Good reporting depends on good sources. If you have a story or documents to share, I'd love to hear from you. Here's how to contact me securely.

For general inquiries, email jeaton [at] thinkprogress [dot] org. No PR pitches, please.

Snail mail

The U.S. Postal Service is probably the most secure way to communicate with me. Use a sidewalk postal box away from home or work. Don't include a return address, or, if you must, put it inside the envelope.

Send paper documents or digital files — on a CD or thumb drive — to:

Joshua Eaton
P.O. Box 34716
Washington, D.C. 20043

Be careful: Some organizations track which employees access certain documents. Many laser printers also include hard-to-see “tracking dots” that indicate when and where a document was printed. You may want to take screenshots of a document instead of printing it, or take photographs with another device.

Signal

Signal is a smartphone app that easily encrypts texts and phone calls so  only you and the person you're communicating with can access them. The only keeps three pieces of information: your phone number, when you registered with the service, and the last time you were active.

My newsroom, ThinkProgress, has a Signal tip line at 202–684–1030.

Here are Android and iPhone instructions.

Email

Send tips to joshua.eaton [at] protonmail [dot] com.

For encryption, use my PGP public key (fingerprint E6F9 77C5 D628 C961 52CD F7CA 3735 64D2 F02D C40F). Here are Windows and Mac instructions.

Whether or not you use encryption, here are some security tips:

  • Don't use a work/school email address. Use a personal account. Even better, use an anonymous account that you only use for our communications (see below).
  • Don't use a work/school network or computer. Use a device you own, either from your home or from an open wifi network, like at a coffee shop or a library.
  • Use an anonymous account. If your identity is sensitive, set up a new email address from a public wifi network. Don't give any identifying information when you set it up.
  • Use Tor. For maximum security, use the anonymous Tor browser — instead of Chrome or Firefox — when setting up the account and using it.
  • Use innocuous subject lines. PGP only encrypts the body of an email, not the subject line or the "to" and "from" fields. If you use encryption, use innocuous subject lines.