Tor for Activists in Authoritarian States - Practical Digital Safety

Authoritarian states differ significantly in their surveillance capabilities and enforcement priorities. Understanding the specific surveillance infrastructure in your country is the foundation of effective security planning. Key questions: Does your country have access to real-time ISP traffic data? Does law enforcement use network monitoring vs. physical surveillance? Are there specific apps or tools that are explicitly prohibited by law? What are the practical consequences of discovery?

China, Russia, Iran, and Belarus have the most technically sophisticated surveillance infrastructure and the most active enforcement against Tor and circumvention tool usage. Activists in these countries need the strongest operational security practices including strong bridges, Tails for sensitive sessions, and strict device compartmentalization. Countries with less technical surveillance infrastructure but strong human intelligence networks may require different prioritization, with social security (who knows about your activities) being as important as digital security.

Do not assume your threat model based on general reputation. Countries with moderate international reputations may have highly capable domestic surveillance against specific activist categories. Research specific cases from your country to understand what has been used against activists like you, not what the country's reputation suggests in general.

Before attempting to use Tor, verify whether direct access or bridges are needed. Launch Tor Browser and attempt to connect without bridges. If connection fails after 30 to 60 seconds, try bridges. The built-in bridge options in Tor Browser include obfs4, Snowflake, and meek - try each in order. Snowflake is generally most reliable in China and Iran.

If built-in bridges fail, request fresh bridges through the Moat API in Tor Browser's connection settings. If Moat is blocked, request via email to bridges@torproject.org. If your email is blocked at the ISP level, use a webmail service accessible through a different circumvention tool (commercial VPN or Psiphon) to request bridges, then use those bridges to access Tor.

Store working bridges offline once you find them. A text file on an encrypted device with current working bridge lines ensures access even when the distribution channels are blocked. Share working bridges through trusted personal networks - direct, in-person communication of bridge lines to trusted friends provides resilient distribution that is very hard for surveillance systems to interrupt.

Mobile devices are the primary communication tool for most activists, but they present specific security challenges. App permissions, carrier network access, and SIM card registration create surveillance opportunities that desktop-only use avoids. Mobile Tor access through official Tor Browser for Android or Onion Browser for iOS is appropriate for many use cases, but certain high-sensitivity activities should be conducted on desktop.

SIM cards registered to your real identity link your phone number, location history, and communication metadata to you permanently. Some activists use unregistered or pay-as-you-go SIM cards specifically for sensitive communications. In countries where SIM registration is mandatory (a growing list), this option is legally constrained. Evaluate the legal and practical risks of unregistered SIMs in your jurisdiction.

Encrypted phone calls through Signal over Tor provide strong communication security but require planning: both parties must be using Signal, with good network connectivity, and both must be using Tor. The operational overhead of coordinating this is significant. For routine encrypted communication, Signal without Tor is often the practical choice, with Tor reserved for activities with higher surveillance risk.

International NGOs, diaspora communities, and foreign media organizations are crucial allies for many activists. Communication with these partners carries specific risks: international communications are subject to surveillance by both domestic intelligence and foreign intelligence of partner countries. Use Tor-accessible channels for communications that would be dangerous if intercepted domestically.

Organizations including Access Now, Frontline Defenders, Freedom House, and Committee to Protect Journalists have secure communication channels specifically for activists at risk. These channels use technology specifically designed for high-risk communication and the organizations have experience handling sensitive communications appropriately. Contact information for these organizations' emergency helplines should be memorized or stored in encrypted form.

File encryption for documents shared with international partners protects content even if the communication channel is monitored. Use VeraCrypt or GPG to encrypt sensitive documents before transmission. Share the decryption key through a separate channel from the document itself. This two-channel approach means intercepting the transmission does not automatically give the interceptor access to the document content.