Skip to main content
Ctrl+K
SecureDrop latest documentation - Home SecureDrop latest documentation - Home
  • Welcome to SecureDrop’s documentation!

Introduction

  • What makes SecureDrop unique?
  • SecureDrop Workstation and Qubes OS
  • Getting support
  • History and credits

Source Guide

  • SecureDrop for Sources
  • Before you submit
  • How to submit
  • After you submit

Journalist Guide

  • SecureDrop for Journalists
  • Starting Qubes
  • Starting SecureDrop Inbox
  • Communicating with Sources
  • Exporting and printing
  • Working with exported files
  • Ending your session

Admin Guide

  • SecureDrop for Administrators
  • Installation
    • 1. Acquire compatible hardware
    • 2. Prepare installation media
    • 3. Prepare email accounts for alerts
    • 4. Install Qubes OS and SecureDrop Workstation packages
    • 5. Generate the Submission Key
    • 6. Install Admin Workstation
    • 7. KeePassXC password manager for Administrators
    • 8. Transfer public keys to Admin Workstation
    • 9. Set up the network firewall
      • 9.1. Setting up an OPNSense network firewall
      • 9.2. Setting up a pfSense network firewall
    • 10. Prepare the Servers
    • 11. Install SecureDrop on the Servers
    • 12. Apply Admin Workstation configuration
    • 13. Create an Administrator account on the Admin Interface
    • 14. Install Journalist Workstation
    • 15. Test the installation
  • Migration
    • Install Qubes OS and SecureDrop packages for migration
    • Migrate Journalist Workstation from Tails
    • Migrate Admin Workstation from Tails
    • Removing the passphrase from a GPG key
  • Onboading users
    • Provisioning USB Export Devices
    • Onboard Journalists
    • Onboarding Administrators
    • Using a YubiKey with the Admin Interface
    • Managing clipboard access
    • Offboard Administrators and Journalists
  • Publishing your SecureDrop
    • Landing Page
    • Getting an onion name for your SecureDrop
    • Whole site changes
    • Sample SecureDrop privacy policy
    • Promoting your SecureDrop instance
  • Maintenance
    • Server maintenance
      • Backing up and restoring Servers
      • Updating SecureDrop Servers
      • Server BIOS updates
      • Server logs
      • Analyzing OSSEC alerts
      • Troubleshooting OSSEC
    • Workstation maintenance
      • Backing up and restoring Workstations
      • Updating Workstations
      • Workstation logs
      • Workstation BIOS updates
      • Rebuilding an Admin Workstation
      • Troubleshooting Workstation connection problems
      • Troubleshooting securedrop-manage
      • Troubleshooting Qubes issues during installation
    • Decommission SecureDrop
    • Rotate the Submission Key
  • Reference
    • The Admin Interface
    • The securedrop-admin Utility
    • Logging in via SSH
    • SSH over local network
    • Configuring OSSEC fingerprint verification
    • HTTPS on the Source Interface
    • Tor proof-of-work defense on the Source Interface

Appendices

  • Glossary
  • Frequently Asked Questions
  • Passphrases
  • Hardware Recommendations
  • Threat model
  • Data flow diagram
  • Attacks and countermeasures on the SecureDrop environment

Downloads

  • PDF
  • Show source
  • Suggest edit

Workstation maintenance

Workstation maintenance#

  • Backing up and restoring Workstations
  • Updating Workstations
  • Workstation logs
  • Workstation BIOS updates
  • Rebuilding an Admin Workstation
  • Troubleshooting Workstation connection problems
  • Troubleshooting securedrop-manage
  • Troubleshooting Qubes issues during installation

previous

Troubleshooting OSSEC

next

Backing up and restoring Workstations

By SecureDrop Team and Contributors

© Copyright 2015-2026, Freedom of the Press Foundation.