Written Message Systems: Dead Drops and OPSEC for Physical Communication

The Case for Physical Messages

Electronic communication has vulnerabilities beyond equipment failure: it can be monitored, traced, and associated with the sender. A physical note has different properties:

• It exists only where it is physically located
• It cannot be intercepted in transit (since it does not travel through a network)
• It can be destroyed after reading
• The physical handwriting and content are the only identifiers

In a grid-down scenario, written messages delivered by foot courier or left at pre-agreed locations become the primary long-distance communication medium for many groups. In a scenario involving surveillance or security concerns, physical messages with basic operational security are often more secure than any digital system.

Materials for Field-Durable Written Communication

Paper:

• Rite in the Rain paper is manufactured to be waterproof — you can write on it with ballpoint pen in heavy rain, and the ink does not run. Available in notepad and loose sheet formats. Keep at least one 100-sheet pad in every communications kit.
• Standard paper in a waterproof enclosure (Ziploc bag) is the field-expedient alternative.
• Laminated cards for pre-written messages: create them before the emergency, seal with lamination film, store in the kit.

Writing instruments:

• Fisher Space Pen: Writes in any orientation, in cold or heat, through moisture. The standard choice for reliable field writing.
• Rite in the Rain pens: Specifically designed for use on their waterproof paper.
• Sharpie permanent marker: Bold, highly readable, waterproof when dry. For messages intended to remain readable in all conditions.
• Pencil: Works on everything, including wet surfaces. The simplest most reliable option.

Containers for dead drops:

• Waterproof plastic container with a snap or screw lid (Nalgene, military surplus ammo can, small Pelican case)
• PVC pipe section with cemented end caps (for concealed burial)
• Zip-lock bags double-sealed (minimum viable waterproofing)

Establishing a Dead Drop System

Site Selection

The ideal dead drop location:

• Known to both parties before the emergency (you cannot negotiate a location during an emergency if communication is down)
• Hidden from casual observation
• In a location that provides a plausible reason for both parties to be present (a specific rock in a public park, a fence post on a rural road, a library book location)
• Stable — it should not change seasonally or be disturbed by routine activity

Multiple drops: Establish at least two dead drop locations for each communication pair. If one location is compromised or inaccessible, the backup is available.

The Signal System

The signal indicator tells you there is a message waiting without requiring you to check the drop itself (which reveals the location to any observer).

Physical signal types:

• A specific stone moved to a specific position (on a fence post, in a specific gap in a wall)
• A chalk mark on a specific surface (the underside of a specific mailbox post, inside a park bench leg)
• A thumbtack placed in a specific object (a power pole, a fence board) — remove to signal the message has been picked up
• A natural object arranged in a specific way (three sticks in a triangle versus scattered)

Signal conventions:

• Signal present = message waiting for you at the drop location
• Signal absent (or alternate signal) = drop is clear
• Emergency signal = separate pre-agreed arrangement that means "do not approach the normal drop, meet me at the secondary rally point instead" or "system is compromised"

Message Pickup Protocol

Do not approach the dead drop directly and immediately after checking the signal. Use surveillance detection:

1. Observe the drop location from a distance for several minutes
2. If you see anyone lingering near the location, do not approach
3. Approach by a route that does not directly pass the drop location first — approach from a 90-degree angle
4. Retrieve the message quickly
5. Do not read the message at the drop location — leave, move away, then read

Replace the signal indicator after pickup to signal that the drop is clear.

Writing Messages with OPSEC

What to include:

• The minimum information necessary to convey the intended message
• A date and time reference (so the recipient knows when it was written)
• A verification element (a pre-agreed word, phrase, or fact that confirms the message is genuine)

What to exclude:

• Full names (use pre-agreed callsigns or first names only)
• Addresses (use pre-agreed location names: "the cabin," "the north field")
• Any information that provides intelligence value to an unintended reader
• Details about people not involved in the message exchange

Language: Pre-agreed shorthand reduces the information content for an interceptor. "Arrive Thursday" is clear to the recipient who knows the plan. It reveals very little to an outsider. A code phrase ("the weather looks good") with pre-agreed meaning is less obvious but also less reliable if the recipient forgets the meaning.

Brevity: Short messages are easier to secure, easier to carry, easier to destroy, and harder to extract intelligence from. Every word beyond what is necessary is a risk. Write the minimum.

Message Delivery by Courier

When messages must travel to locations without a pre-established dead drop:

Oral vs. written: For a trusted courier traveling to a trusted recipient, an oral message (memorized and delivered verbally) leaves no physical evidence. The limitation is accuracy over long messages.

For complex or detailed information, written messages are more reliable. The courier carries the message concealed (inside a boot, sewn into a lining, in a buried position within a bag).

Courier identity security: The courier should not know the full content or significance of what they are carrying, if this is operationally achievable. A courier who cannot describe the message content under pressure cannot inadvertently reveal it. For casual community messages during grid-down (not clandestine operations), this level of compartmentalization is not necessary.

Coded Messages: Simple But Effective

For messages that should not be understood by an unintended reader, pre-agreed codes add a layer of security beyond concealment.

Simple substitution: Pre-agreed substitutions: "north" means east, "cabin" means location X, specific numbers mean specific people or places. Both parties have the same substitution list. Write the message in plain language using the substitutions.

Limitation: readable once someone knows the code exists and has the substitution list.

Numeric code: Reference a specific book (both parties have the same edition): each word in the message is coded as [page number]-[line number]-[word position]. A message that reads "43-7-3 17-2-8 219-15-4" is meaningless without the book.

Limitation: requires both parties to have the specific book. Works best for pre-positioned codes where the book is stored at both locations.

One-time pad: As described in the communication encryption article — theoretically unbreakable when used correctly. Requires matching physical pads pre-distributed to both parties.

Infrastructure-Free Message Relay

In a truly grid-down scenario, messages travel at the speed of human movement. A simple relay system:

1. Each community location identifies its two nearest neighbor locations
2. Messages intended for remote locations are passed from location to location, each carrier taking it one step further
3. A message envelope contains only the next destination — the intermediate carriers do not know the final destination or the message content
4. Delivery is confirmed by a return message traveling back the same way

This is how intelligence networks and resistance groups have operated for centuries. It is slow (message speed = walking speed × number of hops), but it works with no infrastructure and no technology.