Skip to main content

Computer security and the lack of computer security is a fundamental issue that underpins much of how the Internet does (and doesn't) function. Many of the policy issues that EFF works on are linked to security in deep ways including privacy and anonymity DRM censorship and network neutrality.

EFF works directly on a wide range of security issues including increased deployment of cryptographic protocols through projects like HTTPS Everywhere and Certbot; improving the security of those protocols with the SSL Observatory; offering legal assistance to researchers through our Coders' Rights Project; offering practical security advice to activists through the surveillance self-defense project; directly auditing open source codebases; and working on the development of new security standards.

Security Highlights

Encrypting the Web

%3Ciframe%20src%3D%22https%3A%2F%2Fwww.youtube.com%2Fembed%2FI3a0bItZ3sI%3Fshowinfo%3D0%26autoplay%3D1%22%20frameborder%3D%220%22%20width%3D%22650%22%20height%3D%22365%22%3E%3C%2Fiframe%3E
Privacy info. This embed will serve content from youtube.com
The web is in the middle of a massive change from non-secure HTTP to the more secure HTTPS protocol. All web servers use one...

Coders' Rights Project

EFF's Coders' Rights Project protects programmers and developers engaged in cutting-edge exploration of technology. Security and encryption researchers help build a safer future for all of us using digital technologies, but too many legitimate researchers face serious legal challenges that prevent or inhibit their work. These challenges come from laws...

Security Updates

The Playpen Cases: Mass Hacking by U.S. Law Enforcement

In December 2014, the FBI received a tip from a foreign law enforcement agency that a Tor Hidden Service site called “Playpen” was hosting child pornography. The site's actual IP address was publicly available and appeared to resolve to a location within the U.S. After some additional investigation, the FBI...

We Shouldn’t Wait Another Fifteen Years for a Conversation About Government Hacking

With high-profile hacks in the headlines and government officials trying to reopen a long-settled debate about encryption, information security has become a mainstream issue. But we feel that one element of digital security hasn’t received enough critical attention: the role of government in acquiring and exploiting vulnerabilities and hacking for...
Manul banner

Operation Manul

Journalists and political activists critical of Kazakhstan’s authoritarian government, along with their family members, lawyers, and associates, have been targets of an online phishing and malware campaign we believe was carried out on behalf of the government of Kazakhstan. We are releasing our report on the campaign today. This report...

Pages

JavaScript license information