SecureDrop Docs v: latest

Versions: stable; latest; 2.12

Downloads: PDF

A project of Freedom of the Press Foundation · Privacy Policy

Introduction

What Is SecureDrop?
What Makes SecureDrop Unique?
SecureDrop Workstation and Qubes OS
Getting Support

Source Guide

SecureDrop for Sources
Before You Submit
How To Submit
After You Submit

Journalist Guide

SecureDrop for Journalists
Starting Qubes
Starting the SecureDrop App
Communicating with sources
Working with Submissions
Ending your session

Admin Guide: Installation

Introduction for SecureDrop Administrators
Installation Overview
Hardware
Passphrases Overview
Prepare email accounts
Prepare a SecureDrop Workstation
Generate the Submission Key
Using the KeePassXC Password Manager
Set Up the Network Firewall
Setting Up a pfSense Network Firewall
Setting Up An OPNSense Network Firewall
Prepare the Servers
Install SecureDrop on the servers
Apply Configuration to Admin Workstation
Create an Admin Account on the Journalist Interface
Test the Installation
Provisioning Export USB devices
Troubleshooting Qubes issues during installation
Troubleshooting OSSEC

Admin Guide: Migration

Migration Overview
Migrating from a Tails-Based SecureDrop
Migrating a Journalist Workstation
Removing the Passphrase from a GPG Key

Admin Guide: Deployment

Onboard Journalists
Deployment Overview
Protecting the Security of the System
Landing Page
Getting An Onion Name for Your SecureDrop
Whole Site Changes
Sample SecureDrop Privacy Policy
Promoting Your SecureDrop Instance
Using a YubiKey with the Journalist Interface
Tor Proof-of-Work Defense on the Source Interface
HTTPS on the Source Interface
SSH Over Local Network
Configuring OSSEC fingerprint verification

Admin Guide: Reference

The Admin Interface
Analyzing the alerts
Logging in via SSH
Off-board Administrators and Journalists
The securedrop-admin Utility

Admin Guide: Maintenance

Upgrade Guide
Investigating Logs
Troubleshooting connection problems
Backing Up and Restoring Servers
Rebuilding an Admin Workstation USB
Updates over Tor
Troubleshooting Kernel Updates
BIOS Updates on the Servers
Decommission SecureDrop
Backup and Restore
BIOS Update Instructions
Reviewing and exporting logs
Troubleshooting system updates
Managing Clipboard Access

Appendices

Glossary
Threat Model
Data Flow Diagram
Attacks and Countermeasures on the SecureDrop Environment
SecureDrop On-Site Training Schedule

SecureDrop

Migrating a Journalist Workstation
Edit on GitHub

Migrating a Journalist Workstation

Previous Next

© Copyright 2015-2022, Freedom of the Press Foundation.

Built with Sphinx using a theme provided by Read the Docs.