Secondary Phone Checklist ("burner phone light")

 Last reviewed on March 22, 2025
 Takes about 3 hours

Your regular phone contains vast amounts of personal data that could put you and others at risk if seized by the cops.

"Burner Phone" vs "Secondary Phone"

  • Burner phone: A truly anonymous burner phone that is entirely disconnected from you identity. Usually only used a handful of times before it is discarded. It requires a great deal of work to set up and keep it truly anonymous. We don’t recommend this for most folks.

  • ✅ Secondary phone for activism: This is second phone that has minimal information on it in case it is confiscated. You can reuse it over many actions. The goal isn’t anonymity, but harm reduction — reducing the amount of data you risk turning over.

Why not just bring my regular phone?

  • Police can access data on confiscated phones even without your passcode, and can often crack 6-digit codes quickly. A secondary phone protects your sensitive personal and organizing information by keeping it on a separate device.

  • Your phone's unique identifiers can be captured by police surveillance devices like Stingrays, creating a permanent record of every protest you attend.

What data am I protecting?

Here’s a list of some of the kinds of data on your phone that might be worth protecting

  • all your contacts (friends, family members, and other organizers/activists)

  • your location data and map history - This can be used to determine where you’ve been and deduce who you have met with. This can be used to implicate you and your comrades in legal charges.

  • your message history (texts, Signal, WhatsApp, etc.)

  • your email history dating back years in most cases

  • your browser history, bookmarks, and saved passwords

  • all your photos (including of other people, “activists” and otherwise, whose images risk capture and scrutiny without their consent)

  • your calendar events (who you meet with, when, and where)

  • your documents (google docs, and even encrypted tools like Cryptpad if you’re signed in to your account)

What protection will a secondary phone offer? Why bother?

  • If your secondary phone gets confiscated, the cops wont be able to extract nearly as much information.

  • They also won’t be able to install spyware on your normal phone which can be used to track you or compromise your passcode or anything you type.

  • You’re protecting not just yourself, but the people you’re organizing with who may be at higher risk than you because of their identity or circumstances (person of color, queer, trans, undocumented person, Arab/muslim). Their contact info and messages are on your phone.

  • If you are already the target of state surveillance, it’s much less likely that they know about this secondary device (assuming you rarely use it). So your movements and communications are more likely to remain private and secure.

What you’ll need

  • A secondary smartphone (used phone or inexpensive new phone): $60+ or free if you can get one donated

  • SIM card: $5

  • Prepaid plan: Around $15/month (cheapest) or $100/year (best for long-term use)

  • Setup time: 3 hours

  • Technical difficulty: Moderate

  • Maintenance: 30 minutes after each use

Setup Guide

If you want the tl;dr version of this guide: Get a phone. Make sure it's unlocked. Go to a store in-person to buy a SIM card and a service plan in cash. Make an email account on Proton Mail and use that when you need to make an account with your cell provider and Apple/Google. Don't use your real email/phone to register anything. Activate the phone. Install Signal.

Pick a prepaid cell provider

DO: Tracfone and Mint Mobile are good options.

If you’re buying a new phone, you might end up choosing the provider based on what is in stock near you.

We use Tracefone because it offers the best plan for occasional use at protests.

If you know you want unlimited data use, Mint Mobile and Tracfone are both good options and cost about at $15/month.

Consider paying in cash

Once again, we're not trying to achieve anonymity here, so paying with a card is fine, but why not add one additional buffer layer between your identity and this device?

If you need to buy online, you can purchase a prepaid Visa credit card (aka: "gift card") with cash (and a mask) at a store, then use that online. This will work best for services (like the prepaid plan), but if you have to buy products (like the phone), you might have to use an address anyway. It's best to buy products in-person.

Get a phone (cheap vs more secure)

Most affordable phone model: ($50-60 new)

  • Tracfone cheapest smart phone ($50-60 new) Examples: Samsung a03s, Moto G Play

  • Go to the website for your prepaid carrier and search for a smartphone option under $60 dollars.

  • The downside is that you are also buying something new, which increases the demand for conflict minerals.

  • Why are these phones so cheap? They're cheap because they are “carrier locked” to Tracfone. This means they can’t be activated on other networks. They’re counting on your buying plans for a long time to pay it off. They also tend to install lots of junk for data mining purposes.

Best phone models for security

  • iPhone 13 or newer

  • iPhone SE (2022) or newer

  • Pixel 7 or newer

Note: Our opinion is that iPhones are more secure in general than most Android phones. Newer Pixel phones are also secure.

If you have a Google Pixel 6 or new, we highly recommend installing Graphene OS, which is a de-Googled version of Android OS that is incredibly secure and hard for the cops to break.

As of October 2025, these are the models we know more more resistant to cracking and data extraction.

Using an old phone someone has laying around

  • If you already have and old phone laying around or know someone who does, that’s a good option.

  • It may be no longer receiving security updates. If so, be aware that it will be easier for the cops to crack and extract data from if they get ahold of it. Security is often about trade offs. It may be better to have a protest phone that’s no longer getting security updates than to bring your normal phone that is full of sensitive information.

Notes about used phones

  • Make sure it is “unlocked” (not tied to a specific carrier).

  • Make sure battery will get you through a day of heavy use (or be prepared to bring a battery pack and a charging cable)

  • Check if still receiving security updates

  • The older the phone, the are more vulnerable it is likely to be to the cracking/extraction tools cops use (like Cellebrite and Graykey)

Where to buy a cheap, new phone?

  • Big Box Stores (Best Buy, etc.)

  • Pharmacies (CVS, Walgreens, etc.)

  • Convince Stores (7-Eleven, etc.)

Buying online is an option, though it is even easier to track. Our goal isn’t anonymity here, so that’s okay. But if you’re able to buy it in-person, that’s better. If you’re able to buy with cash, that also provides a layer of separation.

Buy a SIM card

If you bought a phone new directly from the prepaid provider: it probably comes with a SIM card already. Read the box or ask whoever you're buying it from. If it has a SIM already, you can skip to the next step.

If you are bringing your own phone, you need to buy a SIM card.

How to buy a SIM card

You can buy prepaid SIM cards at the same place you can buy a phones and prepaid service plans: Best Buy, 7-11, etc.

Examples:

Buy a prepaid plan

Most phones don’t come with any minutes or data, so you need to buy a prepaid service plan.

How to get prepaid minutes/data

You can buy prepaid SIM cards at the same place you can buy a phones: Best Buy, 7-11, etc.

Here’s the plan we recommend to get started:

  • If you’re unsure if you’re going to keep using this: we recommend starting out a 1-3 month unlimited plan to try it out (example: $20 plan from Tracfone).

  • If you’re sure you will keep using this phone: Get a 12 month plan plan with a a set number of minutes. (We recommend the $99 plan from Tracfone).

Remember to buy these in-store rather than online if you can. If you need to buy online, buy a prepaid Visa card at the store with cash (and a mask).

If you want to compare types of prepaid plans, read the section below.

Types of prepaid plans

Pay As You Go: “fixed X minutes, expires after 30, 60, 90, or 365 days.”

Even though it says something like “400” minutes, that also applies to data (1 megabyte of data usually uses 1 minute). If you go over, you can recharge.

  • Best for long-term use: If you can afford paying for a 12 month plan, it reduces the number of times you have to re-charge your plan (and change your phone number).

  • Example: as of October 2025, Tracfone offers a $99 plan of 400 minutes that expires after 365 days. The line must be used at least once every 6 months to preserve your number.

Unlimited Monthly: “Unlimited talk/text/data for 1, 3, 6, 12 months. Expires after that time.“

Notes

  • Your number will expire: Make sure to use the phone once a month. If your prepaid plan expires, you have a short grace period before you lose that phone number. You can easily get a new one by activating a new card, but you’ll have to re-activate Signal.

  • Tip: Set a reminder to refill your plan before it expires!

Advanced: See our instructions about using a data-only SIM. There are some options that never expire, which are ideal for a secondary phone like this, but it takes more to set up.

Create a separate email account

  • You will use this email to set up your prepaid mobile account and your phone app store account (Apple or Google).

How to create an anonymous email account

Option 1: Use an email alias

If you already have a Proton Mail account, you can use their "hide my email" alias feature (or any other email alias provider).

Option 2: Create a new email account

  1. Create a separate email account (we recommend Proton Mail)

  2. Use a random username generator to help this account be less strongly tried to your identity. (Again, we’re not aiming for total anonymity, but we are trying to create a bit of a buffer.)

Set up the phone (or reset it)

How to set up the phone

  1. Factory reset the device if it is used. Instructions: iPhone / Android

  2. Skip or decline all optional account setup (phone, location tracking, analytics/tracking, cloud backup, etc.)

  3. Important: Do NOT sign in with your normal Apple / Google Account during the initial setup process (or at any other point). You will be prompted to, but look closely for a “skip” button. Ideally you want to activate the phone BEFORE you make the Apple/Google account, since they usually require a phone number and you want to use your new number.

Activate the phone

This is how you turn on phone service

How to activate the phone

  1. If you got a used phone, put the SIM card in the phone.

  2. Activate: Follow the instructions on the prepaid plan card to activate it. This will usually involve:

    • Select "I want a new number" (rather than porting an existing number)

    • Telling them a zip code they can use to find a phone number for you. You can put in any zip code, it doesn't have to be near where you live. Make sure to write it down just in case.

    • The PIN code for your plan. You'll need to scratch it off the card to reveal it.

    • The IMEI number for your phone. You can find this in system settings.

  3. Make an account: As part of activating, you'll usually need to make an account with the cell provider. When asked for an email address, use the new email you set up that is separate from your main account.

    • Do not use your real name for when making the account.

    • Do not give them a credit card. This will tie your identity very closely to the account. There is almost always an option to skip this part—it is a prepaid phone, after all!

  4. Restart your phone: After you finish the activation steps, you may need to restart the phone before it gets service.

Set up a separate Apple/Google account for the app store

How to setup a separate Apple/Google account

  1. Create the account

  2. You will need a phone number to verify your new account. Thankfully, you should be able to receive texts on your protest phone now.

  3. Sign into the new account in your phone’s settings

  4. Visit the Apple App Store or Google Play Store to confirm that you’re now able to download apps

Tips

  • Don’t use your real name when making this account.

Install & configure Signal

You have two options for how you use Signal:

Option 1: Use a totally separate Signal profile for this phone (recommended)

  • Pros: Your phone is always ready to go, no additional set up needed. More data is secure.

  • Cons: You may miss communication from people who don't know about this separate account

Option 1: How to set up a separate Signal profile

  1. Follow the standard Signal activation steps for this new number.

  2. Then set up a username.

  3. Start talking to folks

    • Then tell your contacts your new signal username. Message them on your main Signal account first to verify that it really is you who is messaging them on a new account.

    • You may want to message your main Signal account from your new one so you can send information between the two. Make sure disappearing messages are turned on.

    • Have someone add you to the groups that are relevant to this action. (Make sure to leave Signal groups when they are no longer active or relevant.)

    • Note: Every Signal group you join from this phone provides more information if your phone is confiscated. The whole point of this secondary phone is to reduce the data the cops can get if they confiscate your phone. So try to join as few as possible, and make sure disappearing messages is set for a short period of time.

  4. Make sure to follow our Signal Checklist so that it is configured to be as secure as possible

Option 2: Migrate your existing account to this new number temporarily

  • Pros: Anyone who is trying to reach you using your standard Signal profile will be able to reach you on this new device.

  • Cons:

    • You can only have one phone linked to your Signal account at a time, so you will be signed out of Signal on your main phone.

    • Any secondary devices (computer, or tablet, etc) will become 'unlinked,' and will need to be re-connected to your Signal account to continue receiving messages

    • More data is exposed (contacts, messages) if your phone is confiscated.

    • You have to move it back and forth every time you want to use your protest phone.

  • Consider this option if you really need to know that you don’t miss any messages from someone who didn’t hear about your secondary account.

Option 2: How to migrate your existing Signal account temporarily

Follow these steps to change your number on Signal.

Install Magic Earth as your maps app

How to

  1. Install Magic Earth on this phone

  2. Open the app once to download the maps you need for offline use

  3. Practice using it before you need it! It's going to feel very different.

Install a secure browser

Write down or save your important phone numbers

How to save your numbers offline

We recommend having a way to call your 2-3 top emergency contacts. Some idea:

  • Paper: Having a slip of paper may be most secure, but you risk losing it or having it confiscated.

  • Memorize: Now might be a good time to memorize a new phone number — a good thing to have for other kinds of emergencies.

  • Phone contact list: Add a couple of contacts to your phone book. Use one letter for their name or some kind of code name.

Follow the entire prepare for a protest checklist

All of the items in the Prepare for a Protest checklist still apply to a protest phone. Even though you’re exposing much less data, you still have Signal installed, which contains data you want to protect.

How to secure your phone for a protest

Follow the Prepare for a Protest checklist.

Especially important:

  • Having a strong 10-digit passcode.

  • Turning off location services

Using the phone for protests/actions

Before each action

  1. ✅ Make sure your phone number is still active and hasn’t expired

  2. ✅  Check your account to make sure you still have minutes/data left if you’re not on an unlimited plan.

  3. ✅  Charge your phone

  4. ✅  Download needed offline maps

After each action

  1. ✅  Clear all app data (messages, browsing, maps)

    • Remove Signal message threads and leave Signal groups that your protest phone doesn’t need to be a part of anymore

    • Clear browser history/data (if you’re using Tor, this automatic)

    • Clear map/navigation history

  2. ✅  if your phone was confiscated by the cops, consider selling it and getting a new one. A factory reset might help, but if they put spyware on it (which only takes them a couple of minutes), there is no guarantee it will be removed with a factory reset.

(Advanced) Use a data-only SIM and a temporary phone number

The approach above is best for most users, but it has some downsides:

  • Even if you buy a year-long plan from a prepaid provider like Tracfone, it will still expire after a year

  • You are paying more for a prepaid plan that includes calling and texting, even though you are just using Signal (over the data plan).

You can save money by using a data-only SIM:

  • You can pay once and the data plan never expires (with certain providers)

  • You can top up when you need

  • Because your plan doesn't include a phone number, texting, or calling, it much cheaper.

However, this approach is more technical because data-only SIMs don't come with a phone number or texting, and you need to receive a text to register accounts with Apple, Google, and Signal.

Use a temporary number to register your Apple/Google account and Signal account

With a data-only SIM, you will still need a phone number to set up your Apple/Google account and your Signal account. You can use a temporary number service to accomplish this for a few dollars.

How to use a temporary numbers service

  1. Create an account on SMSPool.

  2. Deposit a few dollars into your account. Each service you register will cost less than $0.20. So depositing $3-5 should be plenty.

  3. Follow the steps to do a Quick Order and select Apple/Google/Signal as the service. You will only have access to this number for a few minutes.

  4. Enter that phone number when prompted during the account registration flow with Apple/Google/Signal.

  5. You will see a confirmation code show up on SMSPool next to the number you are renting. Enter that in to Apple/Google/Signal as you normally would when you get a confirmation code on your phone by text.

Remember that this phone number won't be yours to use long-term.

Get a data-only eSIM or physical SIM

How to get a data-only eSIM or physical SIM

  1. Check this list to see if your phone model supports an eSIM or not.

  2. If your phone supports eSIM, get a data-only eSIM from Keepgo (North America) (Or if you want to use Monero crypto for anonymity, use silent.link).

  3. If your phone only supports physical SIMs, purchase one from Keepgo (North America) and have it shipped to your location.

  4. Follow the steps to activate your phone using this data plan.

  5. Top-up the plan if you're running low on data. Make sure to check your data balance before you use it for a protect/action.

Give people your Signal username instead of your phone number

How to use a Signal username

  1. Go to Signal > Settings > Privacy > Phone Number > and set "Who can find me by number" to "Nobody". This is important because you don't control the phone number you signed up with.

  2. Set a Signal PIN to help protect the phone number you are using in case someone else tries to register an account with that phone number in the future.

  3. Create a Signal username.

  4. When people want to connect with you on Signal, give them this username instead of your phone number.

(Advanced) How to set up a true burner phone

As mentioned above, setting up a true burner requires an incredible amount of diligence, which is why we suggest the "lighter" approach described above.

If you need a much higher degree of protection and anonymity, you could go to these lengths.

Tips to acquire and use a "true burner" phone

To set up a true burner, you'd want to make sure to do the following things (in addition to everything outlined in the "secondary phone" guide above):

  • Purchase the phone and plan with cash and try to avoid your face being recorded. Do not bring your devices. Avoid driving your car

  • Never turn the phone on at your home, work, or any place you go to frequently. (Unless it is off and in a high-quality faraday bag.)

  • Never turn the phone on near other devices (phone, tablet, smart watch, etc).

  • Activate it by connecting to public WiFi at coffee shop (or something similar)

  • Never give the number to anyone you associate with normally and do not text/call anyone you associate with normally. This implies that you're either contacting one person (ex: a whistleblower contacting a journalist) or you're contacting a network of other folks who are using true burner phones.

  • Never sign in to any of you normal accounts on this phone.

  • Create separate, anonymous accounts only on the phone (not your home internet). And preferably with Tor Browser when possible.

  • Avoid other pattern-of-life associations. Does your other phone suddenly stop moving/texting/calling at the same time this phone turns on? If you are experiencing targeted surveillance, you may need to find a way to reduce the correlation between the two.

  • ... And many other steps that we can't go into in this guide!

And finally, this is generally a short-term use phone. Once you fail to do one of these, the phone should be considered compromised and you should "burn" it by destroying the phone and the SIM and starting the process over. What counts as "compromised" is different based on how you're using the phone. It could mean that you accidentally turn it on at home or near your primary device. It could mean that someone in your network of burner phones turned their phone

Even if you follow all of the guidelines perfectly, you should only use the phone for a limited period of time because it will start to develop it's own "pattern of life" where it shows up at the same locations that can be tracked. If it is a very high risk action, you should only use the phone that one time.

And even if you do all of this, you shouldn't talk about sensitive topics on the phone or when the phone is nearby. You should only use the phone to coordinate and use coded language to discuss sensitive topics.

Here are some burner phones guides with more in-depth instructions:

Have Questions?

We want to hear your questions/feedback so we can make these guides useful to folks working for change.