When it comes to staying safe online, preparation is better than crisis response, said Viktorya Vilk, PEN America’s director for digital safety and free expression. “Boring things that no one ever wants to do are actually miraculously effective,” she said.
To protect against hacking or impersonation, create long, complex, unique passwords for each of your 10 most sensitive accounts (bank account, cloud storage, social media). When multifactor identification is available, use it.
Next, audit your online footprint. Pretend you are an abuser and search for your own personal information, including your address, phone number, and unapproved use of your name or image. Paid services, including DeleteMeopens in new window, Opteryopens in new window, and Kanaryopens in new window, can help you remove unwanted information from data broker websites.
If you come under attack, the number one priority is to keep yourself and your family safe. If you feel physically threatened, make that your top priority. Then document the abuse: Take screenshots and save links, voicemails, and emails.
“People have a gut reaction to delete stuff, to take it down, because they don’t want to look at it,” said Vilk. “But it’s actually critically important to keep it.” If you later seek a restraining order or other support from law enforcement, you will need evidence in hand.
Use platform-native features, such as muting, blocking, and reporting harassers. Your institution’s IT department may also be able to set up filters to protect you from an onslaught of abusive emails.
Finally, do not self-isolate during an attack. Family, friends, and colleagues can help document, monitor, and report abuse. If you are being threatened, seek mental health support.
[Related: Academic independence under fire]
