I am a New York-based reporter for the Wall Street Journal. Get in touch if you have any story ideas or tips for us to follow up on.
Email: [email protected]
Signal: ceostroff.85
If you are worried about authorities or the company you work for reading your messages, you should take precautions. Technology solutions are imperfect, but here are a few tactics for making contact:
Signal is the gold-standard for encrypted messaging and phone calls. You can download it here: https://whispersystems.org/
You can create a new message and search my username, ceostroff.85, to contact me.
Signal will keep a record of when you set up an account and what phone number you've used, which can be sensitive information.
One shortcoming of Signal is that it's difficult to use without giving up your actual cell phone number. If you have an Android, you can find instructions on how to hide your true cell phone number here using Google Voice: https://theintercept.com/2017/09/28/signal-tutorial-second-phone-number/.
WhatsApp and iMessage are ok for most things. I don't recommend Telegram, Threema or SMS text messages.
The Wall Street Journal has created a Secure Drop facility for people wanting to submit documents or send messages to our staff anonymously. Anything you provide via this system will be encrypted on a computer under our physical control and only decrypted on an offline computer disconnected to any network. The system is designed to help protect your anonymity, even from the Journal.
To use SecureDrop, you should follow these steps. For the best identity protection, we suggest you connect to the internet using a public Wi-Fi network.
Download and install the Tor browser here: https://www.torproject.org
Open the browser, wait for a connection, and then copy and paste this URL into the address bar: bi5wxtllt3jkz4bcvdmmw4euxjiteyo7xtkwp7rtxqlyyblsb2um7nyd.onion
Once you’ve done this, the system will give you further instructions and a code name, which you should remember or write on a piece of paper that you keep in a safe place. The Journal will only be able to contact you within SecureDrop via this anonymous code name.
More info can also be found here.
You can send me an encrypted e-mail using PGP at [email protected]. Encryption only protects the message itself, not the subject or the e-mail addresses of the people involved.
My key can be found here: https://github.com/ceostroff/Contact/blob/master/PGP.txt
ProtonMail will also automatically encrypt emails: https://protonmail.com/. I can be reached there at [email protected].
More on this here: https://proton.me/support/proton-mail-encryption-explained
Caitlin Ostroff
The Wall Street Journal, 5th Floor
1211 Avenue of the Americas
New York, NY 10036
Don't put your return address on the outside of the envelope.