It's a Searchable Log of All Communication and Knowledge, and we're just living in it.
Slack Ipad Video
We are no longer supporting this browser, so you’ll need to switch to one of our supported browsers to keep using Slack. We know this can be a pain, and we’re sorry for asking you to do it. We know this can be a pain, and we’re sorry for asking you to do it. Slack Connect lets two companies move as quickly as one. Hatch a partnership. Build something new. Learn more about Slack Connect. And you can chat face to face, with just a click. And video calling, too. In short: it’s a more human way to work.
Slack knows all your secrets. Your trash talking DMs, your business plans made with the boss, numerous untold corporate musings — they all fill the San Francisco-based company's servers, waiting to be viewed by a nosey CEO, a skilled hacker, or the entire world.
The communications platform that many have come to rely on for both work and staying in touch with friends is, like most things online, a potential privacy disaster waiting to happen. And while you may not have a choice in whether you use the tool, you do have the option to lock its privacy settings down to mitigate any fallout before it's too late.
So let's lock it down.
1. Bosses reading your DMs
If you're using Slack for work, chances are it's a paid plan. This differs from the free version — which, say, your D&D crew might utilize to coordinate campaigns and meet ups — in several important ways.
One is that with the paid version, your boss might be able to read your direct messages. Determining if this setting is enabled is the first step in keeping your DMs secret. Thankfully, there's a way to do this.
While signed into Slack in a web browser, head to slack.com/account/team and then click on 'Retention & Exports.' Scroll down to 'What data can my admins access,' and you'll have your answer.
If the page only says that public data can be exported, your DMs are safe from your boss. However, if it says that 'Workspace Owners can also export messages and files from private channels and direct messages,' then your corporate overlords have the ability to pull your direct messages.
2. Retention settings
OK, so you now know that your boss has the ability to read your direct messages. That sucks, but not all is lost. There are still several ways to protect yourself, or at least reduce the harm that will inevitably come from this.
For starters, you should tweak the so-called retention settings on all of your direct messages. Slack gives workspace owners (i.e. the person managing your company's Slack account) the ability to determine how long messages — both in public channels and direct messages — are saved. That could be for 90 days, for example, or forever.
You can, and should, adjust this setting in your own direct messages. Think of it this way: When your boss pulls a record of employee DMs, would it be better if said boss got years of your direct messages or only the past 24 hours worth? 4l60. Yeah, exactly.
While in a direct message conversation, click on the gear icon in the upper-right corner, then select 'edit message retention.' Next, select 'Use custom retention settings for this conversation,' choose one day (the shortest period of time you can do), and then select save.
Your messages will now automatically delete after 24 hours. Notably, this doesn't necessarily mean they are off Slack's servers once they're a day old (they are likely not), but the messages should no longer be within reach of the aforementioned workspace owner once a day has passed.
Unfortunately, you have to do this for every single direct message conversation, but it's a quick change and definitely worth it.
3. Encrypt it
Slack does not give you the ability to individually encrypt your messages.
There's a way around that, however, in the form of a free browser extension called Shhlack. The extension, available for Chrome, lets you and your coworkers encrypt any and all of your messages. It's pretty simple to use, and means your private convos won't be viewable in cleartext when your boss — or hackers — takes a peek.
Slack Iphone App
Importantly though, as the GitHub page warns, 'This is an experimental and ongoing project' that you should use 'with a grain of salt.' In other words, if anything serious like your job or corporate secrets depend on keeping your messages 100 percent private, then you'll want to take more extreme privacy measures.
4. A change of venue
This one is less of a setting than straight up piece of advice, but it might just save you, so listen up: Any message that, if made public, could get you in trouble should not be sent via Slack at all.
Instead, try creating a private Slack channel (with a short retention setting!), getting the phone numbers of the people you want to chat with, and then messaging them on the encrypted messaging app Signal. You can place encrypted phone calls over the free app, have huge group threads, send files, conduct video chats, and set messages to automatically delete after a predetermined amount of time.
There's even a desktop app if you don't like typing with your thumbs.
5. You can't edit away your problem comments
Editing Slack messages after the fact may seem like a surefire way to remove any potentially problematic content. But guess what, some Slack accounts track edits and maintain records of the messages before they were edited.
Knowing if this setting is enabled will help you avoid making the mistake of thinking you're in the clear when, in fact, the only thing you've succeeded at is making it obvious you're trying to cover your tracks.
While logged into your slack account, go to https://my.slack.com/account/workspace-settings and click 'Retention & Exports.'
You'll find the answers you need.
6. 2FA
Keeping your account private means keeping it secure. Protecting your account with two-factor authentication is a great way to keep hackers and snoopers out.
To set it up, when signed in, head to my.slack.com/account/settings. Next, click 'Two-factor Authentication' and follow the necessary prompts. You'll need to have an authenticator app downloaded on your smartphone to make this work, but there are tonsof safechoices that work with Slack.
Trust me: You really want this security feature enabled.
7. A clean slate
Let's say you want to leave Slack, or you're leaving a company and will no longer be using that Slack account. You might assume that deleting your account takes care of any residual personal data of yours, but that is definitely not the case.
Instead, you actually have to ask the workspace 'primary owner' to ask Slack to delete your profile info.
SEE ALSO: Slack's IPO filing shows it fears a Facebook-style privacy disaster
'When members leave a workspace or org, they may have the right to request their profile information be deleted by the Primary Owner,' explains the company. 'As the data controller, the Primary Owner is responsible for determining whether profile information requires deletion.'
That primary owner must then email Slack at feedback@slack.com with a specific deletion request, noting 'the member’s email address and your workspace URL.'
Once you've taken that step, you're finally free to enjoy your privacy.
Slack Connect DMs were unveiled last fall and now the company is rolling out support for the new feature. It means you can message partners, clients, etc. outside of your organization or anyone that’s on Slack. Going further, Slack also teased more advanced communication features coming later this year to create private business networks that will link multiple organizations.
Update: Discovered by Menotti Minutillo, it looks like Slack may need to update how Connect DMs work to prevent the feature from being abused. For now, there doesn’t appear to be a way to block incoming invites and the included custom messages. Check out the tweet from Menotti below for full details.
Update 2: After hearing about the abuse flaws, Slack has pulled the option to send a custom message when requesting to send DMs. The new feature is still live, it’s just the ability to send a custom message when inviting others to DM that has been removed.
The company shared the statement with The Verge:
“After rolling out Slack Connect DMs this morning, we received valuable feedback from our users about how email invitations to use the feature could potentially be used to send abusive or harassing messages. We are taking immediate steps to prevent this kind of abuse, beginning today with the removal of the ability to customize a message when a user invites someone to Slack Connect DMs,” Jonathan Prince, the company’s vice president of communications and policy, tells The Verge.
Slack Ipad Dark Mode
Slack detailed Connect DMs becoming available starting today and more new business communication features that will be launching in the future in a pair of blog posts (via The Verge). While the ability to direct message anyone on Slack will have lots of use cases for businesses and organizations, any paid Slack account can use the feature to slide into the DMs of both paid and free Slack users.
Slack Connect is a faster, more secure way to work than emailing people outside your company. It’s the same Slack you use every day, but with people outside of your workspace.
Simply send an invite to any partner and start messaging in Slack as soon as the other side accepts. If you need a dedicated space for planning projects and looping in others, create channels between organizations, where members of invited organizations can freely come and go as needed.
We’re seeing the feature live now. You can check if it’s available for you by clicking “Slack Connect” near the top of your sidebar in Slack. From there you’ll just need the email of the person you’re wanting to message to get started.
Once your partner accepts the emailed invitation, they’ll automatically appear in your list of direct message recipients and you’ll be able [to] message them in Slack. This includes any current user of Slack, even those on the free plan.
Free users can’t send Connect DMs for now unless they sign up for a trial of a paid Slack plan. But the feature is slated to arrive for all Slack users soon.
Slack Ipad Share Screen
You can find more tips and details in Slack’s blog post on Connect DMs here.
And in another post today, Slack shared how it will expand all this with the ability to “Link together multiple organizations to create a private business network, allowing for unified directories, channel discovery and more (available later this year).”
FTC: We use income earning auto affiliate links.More.