Protecting a documentary source or a dangerous piece of footage is one continuous process, not a single app, password, or storage device. Start by assessing who could be harmed and how; then secure communications, devices, travel, files, and team access. For every clip, preserve its provenance, test what it shows against independent evidence, record uncertainty, and make a separate decision about whether publication creates an unacceptable risk.
The process below adapts the Digital Security for Filmmakers guide, the Berkeley Protocol, WITNESS ethical guidance, PBS transparency standards, and Doc Society’s Safe + Secure resources. The Berkeley Protocol was written for digital open-source investigations of alleged international crimes, human-rights violations, and humanitarian-law violations, so apply it proportionally when your documentary has a different subject or risk profile.
Assess risk before collecting anything
A threat model turns a vague concern—“this source may be exposed”—into decisions your crew can act on. Before recording an interview, accepting a file, or publishing a scene, identify who might seek access, what information they could obtain, and what harm could follow. Include sources, witnesses, victims, people shown in footage, family members, fixers, translators, researchers, editors, and the production company itself.
Map the main risk categories
| Risk | Questions to ask | Possible mitigations |
|---|---|---|
| Digital | Could an account, phone, computer, message, or file reveal an identity, location, contact list, or unreleased material? | Reduce identifying data, secure accounts and devices, restrict access, and maintain protected backups. |
| Physical | Could a source or crew member face arrest, assault, surveillance, border seizure, or retaliation? | Change meeting and travel plans, avoid unnecessary identifying details, use appropriate local safety advice, and prepare an incident plan. |
| Psychosocial | Could interviewing, storing, or publishing the material cause intimidation, stigma, trauma, or renewed danger? | Explain choices, obtain informed consent, minimize exposure, and arrange suitable welfare support. |
Write the assumptions behind each mitigation: who controls it, what it protects, and what happens if it fails. Revisit the assessment when the story changes, a new person joins the team, a source’s circumstances shift, or footage moves from a private workspace to a public platform. The Berkeley Protocol describes security as an infrastructure of hardware, software, and user practices that must be reviewed over time, not a one-time setup.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
- Get NVMe solid state performance with up to 1050MB/s read and 1000MB/s write speeds in a portable, high-capacity drive(1) (Based on internal testing; performance may be lower depending on host device & other factors. 1MB=1,000,000 bytes.)
- Up to 3-meter drop protection and IP65 water and dust resistance mean this tough drive can take a beating(3) (Previously rated for 2-meter drop protection and IP55 rating. Now qualified for the higher, stated specs.)
- Use the handy carabiner loop to secure it to your belt loop or backpack for extra peace of mind.
- Help keep private content private with the included password protection featuring 256‐bit AES hardware encryption.(3)
- Easily manage files and automatically free up space with the SanDisk Memory Zone app.(5). Non-Operating Temperature -20°C to 85°C
Use proportional controls
A local history project with no identifiable whistleblower does not need the same process as an investigation involving an armed group, an abusive employer, or a government capable of surveillance. Proportionality does not mean ignoring basic hygiene. It means matching the people, money, expertise, and time available to the credible threats. High-risk investigations should involve experienced cybersecurity professionals, alongside legal, physical-safety, and psychosocial advisers appropriate to the location and people involved.
Protect the entire workflow
Source safety can fail between the interview and the edit suite. The Digital Security for Filmmakers resource organizes practical protection around footage, communications, mobile devices, computers, and travel. Treat those areas as connected: a secure message is of little use if an unlocked phone exposes the conversation, and an encrypted drive does not help if a travel search reveals who supplied it.
Communications
- Decide what information is genuinely necessary before contacting a source. Avoid placing a source’s real name, address, or sensitive subject in messages when a less identifying description will do.
- Explain what communication can and cannot protect. A source should understand who may have access, how long records may exist, and what you will do if a device is lost or seized.
- Separate professional investigation activity from personal online activity where possible. The Berkeley Protocol also advises avoiding disclosure of identifying details about investigators, organizations, partners, or sources unless disclosure is necessary.
- Keep a minimum record of contact details and restrict the people who can see it. A production-wide contact list is rarely appropriate for a highly exposed source.
Do not treat a particular messaging application as a complete security plan. The relevant questions are who controls the accounts, what devices store copies, how access is recovered, and whether the crew can use the process consistently.
Phones and mobile data
Phones combine location history, contacts, photographs, messages, cloud synchronization, and authentication. Before fieldwork, decide what data the device needs and remove or avoid data that creates unnecessary exposure. Review automatic backups and shared accounts, protect the device with its available security controls, and establish what the crew will do if it is lost, searched, or taken.
Free tools Windows power users keep installed
One-click scans. No signup required.
Keep a written, non-sensitive emergency plan for account recovery and device replacement. The plan should identify who can authorize a reset, where protected copies are held, and how the team will contact one another if the normal channel is unavailable.
Rank #2
- MADE FOR THE MAKERS: Create; Explore; Store; The T7 Portable SSD delivers fast speeds and durable features to back up any endeavor; Build your video editing empire, file your photographs or back up your blogs all in an instant
- SHARE IDEAS IN A FLASH: Don’t waste a second waiting and spend more time doing; The T7 is embedded with PCIe NVMe technology that brings fast read and write speeds up to 1,050/1,000 MB/s¹, making it almost twice as fast as the T5
- ALWAYS MAKE THE SAVE: Compact design with massive capacity; With capacities up to 4TB, save exactly what you need to your drive – from large working files to game data and everything in between
- ADAPTS TO EVERY NEED: Whether using a PC or mobile phone, count on the T7 for extensive compatibility²; It’s a true team player when it comes to heavy-duty application usage or file-saving
- HI RESOLUTION VIDEO RECORDING: Record Ultra High Resolution (4K 60fs) videos directly onto the T7 Portable SSD with your favorite camera or mobile devices; Supports iPhone 15 Pro Res 4K at 60fps video and more³
Computers and editing systems
Use separate professional equipment from personal devices when the risk justifies it. Limit administrator access, keep operating systems and applications maintained, and prevent unnecessary synchronization of sensitive project folders. Editors, translators, assistants, and external reviewers should receive only the material they need for their task.
Track where a project file has been copied. A shared folder, review link, export, or temporary download can become a new uncontrolled copy. Set an expiry or deletion process for temporary working files, but do not delete the original evidence or provenance record before the production’s legal and editorial obligations are clear.
Footage storage and backups
Preserve an untouched original and create working copies for transcoding, captioning, color, and editing. Encrypted devices and offline backups can reduce exposure and improve recovery, but they are components of a plan rather than guarantees. An encrypted external SSD is one possible implementation; the available sources do not establish a best brand or model.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
For each storage location, document:
- Who controls physical and account access.
- Which copy is the original, which copies are working media, and which are backups.
- How recovery works if a device, password, or team member is unavailable.
- When a copy was created, transferred, or transformed.
Test that backups can actually be opened before an emergency. Keep at least one protected copy separated from the main equipment when the threat model calls for it, and ensure that separation does not leave the only usable copy in one place.
Travel and borders
Travel changes the threat model. A device may be inspected, lost, confiscated, or connected to an untrusted network. Prepare a travel-specific equipment list, carry only the data required for the trip, and decide in advance what the crew will disclose if questioned. Consider whether a source’s name, a project title, or visible file thumbnails could create danger if a device is examined.
Rank #3
- Note: Magsafe is not available in this version
- High-speed Data Transfer: Lexar external SSD ES3 supports USB 3.2 Gen 2 up to 1050MB/s read and 1000MB/s write to transfer files fast for more efficient work. (Performance may be lower if not supporting USB 3.2 Gen 2 on Mac and other systems)
- Wide Compatibility: Lexar Portable SSD ES3 compatibility with iPhone 17 series (Not supported on iPhone 14 and older models), Android mobile devices, laptops, cameras, Xbox X|S, PS4, PS5, gaming console, and more
- On The Go: Lexar external solid state drive ES3's thin, stylish, and durable design, weighs 42g and is only 10.5mm thick, making it smaller than a card and easily fits in your pocket. It comes with a Type-C cable for plug-and-play convenience
- Data Safety First: Lexar SSD ES3 includes Lexar DataShieldTM 256-bit AES encryption software to protect files
After travel, treat devices and accounts as potentially exposed until the team has followed its incident procedure. Record what happened while memories are fresh; do not quietly fold a suspected seizure or unauthorized access into the ordinary workflow.
Verify a risky clip through several kinds of evidence
Authenticity is not a binary property supplied by a file extension or a confident source. Evaluate three related things: the source, the digital item, and the context in which the scene is claimed to have occurred. The Berkeley Protocol frames collection, preservation, verification, and analysis as connected professional activities. The imagery guide used by judges and fact-finders is not a filmmaker manual, but its questions about authenticity, metadata, source, location, and time are useful here.
1. Preserve the original and record provenance
- Record when and how the file arrived, who supplied it, and what the supplier said it showed.
- Retain any original file, link, message, or accompanying note that can be kept safely.
- Make a working copy before editing, transcoding, stabilizing, or adding captions. Avoid transformations of the only copy.
- Log every significant transfer or alteration, including who handled it and when.
A provenance record does not prove that a scene is true. It shows what you received and how the material was handled, allowing later reviewers to distinguish an original item from an edited export or a social-media re-upload.
2. Assess what the source could know
Ask how the source obtained the material, whether they had direct access to the event, and whether their account is first-hand or repeated. Consider possible motivations without assuming that a motive makes a claim false. PBS guidance for anonymous sources says producers should be able to describe how a source knows the information, the source’s motivations, and why anonymity is required. Gathering those answers can itself create risk, so retain identifying details only when necessary and restrict access.
3. Inspect the digital item
Review the available metadata, image sequence, audio, compression, cuts, and visual inconsistencies. Metadata may help establish a device, time, or location, but social-media services often strip it. Missing metadata does not, by itself, establish that a clip is fabricated. Likewise, metadata can be copied or altered, so treat it as one piece of evidence rather than a verdict.
Rank #4
- MADE FOR THE MAKERS: Create; Explore; Store; The T7 Portable SSD delivers fast speeds and durable features to back up any endeavor; Build your video editing empire, file your photographs or back up your blogs all in an instant
- SHARE IDEAS IN A FLASH: Don’t waste a second waiting and spend more time doing; The T7 is embedded with PCIe NVMe technology that brings fast read and write speeds up to 1,050/1,000 MB/s¹, making it almost twice as fast as the T5
- ALWAYS MAKE THE SAVE: Compact design with massive capacity; With capacities up to 4TB, save exactly what you need to your drive – from large working files to game data and everything in between
- ADAPTS TO EVERY NEED: Whether using a PC or mobile phone, count on the T7 for extensive compatibility²; It’s a true team player when it comes to heavy-duty application usage or file-saving
- HI RESOLUTION VIDEO RECORDING: Record Ultra High Resolution (4K 60fs) videos directly onto the T7 Portable SSD with your favorite camera or mobile devices; Supports iPhone 15 Pro Res 4K at 60fps video and more³
4. Test time and place
Compare visible landmarks, road layouts, buildings, terrain, language, weather, shadows, clothing, signage, and other scene details with independent reference material. Check whether the claimed date is compatible with daylight, seasonal conditions, construction stages, or known events. Note what is observed directly and what is inferred. A confident geolocation with no documented comparison is still an unsupported conclusion.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware match5. Corroborate independently
Seek other footage, photographs, witness accounts, public records, or contemporaneous documentation that did not simply copy the same original upload. Independent agreement increases confidence; disagreement is also evidence. Keep conflicting accounts and unresolved questions in the verification notes instead of smoothing them away for the edit.
6. State the confidence and limits
| Evidence area | What it can support | What it cannot establish alone |
|---|---|---|
| Source account | How the material was obtained and what the person could know | That the account is unbiased or complete |
| Metadata | Possible device, time, or location clues | Untampered authenticity, especially after re-encoding |
| Visual and audio details | Consistency with a claimed scene or event | A precise date or identity without corroboration |
| Independent records | Convergence or conflict with the clip’s claim | Proof that every frame in the clip is original |
| Provenance log | Chain of handling from receipt onward | Truth of the underlying event |
Use a written confidence statement that distinguishes established facts, plausible interpretations, and unknowns. Preserve the underlying notes so an editor, lawyer, or audience can understand how the conclusion was reached.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Decide whether publication is justified
Assess foreseeable harm
Before sharing a clip, inspect more than faces. Voices, reflections, uniforms, houses, route information, timestamps, background documents, and embedded metadata can identify a person or location. Ask whether publication could expose the source, an at-risk filmer, a victim, a witness, or relatives to retaliation. WITNESS guidance addresses minimizing harm, at-risk filmers, perpetrator footage, credit and context, and chain of custody.
Mitigations may include cropping or blurring, removing identifying audio, delaying release, withholding exact locations, stripping unnecessary metadata from a publication copy, or declining to publish. Keep the protected original and the editorially altered version clearly distinguished in the records. An alteration that protects a person should not be presented as if it were the untouched evidence.
Best Value
- SMART TOUCHSCREEN DISPLAY & REAL-TIME MONITORING — Stay informed at a glance with the built-in smart touchscreen. Monitor transfer speed, drive temperature, and storage capacity in real time, giving you instant visibility into your SSD’s status while you work, create, or transfer files
- ADVANCED HARDWARE ENCRYPTION & PASSWORD PROTECTION — Keep sensitive files secure with built-in hardware encryption and password protection. Help safeguard personal photos, business documents, client files, financial data, videos, and other private content from unauthorized access
- UP TO 2,000MB/s HIGH-SPEED PERFORMANCE — Powered by USB 3.2 Gen 2x2 with a 20Gbps interface, this portable SSD delivers up to 2,000MB/s read and 1,800MB/s write speeds. Transfer large files, 4K videos, games, and creative projects faster with less waiting
- MAGNETIC DESIGN & APPLE PRORES RECORDING — The built-in magnetic design enables hands-free mounting and easier cable management for mobile workflows. Record professional-quality footage directly to the SSD with compatible Apple devices supporting 4K 60fps and 4K 120fps ProRes recording, making it ideal for creators on the go
- WIDE DEVICE COMPATIBILITY & DURABLE DESIGN — Built with a premium zinc alloy housing for durability and efficient passive heat dissipation. Compatible with Windows PCs, MacBook, iMac, iPhone, iPad, Android phones, Android tablets, cameras, gaming consoles, and other USB-C devices. Ideal for work, photography, video creation, gaming, backups, and everyday storage
Explain anonymity without defeating it
PBS Standards states: “When using anonymous sources in published content, producers must explain to the audience why they are withholding the identity of the source and why the source is credible, in order to help the audience evaluate the source’s credibility.” This is an editorial standard, not a universal legal rule. You can follow its transparency principle by describing the source’s basis of knowledge, the corroboration obtained, and the reason disclosure would create danger—without including details that allow identification.
Keep context, credit, and chain of custody
Footage can be technically genuine yet misleading when detached from its date, location, sequence, or circumstances. Explain material limitations in narration, captions, or accompanying text. Credit a filmer when doing so is safe and desired; do not expose an at-risk person to satisfy a conventional credit line. Preserve the chain of custody and the editorial reasons for any withheld credit, altered image, or omitted context.
Use a decision gate for each high-risk item
For a consequential clip or source, require an explicit decision rather than an assumption that inclusion is inevitable:
- Collection: Is there a legitimate reason to obtain this material, and can it be collected without creating disproportionate danger?
- Protection: Are communications, devices, storage, and access controls adequate for the identified threat?
- Verification: Have source, file, time, place, and independent corroboration been assessed, with uncertainty recorded?
- Publication: Do the public-interest reasons outweigh foreseeable harm after redaction, delay, contextualization, or withholding are considered?
- Review: Has someone with appropriate editorial, legal, safety, or cybersecurity expertise challenged the decision?
If the answer at any gate is no, pause, reduce the material’s exposure, seek specialist advice, or leave it unpublished. The Berkeley Protocol’s practical conclusion is that “with appropriate preparation, investment and focus on threat assessment and risk mitigation, open source investigators should be able to minimize the risk of harm to people, data and other assets.” Minimizing risk is achievable; eliminating it is not.
When to bring in specialists
A general guide cannot determine the legal duties or threat level for an individual production. Bring in experienced cybersecurity help when an adversary has substantial surveillance capability, when compromise could endanger a source, or when the team lacks the skills to design and test the workflow. Add local safety and legal advice where detention, border searches, defamation, privacy, national-security law, or restrictions on filming may apply. Psychosocial support may be necessary for people recounting violence and for crews repeatedly handling traumatic material.
Document who approved the risk plan, what assumptions it uses, when it will be reviewed, and what event triggers an emergency review. That record makes protection an accountable production practice rather than a promise made after harm occurs.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Say something about this film