This is a very short discussion paper about the way in which terrorist groups, and specifically Islamic State, use modern encryption systems to evade surveillance. It examines how the risks of online anonymity are weighed against its many social, personal and economic benefits. It sets out a small number of recommendations about how the intelligence and security services might respond to the growing availability and use of encryption services.