Learn

284 articlesCategory: All
Publishing workflow

Anonymity for Protecting Sources

When thinking about protecting sources, you may first imagine not naming them in the article.

But that is not enough.

Sources are inferred not only from names in the article text, but also from contact paths, interview dates and times, material content, photo backgrounds, file metadata, and reactions after publication.

Especially in small organizations, whistleblowing, local communities, politically sensitive topics, and stories related to workplaces or schools, candidates can narrow just from "who knew that information."

This article organizes which information to look at and in what order when protecting sources.

Sources Are Inferred From More Than the Article Text

The first thing to look at in source protection is not whether a name appears directly in the article text.

How many people know that information? When, where, and with whom did contact happen? Within what range were materials distributed? Who will be suspected after publication?

This perspective is necessary.

ClueWhy the source is inferred
Information contentIf few people know it, candidates narrow
Reporting date and timeCompared with work schedules, entry/exit records, and movement history
PlacePeople involved are inferred from the meeting place or region
Distribution scope of materialsReveals who had the materials
Tone of quotationWay of speaking and position remain
Photos and audioBackgrounds, voices, reflections, and metadata become clues

In anonymity, even if a name is removed, "the person who could release this information" remains.

That is why the article needs to be reread from the source's position before writing.

Choose contact paths according to source risk

In source protection, the choice of contact method matters.

If you contact a source through the workplace email they normally use, records remain with the organization. If you use a social media DM, logs remain with the platform. If you use a phone, call history and cell tower information are involved. Even if you meet in person, movement history, surveillance cameras, and payment records remain.

Contact methodInformation that remainsCaution
Workplace emailSend/receive history, attachments, search logsRecords are likely to remain with the source's organization
Personal emailAccount, IP, device, email headersConnects with real names or past accounts
Social media DMLogin state, account correlation, timeRecords remain inside the platform
Encrypted messagingContacts, device, backupsDevice and cloud settings become weak points
In personMovement, entry/exit, payment, surveillance camerasReal-world records remain even if nothing remains online

A safe contact method changes depending on the situation.

For low-risk reporting, ordinary contact may be enough. For high-risk reporting, after consulting an editor in charge or a trusted specialist, it may be necessary to use a dedicated intake point or anonymous submission system.

SecureDrop is an open source system for media organizations and NGOs to receive anonymous submissions. It assumes access through and metadata reduction, and is used by many media organizations for source protection.

URL : https://securedrop.org/

Tor Browser is used to make the source's IP address less directly visible to the destination.

URL : https://www.torproject.org/

However, even when using Tor or SecureDrop, the source may still be correlated through their device, files, behavior time, or submitted content. Tools are important, but the operation around them must also be considered.

Do not hide too little or too much about where materials came from

In reporting, you need to show the reliability of materials.

However, if you reveal too specifically where materials came from, the source is put at risk.

For example, writing "a document distributed at the department meeting on the morning of June 12, 2026" increases reliability. But if that meeting had few participants, the pool of possible sources narrows.

Information disclosedBenefitRisk
Specific date and timeReaders can understand the facts more easilyThe pool of attendees or people with access narrows
Department nameThe location of the problem becomes clearThe source's affiliation is inferred
Document numberEvidentiary value increasesCan be compared against distribution records or management history
Original quotationThe meaning of the statement is conveyed accuratelySpeaking style and internal terminology remain
Material imagePersuasiveness increasesWatermarks, margins, layout, and metadata remain

Source protection does not mean weakening facts. It means choosing the necessary granularity.

Separate information needed to tell readers from information that only endangers the source.

Read from a third-party perspective before publication

The person who wrote the article becomes used to the clues.

Even if you think "this much will not reveal anything," people inside the organization, people in the region, or people involved may understand it.

Before publication, ask an editor who does not know the source or a trusted third party to read the article and check the following points.

  1. About how many people the pool of possible sources narrows to
  2. Whether dates, places, departments, and titles in the article text are too specific
  3. Whether the tone of quotations or internal terminology reveals a person
  4. Whether photos, PDFs, or audio contain metadata or background information
  5. Whether publication time or the way follow-up reporting is released makes the source look suspicious

This is not censorship.

It is a check for delivering necessary facts to readers while protecting sources.

Do not break protection through replies after publication

Source protection continues after publication.

After the article is published, if the reporter adds too much on social media, information hidden in the article text may appear. Clues about the source may also be released through replies to inquiries, added explanations, lectures, podcasts, and email handling.

Post-publication actionRisk
Talking about background on social mediaThe timing or place hidden in the article text appears
Answering inquiries in detailThe reporting path or material scope leaks
Adding details in follow-up reportingInformation known only to the source increases
Getting heated during rebuttalsUnnecessary specific clues become easier to release
Replacing materialsMetadata remains in the new file

Post-publication handling is also part of source protection.

Look not only at the article body, but also at surrounding statements by the same standard.

Look at real-world records too

In source protection, focusing only on online communication causes blind spots.

If you met in person, station movement, entry/exit, payments, surveillance cameras, and hotel or cafe usage history remain. If you spoke by phone, call history and carrier-side records also matter. Even if a name is completely withheld online, the source may be suspected when real-world behavior overlaps with the article publication timeline.

Real-world recordWhy to check it in source protection
Entry/exit recordsShows who was in a building and when
Payment historyBecomes a clue to meeting place and time
Surveillance camerasContact or movement may be recorded
Transit historyUnusual movement may remain
Call historyThe person contacted and the time remain

For high-risk reporting, include real-world behavior in the threat model as well as communication paths, materials, and article text.

Summary

Anonymity for protecting sources is not achieved only by withholding names.

Sources are inferred from information content, contact paths, interview dates and times, distribution scope of materials, tone of quotations, metadata in photos and files, and post-publication statements.

Choose contact methods according to the source's risk. Systems such as SecureDrop and Tor Browser can be useful in some situations, but tools alone do not complete source protection.

Before publication, check from a third-party perspective how far the pool of possible sources narrows. After publication, avoid releasing unnecessary clues through social media or inquiry handling.

Source protection is not work done at the end of an article by withholding a name.

It is an operation that continues from the beginning of reporting through after publication.

Related tools

Metadata inspection

ExifTool

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://exiftool.org/

Open external site
Whistleblower submission

SecureDrop

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://securedrop.org/

Open external site
Whistleblower platform

GlobaLeaks

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://globaleaks.org/

Open external site

Related articles