SecureDrop

Free and open source whistleblower submission platform. A @freedomofpress project.

Public Key

npub1npddzeaty9as02n2a6u4jessta4aj2jezmy7sa0faz0m6990lk5sv402r2

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsfskk3v74jz7c84f4waw2evcg9767e9fv3dj0gwh5738aazjhlm2gpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qxt600e

Publishing to

relay.ditto.pub

Author Public Key

npub1npddzeaty9as02n2a6u4jessta4aj2jezmy7sa0faz0m6990lk5sv402r2

Show more details

Last Notes

2026-09-24 20:16:38 GMT

We have updated our guidance for sources, to warn against using AI chatbots or services linked to their personal identity.
We also strongly recommend that newsrooms using SecureDrop update their landing pages with these new warnings.
https://securedrop.org/news/updated-landing-page-guidance/
#OpenSource #Whistleblowing

2026-09-10 14:35:02 GMT

We will be rotating the SecureDrop release signing key next year.
This is a routine signing key rotation as a best practice; the current key is still secure and in active use.
The new key will be distributed in releases later this year and start signing releases in 2027.
https://securedrop.org/news/new-release-signing-key/
#OpenSource #Whistleblowing #OpenPGP

2026-08-05 17:58:03 GMT

SecureDrop Inbox 1.6.0 is now available!
This release adds support for double-encrypted messages and files, improves the source menu, and includes a small speedup to the sync process.
https://securedrop.org/news/securedrop-inbox-1_6_0-released
#OpenSource #Whisleblowing

2026-07-28 18:03:00 GMT

"It could be as significant an upgrade as HTTPS."
A nice explainer of WEBCAT, our project to make JavaScript tamper-proof and the web a safer place for everyone:
https://blog.siv.org/2026/07/verifiable-web-code

2026-06-24 14:28:22 GMT

SecureDrop 2.16.0 is now available, with a number of improvements to APIv2, and a fix for a low-severity security vulnerability:
https://securedrop.org/news/securedrop-2_16_0-released/
#OpenSource #Whistleblowing

2026-06-22 14:08:53 GMT

Qubes 4.2 is now end-of-life. All SecureDrop Workstation users should be using Qubes 4.3.
If you have not upgraded, please contact support immediately.
https://securedrop.org/news/qubes-4_2-is-end-of-life/
#OpenSource #Whistleblowing #Qubes

2026-06-03 21:15:56 GMT

SecureDrop Inbox 1.3.2 is now available!
This update adds warnings and safeguards when deleting large numbers of sources.
https://securedrop.org/news/securedrop-inbox-1_3_2-released
#OpenSource #Whistleblowing

2026-05-28 20:59:01 GMT

SecureDrop Workstation 1.6.2, for Qubes 4.2, and 1.7.1, for Qubes 4.3, are now available!
These releases remove the legacy SecureDrop Client and enable an upgrade script to make preparing for the Qubes 4.3 upgrade simpler.
https://securedrop.org/news/securedrop-workstation-1_6_2-and-1_7_1-released
#OpenSource #Whistleblowing #Electron #Qubes

2026-05-19 21:08:30 GMT

We're grateful to @nprofile…g30f and Funding the Commons for including us in this crowdfunding campaign alongside nine other cool projects as a new way to fund internet freedom!
https://internetfreedom.torproject.org/projects/securedrop/

2026-05-13 21:52:14 GMT

SecureDrop Inbox 1.2.0 is now available! This release increases the number of results returned by search, improves file handling and sync performance, and carries out other internal cleanup.
https://securedrop.org/news/securedrop-inbox-1_2_0-released
#OpenSource #Whistleblowing #Electron #Qubes

2026-04-28 22:05:23 GMT

The inaugural release of SecureDrop Inbox is now available! 🎉
The Inbox is a full rewrite of our client, and includes many new features and performance improvements for journalists.
https://securedrop.org/news/securedrop-inbox-1_0_0-released
#OpenSource #Whistleblowing #Electron #Qubes
https://cdn.masto.host/socialfreedompress/media_attachments/files/116/484/595/631/173/663/original/cbeaa47b81e8b833.mp4

2026-04-23 17:42:53 GMT

SecureDrop 2.15.1 is now available, improving memory management while handling APIv2 requests, and fixing an issue with restoring backups without transferring over the network:
https://securedrop.org/news/securedrop-2_15_1-released
#OpenSource #Whistleblowing

2026-04-09 20:53:08 GMT

SecureDrop Inbox, the new window into the SecureDrop Workstation, has been rewritten from the ground up to replace the previous client application for existing journalist users.
Improving upon the core functionality, it also includes bug fixes, speed improvements, and a range of new features.
https://securedrop.org/news/new-features-in-securedrop-inbox/
#OpenSource #Whistleblowing #Electron #Qubes

2026-04-06 20:40:05 GMT

SecureDrop Workstation 1.5.2 has been released, as well as SecureDrop Client 0.17.4.
This update contains multiple security fixes, all of which are low or informational priority. We are not aware of any exploitation in the wild for any vulnerability.
https://securedrop.org/news/securedrop-workstation-1_5_2-released/
#OpenSource #Whistleblowing #SecureDrop

2026-03-03 18:44:54 GMT

Web applications are only as trustworthy as the servers that serve them, and servers can get hacked. That’s why we are introducing WEBCAT, a tool allowing web browsers to verify the origin of code before they run it.
🌞 Today, WEBCAT enters alpha testing! If you like to experiment with cutting-edge software, give it a try:
https://securedrop.org/news/webcat-alpha/

2025-07-14 21:43:17 GMT

SecureDrop Workstation 1.2.1 has been released!
This release introduces a preemptive fix to prevent potential breakage caused by a bad Qubes update. If you've already applied the bad update and are affected, instructions to manually fix it are in our advisory blog post.
https://securedrop.org/news/advisory-securedrop-workstation-1_2_1-released/

2025-03-19 20:33:25 GMT

Today we're releasing WEBCAT, a set of open-source tools that enables tamper-proof web applications.
This is a major milestone on the path to the next generation of SecureDrop, to provide trustworthy browser-based encryption.
https://securedrop.org/news/introducing-webcat-web-based-code-assurance-and-transparency/
#SecureDrop #browsers #Tor #whistleblowing #OpenSource

2025-03-18 19:07:35 GMT

SecureDrop 2.12.0 has been released, adding support for Ubuntu Noble, plus a semiautomated upgrade process. Administrators can upgrade themselves before April 15 or wait for our automated upgrade process after that date.
https://securedrop.org/news/securedrop-2_12_0-released/
#security #whistleblowing #OpenSource

2025-03-04 17:10:41 GMT

FYI, if you use Bluesky, we now have an official account there as well:
https://bsky.app/profile/securedrop.org
We'll still keep posting updates here on the fediverse, of course.

2025-02-21 23:07:02 GMT

Attending #RightsCon in-person or online? Don't miss @nprofile…uelm presenting and demoing the new #securedrop Workstation on Tuesday at 4:30pm TST / 3:30am EST!
#SecureDrop #security #whistleblowing #OpenSource

2025-02-18 22:18:28 GMT

We’ve seen significant interest in newsrooms setting up SecureDrop to better protect whistleblowers, so we've put together a quick list of 5 key things you should know before setting it up:
https://securedrop.org/news/five-things-to-know-about-securedrop/
#SecureDrop #security #whistleblowing #OpenSource

2025-02-13 18:26:19 GMT

SecureDrop Workstation 1.0.2 has been released, addressing two security vulnerabilities we found during internal review.
These vulnerabilities would have required prior compromise of other SecureDrop components in order to be exploitable. Nonetheless, we recommend users upgrade ASAP.
More details in the advisory: https://securedrop.org/news/securedrop-workstation-1_0_2-released/
#SecureDrop #Whistleblowing #OpenSource

2025-01-15 15:56:44 GMT

- reply

FOR SOURCES: If you’re considering leaking information, make sure to consider your options and protect yourself. For more information, follow the thread guide to install Tor Browser on a trusted computer and visit:
freedom[dot]press/digisec/blog/sharing-sensitive-leaks-press

2025-01-15 15:55:46 GMT

- reply

FOR JOURNALISTS: SecureDrop provides strong security through its use of offline encryption and the Tor network, but sources still need your help to protect themselves, especially in monitored environments.
Find out more: https://freedom.press/digisec/blog/leaking-clock-what-your-sources-need-know/

2025-01-10 02:49:33 GMT

Out of an abundance of caution, SecureDrop administrators should upgrade Admin and Journalist Workstation USBs to Tails 6.11
https://securedrop.org/news/advisory-upgrade-to-tails-611/
#SecureDrop #Whistleblowing #OpenSource

2024-12-19 17:07:48 GMT

Almost every platform but the web supports code verification. For web apps that rely on encryption, that's a problem. Here's why: https://securedrop.org/news/browser-based-cryptography/
#SecureDrop #Whistleblowing #OpenSource

2024-12-17 23:25:11 GMT

SecureDrop 2.11.0 has been released. This release lays the foundation for an automated upgrade to Ubuntu 24.04 (Noble) in early 2025. Administrators are encouraged to review the new Noble migration guide before Jan. 31.
https://securedrop.org/news/securedrop-2_11_0-released/
#SecureDrop #Whistleblowing #OpenSource

2024-12-13 20:54:17 GMT

SecureDrop 2.11.0 is scheduled to be released Dec. 17. This release lays the foundation for an automated upgrade to Ubuntu 24.04 (Noble) in early 2025. Administrators are encouraged to review the new Noble migration guide and perform the preparatory steps before Jan. 31.
https://securedrop.org/news/securedrop-2_11_0-pre-release-announcement/
#SecureDrop #Whistleblowing #OpenSource

2024-11-21 20:26:40 GMT

SecureDrop Client 0.14.0, part of the SecureDrop Workstation, has been released. This release adds support for selecting and deleting multiple sources simultaneously, improving the experience for journalists working with high-traffic instances.
https://securedrop.org/news/securedrop-client-0_14_0-released/#SecureDrop
#Whistleblowing #OpenSource #Qubes