Digital resilience: redundancy for websites and communications
How you can make your digital life more resilient when using services you don't own.privacy cybersecurity data life websites
When what seems like half the planet noped out of WhatsApp after its terms of service update, applications like Signal (which I highly recommend) saw an unprecedented increase in user traffic. Signal had so many new users sign up that it overwhelmed their existing infrastructure and lead to a 24-hour-ish outage. The small team responded impressively quickly, especially given that a 4,200% spike in new users was utterly implausible before it occurred.
The downside of so many people moving onto this fantastic application is that it caused a brief outage. If you rely solely on a certain application for your communications, brief outages can be debilitating. Even when it seems implausible that your favorite chat, email, or website service could just – poof – vanish overnight, recent events have proved it isn’t impossible.
Have a backup plan. Have several. Here’s how you can improve your digital resiliency for things like websites, messaging, and email.
I recommend Signal because it is open source, end-to-end encrypted, cross-platform, and offers text, voice, video, and group chat. It’s usually very reliable; however, strange things can happen.
It’s important to set up a backup plan ahead of any service outages with the people you communicate with the most. Have an agreement for a secondary method of messaging – ideally another end-to-end encrypted service. Avoid falling back on insecure communications like SMS and social media messaging. Here’s a short list for you to explore:
If you’re particularly technically inclined, you can set up your own self-hosted chat service with Matrix.
Having a go-to plan B can help bring peace of mind and ensure you’re still able to communicate when strange things happen.
Do you know the phone numbers of your closest contacts? While memorizing them might not be practical, storing them solely online is an unnecessary risk. Most services allow you to export your contacts to vCard or CSV format.
I recommend keeping your contacts locally on your device whenever you can. This ensures you still know how to contact people if your cloud provider is unavailable, or if you don’t have Internet access.
Full analog redundancy is also possible here. Remember that paper stuff? Write down the phone numbers of your most important contacts so you can access them if your devices run out of battery or otherwise can’t turn on (drop your phone much?).
If your email service exists solely online, there’s a big email-shaped hole in your life. If you can’t log in to your email for any reason – an outage on their end, a billing error, or your Internet is down – you’ll have no way to access your messages for however long your exile lasts. If you think about all the things you do via email in a day, I think the appropriate reaction to not having local copies is 🤦.
Download an open source email client like Thunderbird. Follow instructions to install Thunderbird and set it up with your existing online email service. Your online service provider may have a help document that shows you how to set up Thunderbird.
You can maximize your privacy by turning off Thunderbird’s telemetry.
To ensure that Thunderbird downloads your email messages and stores them locally on your machine:
- Click the “hamburger” overflow menu and go to Account Settings
- Choose Synchronization & Storage in the sidebar
- Ensure that under Message Synchronizing, the checkbox for Keep messages in all folders for this account on this computer is checked.
You may need to visit each of your folders in order to trigger the initial download.
Some other settings you may want to update:
- Choose Composition & Addressing and uncheck the box next to Compose messages in HTML format to send plaintext emails instead.
- Under Return Receipts choose Global Preferences. Select the radio button for Never send a return receipt.
You don’t need to start using Thunderbird for all your email tasks. Just make sure you open it up regularly so that your messages sync and download to your machine.
I strongly believe you should have your own independent website for reasons that go beyond redundancy. To truly make your site resilient, it’s important to have your own domain.
If you know that my website is at the address
victoria.dev, for example, it doesn’t matter whether I’m hosting it on GitHub Pages, AWS, Wordpress, or from a server in my basement. If my hosting provider becomes unavailable, my website won’t go down with it. Getting back up and running would be as simple as updating my DNS configuration to point to a new host.
With your own domain, you can build resiliency for your email address as well. Learn how to set up your custom domain with your email provider. If you need to switch providers in the future, your email address ports to the new service with you. Here are a few quick links for providers I’d recommend:
- ProtonMail: How to connect a custom domain?
- Tutanota: Adding of custom email domains
- Fastmail: Custom Domains with Fastmail
I hope you’ve found this article useful on your path to building digital resiliency. If you’re interested in more privacy topics, you might like to learn about great apps for outsourcing security.
If your threat model includes anonymity or censorship, building digital resiliency is just a first step. The rest is outside the scope of my blog, but here are a few great resources I’ve come across: