SecureDrop Docs v: latest
Versions
stable
latest
2.12
Downloads
PDF
A project of Freedom of the Press Foundation ยท Privacy Policy
SecureDrop Logo

Introduction

  • What Is SecureDrop?
  • What Makes SecureDrop Unique?
  • SecureDrop Workstation and Qubes OS
  • Getting Support

Source Guide

  • SecureDrop for Sources
  • Before You Submit
  • How To Submit
  • After You Submit

Journalist Guide

  • SecureDrop for Journalists
  • Starting Qubes
  • Starting the SecureDrop App
  • Communicating with sources
  • Working with Submissions
  • Ending your session

Admin Guide: Installation

  • Introduction for SecureDrop Administrators
  • Installation Overview
  • Hardware
  • Passphrases Overview
  • Prepare email accounts
  • Prepare a SecureDrop Workstation
  • Generate the Submission Key
  • Using the KeePassXC Password Manager
  • Set Up the Network Firewall
  • Setting Up a pfSense Network Firewall
  • Setting Up An OPNSense Network Firewall
  • Prepare the Servers
  • Install SecureDrop on the servers
  • Apply Configuration to Admin Workstation
  • Create an Admin Account on the Journalist Interface
  • Test the Installation
  • Provisioning Export USB devices
  • Troubleshooting Qubes issues during installation
  • Troubleshooting OSSEC

Admin Guide: Migration

  • Migration Overview
  • Migrating from a Tails-Based SecureDrop
  • Migrating a Journalist Workstation
  • Removing the Passphrase from a GPG Key

Admin Guide: Deployment

  • Onboard Journalists
  • Deployment Overview
  • Protecting the Security of the System
  • Landing Page
  • Getting An Onion Name for Your SecureDrop
  • Whole Site Changes
  • Sample SecureDrop Privacy Policy
  • Promoting Your SecureDrop Instance
  • Using a YubiKey with the Journalist Interface
  • Tor Proof-of-Work Defense on the Source Interface
  • HTTPS on the Source Interface
  • SSH Over Local Network
  • Configuring OSSEC fingerprint verification

Admin Guide: Reference

  • The Admin Interface
  • Analyzing the alerts
  • Logging in via SSH
  • Off-board Administrators and Journalists
  • The securedrop-admin Utility

Admin Guide: Maintenance

  • Upgrade Guide
  • Investigating Logs
  • Troubleshooting connection problems
  • Backing Up and Restoring Servers
  • Rebuilding an Admin Workstation USB
  • Updates over Tor
  • Troubleshooting Kernel Updates
  • BIOS Updates on the Servers
  • Decommission SecureDrop
  • Backup and Restore
  • BIOS Update Instructions
  • Reviewing and exporting logs
  • Troubleshooting system updates
  • Managing Clipboard Access

Appendices

  • Glossary
  • Threat Model
  • Data Flow Diagram
  • Attacks and Countermeasures on the SecureDrop Environment
  • SecureDrop On-Site Training Schedule
SecureDrop
  • Search

© Copyright 2015-2022, Freedom of the Press Foundation.

Built with Sphinx using a theme provided by Read the Docs.