SecureDrop Docs v: latest
Versions
stable
latest
2.12
Downloads
PDF
A project of Freedom of the Press Foundation ยท Privacy Policy
SecureDrop Logo

Introduction

  • What Is SecureDrop?
  • What makes SecureDrop unique?
  • SecureDrop Workstation and Qubes OS
  • Getting support

Source Guide

  • SecureDrop for Sources
  • Before you submit
  • How to submit
  • After you submit

Journalist Guide

  • SecureDrop for Journalists
  • Starting Qubes
  • Starting SecureDrop Inbox
  • Communicating with sources
  • Working with submissions
  • Ending your session

Admin Guide: Installation

  • Introduction for SecureDrop administrators
  • Installation overview
  • Hardware
  • Passphrases overview
  • Prepare email accounts
  • Prepare a SecureDrop Workstation
  • Generate the Submission Key
  • Using the KeePassXC password manager
  • Set up the network firewall
  • Setting up a pfSense network firewall
  • Setting up an OPNSense network firewall
  • Prepare the servers
  • Install SecureDrop on the servers
  • Apply configuration to Admin Workstation
  • Create an admin account on the Journalist Interface
  • Test the installation
  • Provisioning USB Export Devices
  • Troubleshooting Qubes issues during installation
  • Troubleshooting OSSEC

Admin Guide: Migration

  • Migration overview
  • Migrating from a Tails-based SecureDrop
  • Migrating a Journalist Workstation
  • Removing the passphrase from a GPG key

Admin Guide: Deployment

  • Onboard Journalists
  • Deployment overview
  • Protecting the security of the system
  • Landing Page
  • Getting an onion name for your SecureDrop
  • Whole site changes
  • Sample SecureDrop privacy policy
  • Promoting your SecureDrop instance
  • Using a YubiKey with the Journalist Interface
  • Tor proof-of-work defense on the Source Interface
  • HTTPS on the Source Interface
  • SSH over local network
  • Configuring OSSEC fingerprint verification

Admin Guide: Reference

  • The Admin Interface
  • Analyzing the alerts
  • Logging in via SSH
  • Off-board administrators and Journalists
  • The securedrop-admin Utility

Admin Guide: Maintenance

  • Upgrade guide
  • Investigating logs
  • Troubleshooting connection problems
  • Backing up and restoring servers
  • Rebuilding an Admin Workstation
  • Updates over Tor
  • Troubleshooting kernel updates
  • BIOS updates on the servers
  • Decommission SecureDrop
  • Backup and restore
  • BIOS update instructions
  • Reviewing and exporting logs
  • Troubleshooting system updates
  • Managing clipboard access

Appendices

  • Glossary
  • Threat model
  • Data flow diagram
  • Attacks and countermeasures on the SecureDrop environment
SecureDrop
  • Search

© Copyright 2015-2026, Freedom of the Press Foundation.

Built with Sphinx using a theme provided by Read the Docs.