You've probably seen the stamp. TOP SECRET. That said, it shows up in movies, in leaked documents, in FOIA responses with half the page blacked out. In practice, cLASSIFIED. REDACTED. But here's the thing most people never stop to ask: who actually decides that a piece of information gets that stamp in the first place?
Not the president. Not some shadowy figure in a basement. The answer is both more bureaucratic and more interesting than you'd think That's the whole idea..
What Is Classification Authority
Classification authority isn't a single person. It's a legal framework — a chain of delegation that starts with the President and flows down through specific officials who've been granted "original classification authority" (OCA). Because of that, that's the technical term. Original classification authority means you can look at a piece of information, decide it meets the criteria, and slap a classification level on it for the first time.
Easier said than done, but still worth knowing.
Everyone else? Also, they're doing derivative classification. They're copying a decision someone else already made.
The President sits at the top. After that, it gets delegated. Agency heads. Still, certain senior officials. So does the Vice President. The list is published in the Federal Register. In real terms, executive Order 13526 (signed by Obama, kept by Trump, kept by Biden) makes it explicit: the President has original classification authority. That's why always has. You can look it up right now — it's not secret Easy to understand, harder to ignore..
The Three Levels (And What They Actually Mean)
You know the names. Top Secret. Confidential. Secret. But the definitions matter.
Confidential — unauthorized disclosure could reasonably be expected to cause damage to national security. Lowest tier. Still classified Took long enough..
Secret — unauthorized disclosure could reasonably be expected to cause serious damage. This is where most classified information lives. The bulk of it.
Top Secret — unauthorized disclosure could reasonably be expected to cause exceptionally grave damage. The highest standard. Also the smallest bucket by volume.
There's also SCI — Sensitive Compartmented Information — and SAP — Special Access Programs. Those aren't classification levels. They're handling controls. Even so, extra layers on top of Top Secret. You need a separate indoctrination, a separate "read-on," for each compartment. Just because you have a TS clearance doesn't mean you see everything at that level. Not even close The details matter here. Less friction, more output..
Why It Matters / Why People Care
Over-classification is a real problem. The government classifies roughly 50 million documents a year. Day to day, fifty million. That's not a typo. The Public Interest Declassification Board has been saying for years that the system is bloated, that too much gets stamped Secret when it shouldn't be, that the backlog for declassification review is measured in decades.
But under-classification is dangerous too. Which means leaks happen. Here's the thing — spies exist. Foreign intelligence services are good at their jobs. The classification system exists because some information genuinely does cause harm if it gets out — sources and methods, war plans, nuclear designs, the identities of human assets.
The tension between those two realities is the whole game.
And it's not abstract. Plus, people go to prison for mishandling classified information. Contractors lose clearances. This leads to careers end. The designation decision — that moment when someone says "this is Secret" — has real consequences for everyone who touches that document afterward.
How It Works (or How to Do It)
The Six Criteria
Executive Order 13526, Section 1.Now, 4, lists exactly six categories of information that can be classified. If it doesn't fit one of these, it legally cannot be classified. Period Small thing, real impact..
- Military plans, weapons systems, or operations
- Foreign government information
- Intelligence activities, sources, or methods
- Foreign relations or foreign activities of the US
- Scientific, technological, or economic matters relating to national security
- Nuclear materials, facilities, or information
That's the universe. Plus, if your memo about office supply budgets doesn't fit, it stays unclassified. No exceptions.
The Classification Decision Process
An original classification authority (OCA) receives or creates information. They ask three questions, in order:
First: Does this fall into one of the six categories? If no, stop. It's unclassified.
Second: Could unauthorized disclosure reasonably be expected to cause damage to national security? The OCA has to articulate what damage, how it would happen, and why it's reasonable to expect it. "It might embarrass us" doesn't count. "It might reveal a source who would be killed" does.
Third: What level? Confidential, Secret, or Top Secret? The OCA picks the lowest level that matches the expected damage. You don't get to over-classify "just to be safe." The order explicitly forbids it.
Then they mark it. Every page. That said, every slide. Every email. Portion markings — those little (C), (S), (TS) tags at the start of paragraphs — so anyone reading knows exactly which parts are classified and at what level.
They also assign a declassification instruction. "Declassify on: 2035-01-01" or "Declassify on: OADR" (Originating Agency Determination Required). On top of that, the default is 25 years. Some things stay classified longer — nuclear info, intelligence sources — but 25 years is the rule unless an exception applies.
Derivative Classification: Where Most of the Work Happens
Here's the part people miss. The vast majority of classified markings in the government aren't applied by OCAs. They're applied by derivative classifiers — people who are incorporating already-classified information into new documents Nothing fancy..
Say you're writing a briefing for your boss. Think about it: you have to mark the whole document Secret. Now, you paste it in. You pull a paragraph from a Secret report. You now have to mark that paragraph (S). So you have to carry forward the declassification date. You have to cite the source document in a classification guide or on the document itself.
If you get it wrong — if you mark it Confidential when the source was Secret — that's a security violation. If you fail to mark it at all? Also a violation. Consider this: derivative classifiers don't make new classification decisions. They propagate existing ones. But they're legally responsible for doing it correctly.
Easier said than done, but still worth knowing.
Classification Guides
Agencies don't expect every derivative classifier to guess. " These guides are themselves classified (usually). Consider this: they publish classification guides — detailed documents that say "information about X program is Secret" or "the fact that we operate in Y country is Confidential. They're the reference manual for the workforce.
A good classification guide saves thousands of hours. A bad one creates confusion, over-classification, and violations Not complicated — just consistent. No workaround needed..
Common Mistakes / What Most People Get Wrong
"The President can classify anything." Technically true — but in practice, the President delegates. The President doesn't sit around stamping documents. OCAs do. And OCAs are bound by the same six categories and the same damage standard. A President could override, but it almost never happens that way.
"If it's classified, it must be important." Nope. Some of the most boring documents in the government are classified. Training schedules. Logistics spreadsheets. Old weather data from a classified platform. The classification reflects potential damage from disclosure, not intrinsic importance.
"Classified means secret forever." The default is 25 years. Automatic declassification review happens at 25 years unless an agency exempts specific records. By 50 years, almost everything comes out. By 75 years, it's legally
required. Most historical research done today involves documents that are fully declassified Took long enough..
"Only the original classifier needs to know." Wrong. Classification propagates through the derivative process, and everyone handling the document must maintain its classification level. A junior analyst working on a Secret briefing must treat it as Secret, regardless of their clearance level.
"Redaction solves everything." Redaction is a separate process that happens during declassification, not during active classification. You still need to classify the document properly first, then redact during the declassification review.
The Human Element
Classification isn't a technical exercise—it's a judgment call made by humans under pressure. The system works because people take it seriously, even when the bureaucracy feels overwhelming. Most violations aren't malicious; they're honest mistakes in fast-moving environments where a single misstep can compromise sources or operations Worth knowing..
The key is understanding that classification serves a purpose: protecting the nation from specific, identifiable harm. It's not about hiding embarrassment or avoiding accountability. When people grasp that distinction, they make better decisions Which is the point..
Looking Ahead
As technology evolves, so do classification challenges. Digital collaboration tools, cloud storage, and remote work have created new vulnerabilities that traditional classification systems weren't designed to handle. Agencies are adapting with automated classification tools and updated guidelines, but the fundamental principles remain unchanged Most people skip this — try not to..
Most guides skip this. Don't.
The future of classification lies in balancing security with accessibility—protecting what truly needs protection while allowing legitimate access to information that supports democratic governance. It's a delicate balance that requires constant vigilance and adaptation.
Conclusion
Classification is a complex, evolving system that most government workers figure out daily without thinking about it. But when it works properly—when the right people have access to what they need and nothing more—it enables the government to function effectively while protecting national security.
Understanding the three main pathways—original, derivative, and automatic classification—helps clarify why these systems exist and how they interlock. Whether you're a cleared professional handling sensitive materials or a citizen wondering why certain government information remains hidden, recognizing that classification serves concrete security purposes makes the bureaucracy more comprehensible.
The 25-year default declassification timeline ensures that most information eventually returns to the public domain, supporting transparency and historical understanding. Meanwhile, derivative classification ensures that sensitive information maintains its protection as it moves through the system, and classification guides provide the consistency needed across thousands of decisions.
Short version: it depends. Long version — keep reading.
In the end, classification works because it's rooted in real security needs, not arbitrary secrecy. When approached with that understanding, it becomes not a burden to circumvent, but a system to manage thoughtfully Easy to understand, harder to ignore..
