Good reporting depends on good sources. If you have a story or documents to share, I'd love to hear from you. Here's how to contact me securely.
For general inquiries, email jeaton [at] thinkprogress [dot] org. No PR pitches, please.
The U.S. Postal Service is probably the most secure way to communicate with me. Use a sidewalk postal box away from home or work. Don't include a return address, or, if you must, put it inside the envelope.
Send paper documents or digital files — on a CD or thumb drive — to:
P.O. Box 34716
Washington, D.C. 20043
Be careful: Some organizations track which employees access certain documents. Many laser printers also include hard-to-see “tracking dots” that indicate when and where a document was printed. You may want to take screenshots of a document instead of printing it, or take photographs with another device.
Signal is a smartphone app that easily encrypts texts and phone calls so only you and the person you're communicating with can access them. The only keeps three pieces of information: your phone number, when you registered with the service, and the last time you were active.
My newsroom, ThinkProgress, has a Signal tip line at 202–684–1030.
Send tips to joshua.eaton [at] protonmail [dot] com.
Whether or not you use encryption, here are some security tips:
- Don't use a work/school email address. Use a personal account. Even better, use an anonymous account that you only use for our communications (see below).
- Don't use a work/school network or computer. Use a device you own, either from your home or from an open wifi network, like at a coffee shop or a library.
- Use an anonymous account. If your identity is sensitive, set up a new email address from a public wifi network. Don't give any identifying information when you set it up.
- Use Tor. For maximum security, use the anonymous Tor browser — instead of Chrome or Firefox — when setting up the account and using it.
- Use innocuous subject lines. PGP only encrypts the body of an email, not the subject line or the "to" and "from" fields. If you use encryption, use innocuous subject lines.