Security audit of new SecureDrop Inbox completed
Empowering journalists and whistleblowers to communicate safely.
SecureDrop is an open source whistleblower submission system installed
on-premises by news organizations around the world.
Featured Items
-
The new SecureDrop Inbox is coming
A new SecureDrop Inbox will be released in the next few weeks, the result of work begun by the team in July 2025 to redesign how journalists process submissions. SecureDrop Workstation users will receive it automatically during a system update.
-
Help SecureDrop test WEBCAT Alpha
Like experimenting with cutting-edge software? Our decentralized project to verify web assets and in-browser code for web applications has entered alpha testing
-
SecureDrop: Looking back at 2025
Journalists are working harder than ever to protect their sources. SecureDrop has never been more important
-
Security Analysis of SecureDrop Protocol Presented at IETF 124
SecureDrop software engineer Cory Myers and ETH Zurich researcher Felix Linker gave a talk entitled “SecureDrop — From Design to Analysis” to the Usable Formal Methods Research Group at the 124th meeting of the Internet Engineering Task Force in Montreal on Nov. 4, 2025.The SecureDrop Protocol is …
-
Implementing ‘just-works’ printing in SecureDrop Workstation
SecureDrop serves as a tips entry point for news organizations, often with a small set of journalists reviewing incoming submissions and distributing them to the rest of the newsroom. The next-generation SecureDrop Workstation supports conveniently exporting submissions to encrypted USB drives and USB-connected printers.But getting printing to work can …
-
RightsCon: Introduction to SecureDrop Workstation
SecureDrop team member Kunal Mehta demo’d the SecureDrop Workstation at RightsCon 2025 on Feb. 25. You can watch a recording of the talk (also see below); the slides (PDF) are also available.In the demo, Mehta explained the multiyear project to provide better and more streamlined tools for journalists to …
-
Five things to know about SecureDrop
Over the past month, Freedom of the Press Foundation has received significant interest in newsrooms setting up SecureDrop. Our open source whistleblower submission system is already used around the globe by large media organizations, small nonprofit newsrooms, and everything in between. We’re excited to see more adoption of SecureDrop.To …
-
The long and winding road to safe browser-based cryptography
What is the basis for trusting the code that performs browser-based encryption? To read more about a problem that is legally old enough for a learner’s permit in several U.S. states, read the full article here.
-
SecureDrop completes sixth security audit
SecureDrop has completed its sixth security audit, conducted by 7ASecurity and sponsored by the Open Technology Fund. The audit identified three vulnerabilities—one medium-severity and two low-severity—all of which were fixed in the SecureDrop 2.10.0 release. In their report, the auditors praised SecureDrop's robust defense against a broad range …
-
SecureDrop Workstation 1.0.0 Released
SecureDrop Workstation 1.0.0 has been released, offering significant security and usability enhancements for journalists. Key improvements include support for Qubes 4.2, automatic retries for downloads, and new media format compatibility. With these updates, the project transitions into an open beta, enabling more newsrooms to migrate to the next-generation user experience …
