The Promise and Peril of Digital Security in the Age of Dictatorship — La promesa y el peligro de la seguridad digital en tiempos de dictadura  

Jul 3, 2025

LGBTIQ+ organizations in El Salvador are using technology to protect themselves and create a record of the country’s ongoing authoritarian escalations against their community. It’s not without risks. — Las organizaciones LGBTIQ+ de El Salvador recurren a la tecnología para protegerse y documentar la escalada autoritaria contra su comunidad. No es un esfuerzo exento de riesgos.

STEVEN RODRÍGUEZ TRAVELED more than 40 miles from his home in Santa Ana, in western El Salvador, to attend the Pride march in the capital on June 28. It is the second time he has attended. There, some 20,000 people gathered in a mix of celebration and protest for the rights of sexual diversity. But this year, joy was replaced by fear.

“Maybe it won’t escalate, but there is a fear that what happened to the El Bosque cooperative will happen. But, from deep down I believe that, as people, we have the right to a dignified life. If it’s not me, who else is going to defend my experiences,” says Rodríguez about his decision to attend in the midst of the authoritarian escalation that the country is experiencing.

When Nayib Bukele assumed power in 2019, one of his first actions was to eliminate the Directorate of Sexual Diversity. In February 2024, during his participation in the Conservative Political Action Conference in the US, he made his position clear: “We do not allow those ideologies in schools and colleges. I think it is also important that the curriculum does not include gender ideology and such things.”

Rodríguez’s main fear is that the march will serve as an excuse to criminalize its attendees. Earlier this year, on May 12, a hundred members of the El Bosque cooperative held a peaceful protest to avoid being evicted. This was repressed by the military police and ended with the arrest of community leader José Ángel Pérez and lawyer Alejandro Henríquez for public disorder. Both are serving provisional detention in a penal center. In the past four months, at least six human rights defenders have been arrested in the country for political reasons.

On the afternoon of June 28, the march ended peacefully and, at least on the ground, no arrests were recorded.

Training Day

Rodríguez is part of a collective called Pedrina, which focuses on community articulation for LGBTIQ+ rights in the West. His approach to digital security began when members of the organization started receiving insults, threats, and hate messages on social networks.

Rodríguez and his collective received digital security training from Amate, another LGBTIQ+ organization that advocates nationally. Since May, Amate has trained 60 people on issues including digital rights, risk analysis, extortion, phishing, outing, surveillance, and revenge porn. It also includes the implementation of tools such as the use of VPN and encrypted messaging platforms, such as Signal and Proton.

“Something that activists were telling us [that] is very common is that people take their Facebook photos and impersonate them on social networks, either to attack other collectives or to undermine personal aspects. So it’s a very interesting experience. People are not aware of the exposure we have in the digital world,” says Fernando Paz, who is in charge of teaching these courses.

For Rodríguez, these tools are a way of confronting a country that, with government support, is becoming increasingly violent towards those who represent diversity.

“At the university, we have had experiences of hate speech in classes. Professors have said that they share Bukele’s thinking on gender ideology and that this has to disappear because it poisons the youth,” Rodríguez says.

One way the government has used to hide violence against the LGBTIQ+ community is the lack of accounting of hate crimes committed in El Salvador. In recent years, the country’s Attorney General’s Office, also known as FGR, has used the categories “murder due to social intolerance” and “murder due to family intolerance” to count homicides that it cannot attribute to what it calls “general crime” (mostly, according to the government’s narrative, perpetrated by gangs). There is no clarity about what falls into these categories, which are not official, are not defined, and are only used publicly—not within administrative reports. Between 2023 and 2024, the FGR counted 182 of these cases.

Hit Record

In the face of statistical obscurity, the exercise of documenting and archiving hate crimes has been taken up by organizations. The Passionist Social Service, an anti-violence group, found that 154 LGBTIQ+ people have been detained during El Salvador’s emergency regime, which began in March 2022 and has been extended 39 times to date. Following this, Nicola Chávez and her team saw the need to record cases of violence against members of the LGBTIQ+ population.

“We had always intended to start an observatory, but with the start of the exception regime everyone knows that police violence and military harassment have a disproportionate impact on the LGBT community. Obviously that hurts us, and I don’t know who else they count on to be able to denounce,” Chávez says.

To date, Chávez’s team has registered 68 incidents of violence against LGBTIQ+ people, although they believe there could be more. One of the main challenges has been to create a centralized database of the information that each member had kept on their own.

“One of the big frustrations has always been that we don’t have consistency when it comes to storing information,” Chávez says. “To make this database, I had to go from computer to computer, collecting information in emails and loose files.”

Chávez, a doctoral student in American Studies and archivist, applied her knowledge to compile and organize the information. For her, it’s crucial to secure the databases that contain sensitive information related to the victims’ allegations under the emergency regime. One of the keys is to protect the data with multiple layers of security and to use encrypted platforms with automatic self-destruct functions, such as CryptPad.

The authoritarian escalation in El Salvador has forced organizations to be more cautious with their public work. For this reason, Chávez requested that her organization not be mentioned for fear of reprisals following the recent approval of the Foreign Agents Law, which requires those receiving international funds to register as “foreign agents.” If authorized, they would be subject to a 30 percent tax on all foreign funding, a measure that opponents of the legislation say seeks to economically stifle dissenting voices.

El Salvador’s political situation has forced them to contemplate several scenarios on how to safeguard information. The most critical implies that the government may consider the activities of their organization as a direct contravention of the law and raid their offices. Another concern is that, at the time of registration, they will be required to hand over the contents of the devices.

“The registry is designed as an all-powerful entity. There are minimum requirements to be able to register, but they have the power to demand whatever they want,” says Chávez. “There are no limits in the regulations on what they can request. What worries us is that, as part of a routine process, they want to seize computers, hard disks, etc.”

The passage of this law to control speech and information is not an isolated case. In November 2024, El Salvador’s Congress passed laws establishing the creation of the State Cybersecurity Agency, whose powers include managing cyber threats and overseeing data protection compliance.

“The government of El Salvador has created an entire infrastructure to have not only social, but also digital control of the citizenry. With the creation of this agency, an oversight tool is enabled for issues related to information, the use of technology and our digital identity,” explains Joshi Leban, a specialist in advocacy and digital literacy.

The records that Chávez is so keenly guarding also have a vision in which this hope for justice persists.

“At some point, perhaps this will become an international litigation, or it may be that this government ends and a process of oversight of what has happened begins. In that scenario, it will serve that the organizations have put these facts on record as documentation.”

Wired: https://www.wired.com/story/the-promise-and-peril-of-digital-security-in-the-age-of-dictatorship/

La promesa y el peligro de la seguridad digital en tiempos de dictadura  

STEVEN RODRÍGUEZ recorrió más de 65 kilómetros desde su hogar en Santa Ana, al occidente de El Salvador, para asistir el 28 de junio a la marcha del Orgullo en la capital. Era la segunda vez que participaba. Allí se congregaron unas 20 000 personas, en una mezcla de celebración y protesta por los derechos de la diversidad sexual. Este año, sin embargo, la alegría cedió el paso al temor.  

«Quizá esto no escale, pero existe el miedo de que nos pase lo mismo que a la cooperativa El Bosque. Aun así, creo firmemente que, como personas, tenemos derecho a una vida digna. Si no soy yo, ¿quién va a defender mis vivencias?», explica Rodríguez sobre su decisión de asistir pese a la escalada autoritaria que padece el país. 

Cuando Nayib Bukele asumió la presidencia en 2019, una de sus primeras medidas fue eliminar la Dirección de Diversidad Sexual. En febrero de 2024, durante su participación en la Conservative Political Action Conference en Estados Unidos, dejó clara su postura: «No permitimos esas ideologías en las escuelas y colegios. También es importante que el currículum no incluya la ideología de género ni esas cosas».  

El principal temor de Rodríguez es que la marcha sirva de pretexto para criminalizar a sus asistentes. El 12 de mayo, un centenar de miembros de la cooperativa El Bosque realizó una protesta pacífica para evitar su desalojo. La Policía militar reprimió la manifestación y arrestó al líder comunitario José Ángel Pérez y al abogado Alejandro Henríquez por desórdenes públicos. Ambos guardan detención provisional en un centro penal. En los últimos cuatro meses, al menos seis defensores de derechos humanos han sido detenidos por motivos políticos.  

La tarde del 28 de junio, la marcha concluyó sin incidentes y, al menos sobre el terreno, no se registraron detenciones.  

Día de entrenamiento 

Rodríguez forma parte del colectivo Pedrina, dedicado a articular esfuerzos por los derechos LGBTIQ+ en el occidente del país. Su interés por la seguridad digital comenzó cuando los miembros empezaron a recibir insultos, amenazas y mensajes de odio en redes sociales.  

El colectivo recibió capacitación de Amate, otra organización LGBTIQ+ con presencia nacional. Desde mayo, Amate ha formado a 60 personas en derechos digitales, análisis de riesgos, extorsión, phishing, outing, vigilancia y porno vengativo, además del uso de VPN y plataformas de mensajería cifrada como Signal y Proton. 

«Algo muy común —nos decían quienes participan— es que alguien toma sus fotos de Facebook y suplanta su identidad para atacar a otros colectivos o perjudicarlos en lo personal. La gente no dimensiona la exposición que tenemos en el mundo digital», explica Fernando Paz, responsable de las capacitaciones.  

Para Rodríguez, estas herramientas son una forma de enfrentar a un país que, con respaldo gubernamental, se vuelve cada vez más violento contra quienes representan la diversidad.  

«En la universidad hemos escuchado discursos de odio en clase. Hay catedráticos que dicen compartir el pensamiento de Bukele sobre la “ideología de género” y afirman que debe desaparecer porque envenena a la juventud», relata.  

Una de las maneras en que el Gobierno oculta la violencia contra la comunidad LGBTIQ+ es la falta de registro de crímenes de odio. En los últimos años, la Fiscalía General de la República (FGR) usa las categorías “homicidio por intolerancia social” e “homicidio por intolerancia familiar” para contabilizar asesinatos que no puede atribuir al “crimen general” (según el relato oficial, perpetrado mayoritariamente por pandillas). Nadie aclara qué incluye cada categoría, que no es oficial ni está definida y solo se emplea de forma pública, no en informes administrativos. Entre 2023 y 2024, la FGR registró 182 casos así.  

Grabar la agresión 

Frente a esa opacidad, la documentación y el archivo de crímenes de odio han recaído en la sociedad civil. El Servicio Social Pasionista, organización contra la violencia, determinó que 154 personas LGBTIQ+ han sido detenidas durante el régimen de excepción instaurado en marzo de 2022 —y prorrogado 39 veces hasta hoy—. A raíz de ello, Nicola Chávez y su equipo vieron la necesidad de registrar la violencia contra la población LGBTIQ+.  

«Siempre quisimos montar un observatorio, pero con el régimen de excepción sabemos que la violencia policial y el acoso militar golpean especialmente a la comunidad LGBT. Eso nos duele y, francamente, no sé en quién más confiar para denunciarlo», explica.  

Su equipo ha documentado 68 incidentes, aunque sospecha que la cifra real es mayor. Crear una base de datos centralizada ha sido un reto:  

«Una gran frustración es la inconsistencia en cómo guardamos la información. Para montar la base tuve que ir equipo por equipo, rescatando correos y archivos sueltos».  

Chávez, doctoranda en Estudios Americanos y archivista, aplicó sus conocimientos para organizar los expedientes. Considera vital blindar las bases que contienen datos sensibles de víctimas en el régimen de excepción. Para ello usa varias capas de seguridad y plataformas cifradas con autodestrucción automática como CryptPad. 

La escalada autoritaria obliga a las organizaciones a extremar precauciones. Por eso, Chávez pidió omitir el nombre de su entidad, temiendo represalias tras la aprobación de la Ley de Agentes Extranjeros. Quien reciba fondos internacionales debe inscribirse como «agente extranjero» y pagar un impuesto del 30 % sobre esos fondos, medida que críticos califican de estrangulamiento económico a las voces disidentes.  

El panorama político obliga a contemplar escenarios duros para resguardar la información. El más crítico: que el Gobierno considere su labor una infracción y allane sus oficinas. Otro riesgo es que, durante el registro, les exijan entregar el contenido de sus dispositivos.  

«El registro está diseñado como una entidad todopoderosa. Piden requisitos mínimos, pero pueden exigir lo que quieran —advierte—. El reglamento no marca límites. Nos preocupa que, como trámite rutinario, confisquen computadoras, discos duros, lo que sea».  

La aprobación de leyes para controlar discurso e información no es aislada. En noviembre de 2024, la Asamblea Legislativa creó la Agencia Estatal de Ciberseguridad, facultada para gestionar amenazas y vigilar el cumplimiento de la protección de datos.  

«El Gobierno ha tejido toda una infraestructura para ejercer control social y digital. Con la agencia, se habilita un mecanismo de supervisión sobre la información, la tecnología y nuestra identidad digital», señala Joshi Leban, especialista en incidencia y alfabetización digital.  

Los registros que Chávez custodia con tanto celo también contienen una apuesta por la justicia.  

«Quizá esto derive en un litigio internacional o quizá, cuando este gobierno termine, haya un proceso de rendición de cuentas. En cualquiera de los casos, será útil que las organizaciones hayamos dejado constancia de lo ocurrido».

Wired: https://www.wired.com/story/the-promise-and-peril-of-digital-security-in-the-age-of-dictatorship/