Drones are everywhere these days, from mapping flood zones to patrolling borders. But when you’re a government department using them, data security isn’t just a checkbox – it’s a must. I’ve been flying drones for more than a decade and during my time at DJI I have explained thousand of times how to carefully work with data and what we did at DJI to help government customers protect it. Here’s what I’d do to secure drone data, based on real-world flying and some digging into what works.
Encrypt Everything
First thing: encrypt all your data. Use AES-256 for anything moving between the drone, controller, and ground station – video feeds, GPS, telemetry, you name it. DJI´s own protocols (OcuSync) are AES-256 encrypted as well as protocols for FPV drones, like TBS Crossfire. ExpressLRS on the other side is not encrypted.
For data sitting on the drone’s SD card or external drives, AES-256 is a must too. DJI offers an easy way of encryption of the SD Card in the DJI Pilot app for the DJI Enterprise line up. Click on the “Shield” icon in the upper left corner of DJI Pilot app first:
Then go to “Security Code” tab and encrypt your SD card.
Keep Data Local
I would disable any drone app’s internet access to block connections to third party servers. DJI models have an “offline mode” that’s perfect for this – it is called “Local Data Mode”. If you still need access to Maps, NTRIP connection for RTK or verified 3rd party servers, use “Restricted Network Mode” instead.
Store everything on your own servers, ideally in your country. For sensitive stuff, go air-gapped – no internet at all. I’ve seen departments use this for critical operations.
Use Private Networks / VPN
Set up a dedicated, encrypted network, like a private LTE or VLAN. Most telecom providers offer special SIM cards for governmental use, where the customer decides which connections are allowed or blocked.
The above is usually associated with higher cost, so another option is to use VPN installed on the Remote Controller. If you are already using AirHub´s app for flight logging or for live-streaming, it also offers a built-in VPN – “Secure Data Mode”.
The Secure Data Mode
creates an encrypted connection between your
drone and the AirHub server, preventing anyone
from intercepting or accessing your data.The AirHub VPN also ensures that outgoing data
is monitored and unnecessary outgoing data is
automatically blocked.
Here is how to enable it: Open the AirHub app, start a flight and activate the toggle for Secure Data mode.
As an alternative, you can permanently activate it under the Android Settings of your DJI Remote Controller:
Lock Down Firmware and Apps
Firmware can be a backdoor if you’re not careful. Only install updates that are digitally signed by the manufacturer and scanned for malware. I wouldd download them from a manufacturer´s website only, test them in a sandbox setup, and then roll them out via SD cards (offline update).
For third party apps, stick to approved ones by the manufacturer. Here is a list of DJI´s ecosystem approved partners: https://enterprise.dji.com/ecosystem
Additionally, you can use mobile device management (MDM) software to enforce rules on the Remote Controllers (disable usb storage, wifi, bluetooth, installing apps etc.) It’s a pain to set up, but for extremely sensitive users and data it is worth doing it.
Collect Less, Delete Smart
Only record what you need. Set clear rules: maybe 30 days for routine footage, longer for evidence. When it’s time to delete, don’t just hit “erase.” Use tools that overwrite SD card data (2 times is enough). For PC and Windows users, you could use Eraser (https://eraser.heidi.ie/). I have been using it for years and it’s satisfying knowing the data’s gone for good. For Mac users, there is built-in secure erase function in the MacOS “Disk Utility”.
Secure the Drone Itself
Drones sitting in a warehouse are vulnerable. Store them in a locked, surveilled room, and log who checks them out. Before and after every mission, inspect for weird mods.
When leaving drones in the car, better place these in the car´s trunk and not on the back seat. I heard so many stories where drones were stolen (even from Police cars) while being on the backseat and windows broken.
Why This Matters
Government drones carry sensitive data. If that leaks, it’s a mess. Non-technical people also like to blame manufacturers, only based on their country of origin. A lot of that’s political noise, but it doesn’t hurt to be cautious. These steps keep your data safe without grounding your fleet. I’ve flown DJI drones for years, and with the right setup, they’re as secure as anything else.
Wrapping Up
Data security for drones isn’t rocket science, but it takes effort. Encrypt your data, keep it local, use private networks, lock down firmware, collect less, and guard the hardware. It’s what I’d do to fly worry-free. Got your own security tips? Share them in the comments or hit up DroneHiTech on Facebook and Instagram. Safe flying!
