CIA Urges Iranians to Hide IPs in Recruitment Drive

The United States potential conflict with Iran is moving into its next chapter. Both sides are set for another round of negotiations, according to Al Jazeera, with President Trump warning of military action if no agreement is made.

While there is no formal declaration of war, preparations are already underway. According to Reuters, the CIA has already “posted on social media new Farsi-language instructions for Iranians wishing to contact the spy service securely.“

This is fairly standard for security government agencies to look for individuals to work for them behind enemy lines during wartime. However, they have added a note that reveals their preference for security measures when communicating with the CIA:

“Use a trusted Virtual Private Network, not headquartered in Russia, Iran, or China, or the Tor Network, which encrypts data and hides the user's IP address.“

This is the most straightforward advice on choosing a VPN to secure your communication with the CIA or anyone else.  Encrypting your IP address is not as straightforward as it seems, especially when you're dealing with personal and national security.  Here’s the breakdown of the advisory on ensuring encryption during communication:

●    Selecting the Right VPN Provider - Every VPN promises security and privacy to its clients. However, a VPN company could compromise its promise when pressured by its government. Some might even work with the government to ensure their business continues uninterrupted.

●    Tor Browser - Not a VPN in itself, but it is a well-known browser that supports privacy and anonymous communication. It is also open-source, meaning it is not controlled by a single entity that could be compromised through government pressure.

Hiding Your Real IP Address As a Priority

The CIA’s tips on selecting a good VPN are a great start to completely securing your location by encrypting your IP address. Selecting a good VPN company is a great start, but you should also look for the following features:

●    No-Log Policy - A VPN should only store the minimum information needed for users to sign in and use the service, and should not keep records of what users do online. This policy should be checked and verified by an independent third-party auditor.

●    Strong Encryption Protocols - to protect their users, a VPN should use strong encryption protocols. These VPNs should use WireGuard or AES-256 encryption.

Most, if not all, VPN companies claim to have these features. However, it is important to check reviews and news about these VPN companies. Many VPN companies were in trouble with their users when it was leaked that they do not adhere to the no-log promise they parade as a feature. This is the reason why it is never a good idea to use a free VPN for sensitive communication. If a service is free online, you become the product. Free VPNs encrypt your IP address to your target website, but they keep logs of everything you do and use them for their personal profit.

Being smart about personal security does not require a genius-level familiarity with the internet. Simply make sure the tools you use to hide your IP address have been vetted for privacy and will not be compromised by external pressure.