For maximum security and anonymity: Session (no phone number required)
For most people: Signal or Proton Mail
For large files: OnionShare or contact via Session first
Secure Communication
For maximum security and anonymity, I recommend Session. It doesn't require a phone number and is specifically designed to minimize traceability.
Signal is also a very secure option. For email, Proton Mail is best.
Important: Avoid using devices, networks, or email addresses owned by your employer. Consider using a VPN or Tor Browser for additional security.
Large Files
To share larger documents or datasets, I recommend OnionShare, or send a message on Session to arrange a temporary and secure transfer method.
Be careful not to send original files that might contain metadata or other hidden identifiers.
Metadata (Hidden Traceability)
Before sending files, it may be wise to remove metadata (e.g., location, device information, author, paths, timestamps, and edit history).
Easy method (for most files): use
ExifCleaner (drag & drop) to clean files.
Send a cleaned copy — but keep the original unchanged.
If possible: copy/paste text into messages instead of sending documents.
If you need to send a document: try "Print to PDF" / re-export (often reduces metadata, but isn't foolproof).
Start with a brief description and we can arrange a more secure process for sensitive data.
Be cautious of screenshots that may contain UI elements, timestamps, or other identifying information.
Note: Metadata cleaning doesn't necessarily remove everything that could identify you in the document's content (e.g., names, internal references, screenshots with sensitive details).
Security Checklist (Short)
Don't use work phone, work computer, or work email.
Use a personal connection (not work Wi-Fi).
Consider using a VPN or Tor Browser.
Send only essentials at first; we can arrange a more secure process afterward.
Be wary of screenshots/photos that may reveal time, location, or device information.
Check if your browser has anti-fingerprinting protection enabled.
Verification
To verify you're communicating with me:
Cross-check via another contact method (e.g., if you start on Session, send a brief confirmation message on Signal)
If in doubt, request confirmation before sharing sensitive information
Icelandic Law (Brief Overview)
Media Act No. 38/2011 – Article 25 provides strong protection for anonymous sources: media employees are generally prohibited from disclosing a source who requests anonymity and from handing over materials that could reveal the source — with limited exceptions under criminal procedure law.