Limits of standard security practices Digital security practices offer indispensable value to journalists, particularly in safeguarding against digital threats such as hacking, unauthorised access, and data breaches. These measures are crucial for preserving the integrity of journalistic work, protecting confidential sources, and ensuring the privacy of sensitive information. However, it became quickly evident to us that journalists perceive the digital security training they receive as misaligned with the actual conditions they face. Our interviews and FGDs indicate that the training is often delivered using a standard template, focusing on basic digital hygiene, avoiding phishing and hacking, and tools operations—some of which they have learned before formal training. Journalists shared that such digital security practices mean little once they are under immediate threat of physical violence. Many (#1, #2, #6, #7, #8) regard digital security training as either too basic or not addressing actual risks. Passwords or decryption keys are useless when one is forced to enter them on the spot at military checkpoints. As one journalist who often passes through military checkpoints put it: The (storage) encryption which we have been taught is not useful on the ground. It can be useful when you are at a safe house where you have good internet access. I can’t say it is not useful at all, it is useful in some situations. But when you are travelling on the ground, it is not (#2). 32

Select target paragraph3