Good reporting depends on good sources. If you have a story or documents to share, I'd love to hear from you. Here's how to contact me securely.
For general inquiries, email jeaton [at] thinkprogress [dot] org. No PR pitches, please.
The U.S. Postal Service is probably the most secure way to communicate with me. Use a sidewalk postal box away from home or work. Don't include a return address, or, if you must, put it inside the envelope.
Send paper documents or digital files — on a CD or thumb drive — to:
P.O. Box 34716
Washington, D.C. 20043
Be careful: Some organizations track which employees access certain documents. Many laser printers also include hard-to-see “tracking dots” that indicate when and where a document was printed. You may want to take screenshots of a document instead of printing it, or take photographs with another device.
Signal is a smartphone app that easily encrypts texts and phone calls so only you and the person you're communicating with can access them. The only keeps three pieces of information: your phone number, when you registered with the service, and the last time you were active.
My newsroom, ThinkProgress, has a Signal tip line at 202–684–1030.
Send tips to joshua.eaton [at] protonmail [dot] com.
Because of a vulnerability in PGP email encryption, it's best not to use it for the time being. For encrypted messages, use Signal instead (see above).
Whether or not you use encryption, here are some security tips:
- Don't use a work/school email address. Use a personal account. Even better, use an anonymous account that you only use for our communications (see below).
- Don't use a work/school network or computer. Use a device you own, either from your home or from an open wifi network, like at a coffee shop or a library.
- Use an anonymous account. If your identity is sensitive, set up a new email address from a public wifi network. Don't give any identifying information when you set it up.
- Use Tor. For maximum security, use the anonymous Tor browser — instead of Chrome or Firefox — when setting up the account and using it.
- Use innocuous subject lines. PGP only encrypts the body of an email, not the subject line or the "to" and "from" fields. If you use encryption, use innocuous subject lines.