We tell big stories on difficult subjects. We’ve reported on the inequities of the drug treatment system, deaths in police custody, and a massive bribery scandal involving some of the world’s biggest corporations. To tell these stories, we must work with people who know what is really going on inside government and private institutions. That’s where you come in.
Are you getting new directives that flout established practice? Are new rules making you uncomfortable? Is an important program on the chopping block? Are you being asked to do something unethical? We want to see whatever evidence and documentation you can provide.
Your employer, hackers and the government can all read your emails (or at least see that you contacted us). But if that doesn’t bother you, email us at firstname.lastname@example.org.
If you’re concerned that being a source for a story poses a significant risk, take precautions:
- Know your risks. No form of communication is 100 percent safe from all observers. Make a plan about what you’ll do if the wrong person finds out you contacted us.
- Do not contact us from your work computer or phone. Your bosses can track your use of these devices. The same goes for your personal mobile phone, if you’ve ever installed apps from your employer — even if you later uninstalled them.
- Consider using postal mail. We’re at “Huffington Post, PO Box 28154, Washington, DC 20038-8154.” Send from a public mailbox and don’t write a return address. Only we can read your message (unless a court provides a warrant).
- Use the same encrypted email service we do. Create a new protonmail.comaccount — separate from your other email accounts — and use it to write us at email@example.com. As long as you write to our Protonmail address from your Protonmail address, only we or someone who knows your password can read your message. Read more about Protonmail.
- Use your browser’s “incognito” or “private browsing” mode. Some sites (including, potentially, your employer’s) can access your browser history and see what websites you’ve visited. An incognito window masks this data. Open a new incognito browser window to contact us, and close it immediately afterward. If you don’t, your browser can display your online history to sites that ask for it.
- Do not contact us during work hours. You could get into trouble if your employer found out.
- If you are concerned you are under active surveillance, do not contact us from home and do not contact us from your regular phone. Public wifi hotspots can help keep you anonymous. Use the Tails operating system to access ProtonMail at https://protonirockerxow.onion/ instead of the normal protonmail.com address. Start your Tails session immediately before contacting us, and close it immediately afterward.
- Do not tell others that you are a source, and do not contact us on social media.
- If you email us documents, strip document metadata. Metadata can include evidence of where a document originated and who has handled it. Here are removal instructions.
In most cases, our reporters or editors will need to know your identity so we can verify and authenticate the information you provide to us. Your identity will only be shared with HuffPost staff who absolutely need to know it.
We will do everything we can to protect your identity, but if you feel you must remain completely anonymous, we will ask you to provide us with sources or contacts who can corroborate the information you send us.