How do investigative journalists use a client-side encrypted conditional delivery to protect sources under duress?

Investigative journalists protect confidential sources and whistleblowers by storing highly sensitive leak files and identity records in a client-side encrypted vault, scheduled for automatic release to trusted international press organizations if the journalist is arrested, detained, or harmed.

Investigative journalism is a high-risk profession. Journalists exposing corruption, government surveillance, or corporate malfeasance are targets for arrest, harassment, physical violence, and device seizure. In hostile environments, the journalist's greatest threat is being silenced before their work can be published.

A client-side encrypted conditional delivery acts as a powerful deterrent and safety net: "If you silence me, the evidence is automatically published." By storing sensitive documents in an encrypted vault, the journalist ensures that their work survives even if they are incapacitated.

Draft your secure handoff templates with our Dead Man's Email Generator.

The operational security (OpSec) protocols for leaks

Journalists must maintain strict OpSec to protect sources when using an automated switch:

• client-side encryption: The hosting platform must have zero access to the unencrypted data. If the platform has a backdoor or holds the keys, they can be subpoenaed, compromising the source. • Anonymity: Register the account using anonymous emails, VPNs, or Tor. Pay with anonymous methods if possible to prevent credit card trails. • Separate Recipient and Private-mode recovery codes: Deliver the encrypted files to one contact (e.g., an editor at a partner newsroom) while sharing the Private-mode recovery code with a different contact in a separate country. • Short Check-In Intervals: In active threat environments, set check-in intervals of 12-24 hours. If you fail to check in, the data is released quickly before devices can be cracked or legal barriers can freeze publication. • Decoder Guides: Include a readme file in the vault explaining the significance of the documents, the names of key contacts, and verification steps. Your recipient must be able to understand the leak quickly.

The legal defense of a warrant canary and inactive release

Is a dead man's switch legal? Yes. In most jurisdictions, storing files in an encrypted folder is legally protected. However, if you are forced under duress to decrypt a folder, a dead man's switch provides plausible deniability: you cannot decrypt a vault that has already triggered and been delivered to an offshore recipient.

Your check-in serves as your personal "warrant canary." Every time you check in, you are saying, "I am free, uncoerced, and in control of my work."

If you are detained: • You cannot check in (because your phone and laptop are seized). • The timer expires. • The ZeroLatch switch releases the leak files to your designated partner newsrooms. • The story is published, making your detention pointless as a suppression tool.

Test your security passphrase strength with our Password Strength Tester.