

It’s important you familiarize yourself with phishing scams, so you’ll be able to spot them before they do harm. You can learn more about them here. 

5. Use Burner Accounts and Devices

Don’t use your true identity for online activity. Use an alias and create social and email accounts accordingly. If possible, use disposable (but private) devices for all sensitive communications. Take care not to use outdated technology, though. It’s said to be a dead giveaway and might alert authorities to suspicious activity.

Whether you’re using a burner or not, disable all communications while you’re on the move — for example, location services, Wi-Fi, and bluetooth.

6. Be Discreet, But Play It Cool

As much as you want all your sensitive traffic to be encrypted, hiding everything you do might cast suspicious eyes your way as well. For all emails, communications, or phone calls you aren’t hiding, determine coded language with all important contacts, and be sure your metadata — like subject lines, timestamps, or attachments — won’t sell you out.

7. Pay attention to your surroundings

Sometimes, your best defense is to be alert. It won’t matter if you’re using a VPN or fake account if you’re posting dangerous content in public for all to see. 

If you’re working from an internet cafe, or need to communicate with contacts in public, make extra-sure no one can see what you’re doing. As extra precautions, you could install a privacy screen on your device, or play around with your screen’s brightness and font size. Never leave your devices unlocked or unattended, and remember to sign out of, and clear, all sessions when you’re done.

8. Know When to Act

Even though the internet can be a curse in hostile environments, it might — heaven forbid — be your best friend in dangerous situations.

In high pressure, or escalated incidents, live streaming what’s happening to you could be the difference between life and death. Other times, it might be better to record evidence, and send it to a trusted contact or entity when you’re safe.  Knowing when to destroy evidence is just as important as knowing when to cling to it. 

Keep in mind, accessing the internet in heated moments can — and will — give your location away, and might draw negative or dangerous attention to you. Don’t rush into danger, and research the environment you’re going to, to minimize inadvertently acting inappropriately, breaking laws, or casting yourself under suspicion. 

It’s also wise to memorize emergency contact details, and to know your way around your device. Smartphones usually have emergency keys programmed in, which you can access quickly and discreetly if you ever need to alert others of danger or call for help.

Who Privacy Pass Is For (And How to Acquire One)

You qualify for PIA Privacy Pass if you’re a humanitarian professional — a journalist, reporter, aid worker, NGO ambassador, or charity — operating in regions where your privacy might be at risk. 

If you meet the criteria, we appreciate the work you do, and we want to help by giving you full access to PIA VPN free of charge — no strings attached. Contact us at [email protected] to apply, or to find out more information.