🔒 Cybersecurity for lawyers

The wiki is a primer for lawyers on practical cybersecurity, to improve the security of your law firm. It is run by Internet, tech, and telecoms law firm, decoded.legal (decoded.legal on Tor).

It is aimed mainly at lawyers in small law firms, without security expertise readily available.

It is a wiki so, if you want to contribute, please do.

If you want to access this site within Tor, it is available as an .onion service.

This site is not a substitute for taking your own, expert, advice, and not all guidance will suit your needs or threat model. If you face particularly severe threats, or attacks aimed specifically at you, get professional support.

It is not a complete guide. There will be threats it doesn’t mention, things some might do differently, and simply differences of view as to the best way to do something.

Basically, if this helps you, great. But whatever you do or don't do, it's all at your own risk.

Everyone's level of technical skill varies. If you are not confident implementing guidance which is relevant to your needs, take advice.

The security that's appropriate for your needs will depend on your own specific situation. Hopefully, the information here is useful, and helps you head in the right direction. But it's a free online resource, written by people you do not know, so you should not trust it.

It will, hopefully, make you more secure, but it will not make you unhackable. If you want more assurance than you get from a free website, take professional advice.

The sensible starting place is "Thinking about security" and then "Identifying risk and prioritising your approach".

If you have a heard a term and you are not sure what it means, check our Glossary.

Otherwise, jump straight in to what you want.

• plan my firm's approach
• identify risk and prioritise my approach
• document my firm's policies and processes
• use public Wi-Fi more safely
• browse the web more securely
• secure my office's Wi-Fi
• secure my firm's website
• use email more securely
• use alternatives to email (including file transfer tools)
• use more secure audio and video services
• secure my Internet traffic when working remotely: VPNs and Tor
• use USB sticks more securely
• secure my devices (general)
• secure my computer
• get some help with passwords (including password managers)
• travel more safely
• back up my devices
• replace my computer or phone
• buy a new computer or phone
• secure my documents (including wiping metadata)
• use a "cloud" or other third party hosted service
• increase my firm's resilience against outages and problems
• use social media in my law firm more securely
• get a cybersecurity accreditation

Yes!

You can read this site without registration.

If you want to edit or add to this site, please email Neil.

No. If it's that good, one of your users will hopefully add it.

Here