ABOUT THIS GUIDE
This guide provides essential guidelines to help Human Rights Defenders (HRDs) safeguard their digital presence, particularly during election periods when they are most targeted and vulnerable. The guide addresses various scenarios HRDs might face, such as losing a device or access to an account, receiving suspicious messages, encountering malware, website downtime, online impersonation, harassment, data loss, defamation campaigns, doxing, surveillance, and the arrest of associates. This provides immediate actions and preventive measures to help HRDs evaluate their situation and respond effectively.
SCENARIO AND SUGGESTED RESPONSE
Each possible scenario is provided with the most effective strategy that HRDs can use to respond immediately to the threat they are facing.
- I Lost My Device:
Response/Guide:
- Lock or Erase the Device: Use Find My Device (Android) or Find My iPhone (iOS) to lock or erase the device remotely. This prevents unauthorized access to your data.
- Change Passwords: Immediately change passwords for critical accounts, especially email, banking, social media, and any other services logged in on the lost device.
- Inform Contacts: Notify important contacts about the loss to prevent them from responding to potential phishing attempts from your compromised accounts.
- Call and notify your mobile service provider about the situation and to temporarily suspend service.
- File a Police Report: Report the loss to local authorities such as Police and Tanzania Communication Regulatory Authority (TCRA) so as to have an official record.
- Monitor Accounts: Keep a close watch on all accounts for any suspicious activities.
- I Lost Access to My Account:
Response/Guide:
- Use Account Recovery Options: Follow the platform’s account recovery process, such as “Forgot Password” links and answering security questions.
- Check for Backup Codes: Use backup codes if two-factor authentication (2FA) was enabled.
- Contact Support: Reach out to the platform’s support for help. Provide necessary identification details to verify your identity.
Preventive Measures:
- Enable Two Factor Authentication and passkeys: Ensure two-factor authentication and passkeys are enabled on all accounts to add an extra layer of security.
- Keep Backup Codes: Store backup codes securely for future use.
- I Received a Suspicious Message:
Response/Guide: Read More here A SECURE COMMUNICATION