SecureDrop

Web applications are only as trustworthy as the servers that serve them, and servers can get hacked. That’s why we are introducing WEBCAT, a tool allowing web browsers to verify the origin of code before they run it.

🌞 Today WEBCAT enters alpha testing! If you like to experiment with […]

SecureDrop is bringing our WEBCAT and SecureDrop Protocol projects to the Real World Crypto Symposium on March 9-11 in Taipei, Taiwan.

We’ll be presenting on establishing trust in web applications and on the next generation of SecureDrop!

Read more […]

SecureDrop 2.14.0 Released This release ensures KeePassXC remains installed on Tails. It also lays groundwork for the upcoming SecureDrop App.

SecureDrop 2.14.0 has been released. This release ensures KeePassXC remains installed on Tails. It also lays groundwork for the upcoming SecureDrop App.

https://securedrop.org/news/securedrop-2_14_0-released/

#OpenSource #Whistleblowing #SecureDrop

SecureDrop Client 0.17.2 released This release addresses potential undefined behavior in a dependency

SecureDrop Client 0.17.2 has been released! This release addresses potential undefined behavior in a dependency.

https://securedrop.org/news/securedrop-client-0_17_2-released/

#OpenSource #Whistleblowing #SecureDrop

We are looking for a contract security-focused developer to work on WEBCAT (https://github.com/freedomofpress/webcat), a browser extension and a few other components that bring code integrity and transparency to the web.

Read more and submit a proposal here […]

What does it take to make web applications auditable?

Here's why reproducibility matters, and how WEBCAT—a framework for signing and verifying web applications—approaches the problem in practice.

https://securedrop.org/news/webcat-towards-auditable-web-application-runtimes/

#WebCrypto […]

Journalists are increasingly relying on insider sources, and protecting those sources is more important than ever.

Here's how SecureDrop is rising to the challenge, safeguarding whistleblowers’ anonymity against ever-evolving threats.

https://securedrop.org/news/looking-back-at-2025/ […]

SecureDrop Workstation 1.5.1 Released This minor fix allows configuration from Tails USB sticks for those running version 2.13.0 or greater of SecureDrop

SecureDrop Workstation 1.5.1 has been released! This minor fix addresses a Tails config location change found in version 2.13.0 of the SecureDrop server.

https://securedrop.org/news/securedrop-workstation-1_5_1-released/

#securedrop #whistleblowing #opensource #qubes

SecureDrop 2.13.0 is now available. This release primarily provides the securedrop-admin tool as a Debian package within Tails, and prepares for future availability of the securedrop-admin utility on Qubes OS.

https://securedrop.org/news/securedrop-2_13_0-released/

#securedrop #whistleblowing […]

SecureDrop Client 0.17.1 released This release addresses a low-impact, high-complexity denial-of-service issue

SecureDrop Client 0.17.1 has been released! This release addresses a low-impact, high-complexity denial-of-service issue:

https://securedrop.org/news/securedrop-client-0_17_1-released/

#securedrop #whistleblowing #opensource

SecureDrop is building the next generation of anonymity tools for whistleblowers. SecureDrop software engineer Cory Myers and ETH Zurich researcher Felix Linker gave a talk in Montreal earlier this month about our new, custom messaging protocol […]

SecureDrop Workstation 1.5.0 has been released! This version simplifies the installation process by allowing you to install a bootstrap package from the Qubes-Contrib repo, and removes the remaining dependencies on Whonix.

https://securedrop.org/news/securedrop-workstation-1_5_0-released/ […]

Free the Internet: The Tor Project’s annual fundraiser Is the internet today the internet you want for future generations? What if instead of for-profit greed, rampant privacy violations, and pervasive government spying, we could have a different relationship with the internet? What if we could FREE THE INTERNET from the chains of surveillance and censorship? At the Tor Project, along with our incredible community of supporters, we're not just imagining a free internet — **we're building it** : * In countries like Turkmenistan where access to information is tightly controlled, Turkmen.news trusts Tor to provide safe access to the free internet where it once did not exist. * Freedom of the Press Foundation uses Tor as the backbone of SecureDrop, a tool that allows journalists and sources to communicate freely without fear of retaliation or exposure. * In Russia and Egypt, where authorities often block encrypted tools to control communications, individuals use Tor Browser to access encrypted email services like Tuta Mail to freely communicate. Tor is a building block for a free internet, and it takes our collective efforts to improve and amplify it. That’s why during the next three months, the Tor Project will be holding a fundraising campaign during which we ask for your support to advance digital freedom. As a 501(c)3 nonprofit, the Tor Project relies on donations to power its tools – the Tor network, Tor Browser, Tails OS, and the Tor ecosystem. These tools are trusted by millions and always **free** to use, without collecting, selling, trading, or renting any of your data for profit. This year we are calling to **FREE THE INTERNET** by supporting Tor. If you give now during the campaign, your donation will be matched by our supporters at Power Up Privacy. This means a $25 donation will have a $50 impact – and all donations over $25 will qualify you for fun Tor merchandise. 👀 In the 2023-2024 fiscal year, 84% of our expenses were associated with program services. That means that a very significant portion of our budget goes directly into building Tor and making it better. Those program services include building Tor technology, conducting outreach, and keeping Tor tools up-to-date and secure. We are proud to have a Four-Star Charity rating from Charity Navigator, and have been awarded Candid’s Platinum Seal of Transparency. This demonstrates the Tor Project’s commitment to openness and honesty in how the organization manages its finances and uses your investment for a greater impact. Join us in being defiant against profit-driven tech tools and keeping Tor tools FREE, private, and accessible. Your support today helps build a better internet for tomorrow. * * * To learn more about how Tor is freeing the internet from surveillance and censorship, and how we are putting charitable donations to work, please tune into our annual _State of the Onion_ virtual event to learn more. Save these dates and make your donation today! # Upcoming events * **State of the Onion – the Tor Project (Wednesday, November 12)** * The State of the Onion is the Tor Project's annual virtual event where we share updates from the Tor Project and the Tor community. The event on November 12 will focus on the Tor Project and the organization’s work. * 📺 Stream live on our YouTube channel * **State of the Onion – Community (Wednesday, December 10)** * The State of the Onion is the Tor Project's annual virtual event where we share updates from the Tor Project and the Tor community. The event on December 10 will be a special day celebrating the UN’s adoption and proclamation of the Universal Declaration of Human Rights (UDHR) in 1948 as well. * 📺 Stream live on our YouTube channel # Ways to contribute * **Make a donation** : Donate through our website (or any other method listed on our FAQ and your donation will be matched, 1:1, up to $250,000. * **Ask the company you work for if they will match your donation** : Many corporations will match their employees’ donations to charitable organizations. Ask at work if your company will match your gift. * **Share on social media** : Let the people in your networks know that all donations to the Tor Project are currently being matched. You can easily share a post from our social channels: Mastodon, Bluesky, X, and more. * **Subscribe to Tor News** : No ads. No tracking. Just low-traffic Tor updates via email. * * * # 1:1 Match provided by Power Up Privacy Power Up Privacy is matching all donations to the Tor Project between now and December 31, 2025. Power Up Privacy is an advocacy group that funds privacy-related research and development projects. They seek to make maximum impact by identifying key, underfunded areas in the privacy software ecosystem and injecting resources, financial and otherwise, in order to strengthen the necessary infrastructure we need to preserve freedom and human rights.

Tor is a critical component that helps make SecureDrop an effective tool for connecting journalists with anonymous sources.

Learn more about @torproject's efforts to Free the Internet: https://blog.torproject.org/2025-fundraiser-donations-matched/

We're simplifying how SecureDrop Workstation is installed!

Previously, users needed to manually download and verify an OpenPGP key; now we're eliminating that step without compromising on security.

Learn more in our blog post […]

SecureDrop 2.12.10 Released This is a Journalist and Admin Workstation-only release, which adds support for the recent Tails 7 version

SecureDrop 2.12.10 has been released. This is a Journalist and Admin Workstation-only release, which adds support for the recent Tails 7 version.

https://securedrop.org/news/securedrop-2_12_10-released/

#securedrop #whistleblowing #opensource

SecureDrop Workstation 1.4.0 has been released! This version integrates Tor directly in the sd-proxy VM instead of using Whonix, and fixes an issue that prevented USB devices from automatically attaching.

https://securedrop.org/news/securedrop-workstation-1_4_0-released

#securedrop […]

SecureDrop users, we have heard your requests for an updated support experience! We are now providing support directly via Signal, and will be completing a migration away from Redmine on Nov. 3, 2025

https://securedrop.org/news/changing-how-we-deliver-support/

#securedrop #whistleblowing […]

SecureDrop Workstation 1.3.0 released This version includes an improved installation experience by allowing users to import credentials during setup, and updates the base Fedora template.

SecureDrop Workstation 1.3.0 has been released! This version allows users to import credentials during setup, and updates the Fedora base template to version 42, which re-enables SELinux.

https://securedrop.org/news/securedrop-workstation-1_3_0-released

#securedrop #whistleblowing #opensource

SecureDrop Workstation 1.2.1 has been released!

This release introduces a preemptive fix to prevent potential breakage caused by a bad Qubes update. If you've already applied the bad update and are affected, instructions to manually fix it are in our advisory blog post […]

SecureDrop 2.12.9 has been released. This version disables upgrades from Ubuntu Focal to Noble, and updates Tor Browser safety-level guidance in the Source Interface.

If your SecureDrop is still running Ubuntu Focal, please contact us for assistance in reinstalling with Ubuntu Noble […]

Usually anything related to setting up and configuring printers gets a bad rap, but recently, the SecureDrop Workstation moved to a "just-works" printing approach.

Read how we did it: https://securedrop.org/news/implementing-just-works-printing-in-securedrop-workstation/

#OpenSource […]

SecureDrop Client 0.16.0 has been released! Along with regular dependency updates, this version updates the user interface to include more detailed timestamps of latest source activity, and to use a single typeface across the application […]

Ubuntu 20.04 (Focal) has reached end of life. Any SecureDrop installations that have not upgraded to Ubuntu Server 24.04 (Noble) will automatically take their Source Interfaces offline. If you are already using SecureDrop and your server has not been upgraded, contact us […]

SecureDrop Workstation 1.2.0 released SecureDrop Workstation 1.2.0 has been released! This version brings initial support for driverless printing, making SecureDrop Workstation compatible with a much larger selection of printers.

SecureDrop Workstation 1.2.0 has been released! This version brings initial support for driverless printing, making SecureDrop Workstation compatible with a much larger selection of printers.

https://securedrop.org/news/securedrop-workstation-1_2_0-released/

#securedrop #whistleblowing #opensource

Ubuntu 20.04 (Focal) is now deprecated for use with SecureDrop Application and Monitor Servers. All new SecureDrop installations should use Ubuntu Server 24.04 (Noble). If you are already using SecureDrop and your server did not upgrade automatically, contact support […]

SecureDrop 2.12.8 has just been released, which triggers upgrades to Ubuntu Noble on 100% of Application and Monitor Servers. If either of your servers are not upgraded to Ubuntu Noble with this version installed, please contact support via https://support.freedom.press […]

SecureDrop 2.12.7 has just been released - this version will trigger upgrades to Ubuntu Noble on approximately 40% of all Monitor Servers. If your Application Server has not already been upgraded to Ubuntu Noble, please contact support via https://support.freedom.press […]

SecureDrop 2.12.6 has just been released, which will trigger upgrades to Ubuntu Noble on approximately 20% of all Monitor Servers. If your Application Server has not already been upgraded to Ubuntu Noble, please contact support via https://support.freedom.press […]

SecureDrop Noble Upgrade Progress Upgrades to Ubuntu Noble are going strong, with approximately 40% of all Application Servers updated. Over the next week, we will push a series of point releases to begin automated upgrades of all remaining Application Servers, with Monitor Servers to follow.

SecureDrop 2.12.5 has been released. This version upgrades 100% of Application Servers to Ubuntu Noble. We will begin upgrading Monitor Servers later this week.

https://securedrop.org/news/securedrop-noble-upgrade-progress/

#security #whistleblowing #OpenSource

Upgrades to Ubuntu Noble are going strong, with approximately 40% of all Application Servers updated. Over the next week, we will push a series of point releases to begin automated upgrades of all remaining Application Servers, with Monitor Servers to follow […]