Secure Communications

A P.A.C.E. plan is a simple but powerful emergency communication strategy. It stands for Primary, Alternate, Contingency, and Emergency and ensures you always have a way to reach the people who matter, even when your usual methods fail.

What each level means

• Primary: Your normal, everyday method of communication (texting, phone calls)
• Alternate: A backup if your primary fails (a messaging app like Signal, email)
• Contingency: A third option for when the first two are unavailable (a landline, a neighbor’s phone)
• Emergency: A last resort when everything else is down (an in-person meeting point, a satellite communicator)

Should you have one? Yes. Most people assume their phone will always work, but outages, natural disasters, and dead batteries are all common. A P.A.C.E. plan costs nothing to make and can be critical in a real emergency.

How to create yours

1. Write down one method for each of the four levels
2. Choose a default out-of-area contact that everyone in your household knows to reach
3. Pick a physical meeting location in case you cannot communicate at all
4. Share the plan with everyone in your household and make sure they understand it
5. Review it once a year to make sure contacts and methods are still current

A simple written copy kept at home is often more reliable than a digital note during an actual emergency.

Two-factor authentication (2FA), sometimes called multi-factor authentication (MFA), adds a second layer of security to your accounts. Even if someone steals your password, they still can’t get in without the second factor.

The basic idea Logging in normally only requires something you know (your password). 2FA adds something you have, which is usually your phone.

Common types of 2FA

• Authenticator app (most secure and recommended) — An app on your phone generates a short code that refreshes every 30 seconds
• SMS/text message A code is texted to your phone. It works, but is less secure than an app
• Hardware key A physical USB device you plug in. Very secure, but requires purchasing a device (like a YubiKey)

How to set it up (general steps)

1. Go to the security settings of the account you want to protect
2. Look for “Two-factor authentication” or “2FA” and enable it
3. If using an authenticator app, download Authy or Google Authenticator on your phone
4. The website will show a QR code — scan it with the app
5. Enter the 6-digit code the app shows to confirm it’s working
6. Save any backup codes the site provides and store them somewhere safe

After setup Each time you log in, you’ll enter your password and then open your app for the current code.

A burner phone is a cheap, prepaid cell phone that is not linked to your name, address, or existing accounts. You can buy it with cash, use it, and can dispose of it or stop using it at any time without it being traced back to you.

Why it can help If you’re concerned that someone is monitoring your primary phone through spyware, tracking your location, viewing your call logs through a shared account, or watching who you contact, a burner phone gives you a completely separate and private way to communicate.

How to get one

1. Purchase a prepaid phone with cash at a store like Walmart, Target, or a pharmacy
2. Do not use a credit or debit card, as this creates a record linked to your name
3. Buy prepaid minutes or a prepaid plan the same way, with cash
4. Do not sign into any personal accounts (Google, Apple, email) on the device

How to keep it private

• Store it somewhere your abuser will not find it
• Do not bring it with you if your primary phone is also present, as some tracking methods can detect nearby devices
• Do not call your regular phone number from it or contact people who might mention it
• Turn it off and remove the battery when not in use if possible

Important limitations

• A burner phone does not make you invisible. Emergency services can still find you if you call 911 but are unable to speak
• Its main strength is giving you a private line your abuser does not know exists

SIM swapping is a scam where someone tricks your phone carrier into transferring your phone number to a SIM card they control. Once they have your number, they can receive your calls and texts, including 2FA codes, and use them to break into your accounts.

You will know immediately if this happens When a SIM swap occurs, your phone loses all service completely. You will not be able to call, text, or use mobile data. It will feel like your SIM card stopped working. This is not subtle, and it is the first sign something is wrong.

How it happens

• A scammer contacts your phone carrier pretending to be you
• They use personal information gathered from social media or data breaches to answer security questions
• The carrier transfers your number to their SIM card
• Your phone goes dead and they gain access to anything that uses your number for verification

How to protect yourself

• Set a PIN with your carrier. Call your carrier and ask to add a SIM lock or port freeze. Anyone trying to make changes must provide that PIN first
• Use an authenticator app instead of SMS for 2FA. Codes from an app live on your device and cannot be intercepted through SIM swapping
• Limit personal information on social media. Scammers use publicly available details to impersonate you
• Ask your carrier about additional account protection. Most major carriers offer extra security options on request

If it happens to you

1. Your phone will have no signal at all. Find another phone immediately
2. Call your carrier and report the unauthorized SIM swap
3. Change passwords on your most important accounts right away
4. Contact your bank if you believe financial accounts are at risk

If someone monitors your device or browsing activity, clearing your entire history can itself raise suspicion. The goal is to remove traces of specific activity while leaving normal browsing intact.

Delete specific pages instead of everything

• In most browsers, open your history (Ctrl+H on Windows, Cmd+Y on Mac)
• Find the pages you want to remove
• Right-click the entry and select “Remove from history” or click the X next to it
• This removes only those entries and leaves the rest of your history looking normal

Use a private/incognito window for sensitive browsing

• Open an incognito or private window before visiting sites you don’t want recorded
• When you close the window, that browsing is automatically not saved
• Do this from the start of a session, not after the fact

Important things to know

• Incognito mode does not hide activity from your internet provider or from monitoring software installed on your device
• If spyware or a monitoring app is installed, it may record activity regardless of what you delete
• Some browsers sync history across devices. If your browser is signed into a shared account, history may appear on other devices even after local deletion

Safer alternatives

• Use a trusted friend’s device or a library computer for sensitive searches
• Your work or school computer might be a safe option, but be aware web traffic might be monitored by your employer or school

Your safety is the priority. If you suspect your device is being monitored, using a different device is the safest option.

The Address Confidentiality Program (ACP) is a free service offered by most U.S. states that helps survivors of domestic violence, stalking, or sexual assault keep their real address private.

How it works

• When you enroll, you receive a substitute address (usually a P.O. box managed by your state)
• You use this substitute address for mail, official documents, and government records
• Mail sent to the substitute address is forwarded to your real location by the state
• Your actual address is kept confidential, even from most government agencies

What it protects

• Voter registration records
• Driver’s license and state ID
• Court and legal documents
• School enrollment records
• Many other public records that would normally list your address

Who qualifies Eligibility varies by state, but most programs cover survivors of:

• Domestic violence
• Sexual assault
• Stalking
• Human trafficking

You typically need to apply through a state-certified advocate rather than on your own.

How to enroll

1. Contact a local domestic violence organization or victim services agency
2. Ask about your state’s ACP and request help applying
3. A certified advocate will guide you through the paperwork
4. Once approved, you receive your substitute address and program card

Important limitations

• Not all businesses or private entities are required to accept the substitute address
• The program covers mail but does not protect your address from all online data brokers

To find your state’s program, search for “[your state] Address Confidentiality Program.”