A secure phone for journalists — honest about what it does.
Source protection is a professional obligation, and the phone is often its weakest link. This is a calm, practical guide to what a hardened device genuinely improves for working journalists in Australia — and, just as importantly, what it does not promise.
A secure phone raises the cost and effort of monitoring you, removes the routine data leaks of a stock device, and keeps control in your hands rather than a vendor's. It does not make you anonymous or untraceable — no device does — and this guide will not pretend otherwise. Used well, it is a serious improvement to source protection; used as a magic shield, it gives false confidence.
The journalist's threat model
The risks that matter for reporting are specific: the metadata of who contacted whom and when; the contents of messages and notes; the device being examined while travelling or after a seizure; and the everyday background telemetry that quietly builds a picture of your movements and contacts. A stock phone leaks across all four. The goal of a prepared device is to close the leaks you can close and to be honest about the ones inherent to carrying a connected phone at all.
What actually helps
End-to-end comms with minimal metadata
Signal and Threema, configured properly, protect message content and reduce the metadata trail. Threema needs no phone number, which matters when a number links a source to you.
Profile separation
GrapheneOS profiles let you keep sensitive work fully isolated from your day-to-day apps — useful when a single device must serve both.
Network protection
Always-on Mullvad VPN stops local networks and ISPs from seeing your traffic, and a private eSIM separates the device's data identity from your public number.
Readiness if the device leaves your hands
Auto-reboot to a fully-encrypted state, and the Phantom Protocol duress layer, prepare you for travel, loss, or seizure — see the dedicated guides below.
What it does not do
It is worth being blunt, because false confidence is its own risk. A secure phone does not hide which cell tower you connect to from the carrier. It does not protect a conversation if the person on the other end is careless, or if you unlock the device for someone. It is not a substitute for legal advice about your obligations or your sources' protections under Australian law. And it does not make you anonymous — that is not a claim we make. What it does is remove the easy, routine, large-scale data collection that a stock phone invites, and put the remaining decisions back in your hands.
Travel, borders, and seizure
Reporting often means travel, and travel is where a device is most exposed. The preparation is the same discipline whether you are an executive or a journalist: carry less, power down at sensitive moments, and know your settings in advance. The detail lives in three companion guides — travel phone security, border-crossing preparation, and device-seizure preparation — and the Australian legal context is covered in phone search powers in Australia. None of those pages is legal advice.
Secure phones for journalists — FAQ
What phone is best for a journalist concerned about privacy?
A hardened Google Pixel running GrapheneOS, prepared in advance — open-source and verifiable, no Google services, end-to-end messaging, always-on VPN, profile separation, and an owner-controlled duress layer. The device matters less than the preparation and the habits around it.
Can a secure phone protect my sources?
It substantially helps — end-to-end messaging protects content, a number-free messenger reduces the link between you and a source, and profile separation limits exposure. But source protection is a practice, not a product: it also depends on the source's own device, your habits, and your legal situation. The phone is one important layer.
Does this make me anonymous or untraceable?
No. We do not make that claim. A secure phone reduces the routine data your device gives away and removes vendor cloud dependence, but the carrier still sees which tower you use, and metadata can exist beyond the device. It raises the cost of monitoring you; it does not make you invisible.
What happens if my phone is searched at a border or seized?
Preparation is the key, and it happens before the event: carrying minimal data, powering the device down so it is in a fully-encrypted state, and understanding your options. See our border-crossing and device-seizure guides, and the page on phone search powers in Australia. For your specific situation, consult a qualified lawyer — these guides are general information, not legal advice.
Will normal apps and my newsroom tools still work?
Most do. Banking, email, calendar, and the majority of mainstream apps run via a sandboxed Google Play profile isolated from the rest of the device. If a specific newsroom or publishing tool is essential, tell us before purchase and we will confirm compatibility.
Serious protection, honestly described.
If source protection is part of your job, talk to us about a device and a posture matched to how you actually work.
Book a Consultation → View DevicesNote. This guide is general information for working journalists and does not constitute legal advice. Protections for journalists and sources under Australian law are complex and fact-specific. For your circumstances, consult a qualified lawyer and your organisation's legal resources.