SecureDrop

Free and open source whistleblower submission platform. A Freedom of the Press (npub1hxa…caxd) project.

Website: https://securedrop.org/
Code: https://github.com/freedomofpress/securedrop/
Chat: https://gitter.im/freedomofpress/securedrop
Older posts (previous account): https://fosstodon.org/@securedrop

Last Notes

2026-07-08 19:19:46 CEST

SecureDrop 2.16.1, which fixes a low-severity security issue, is now available.
If your instance was affected, administrators will need to take manual action to rotate credentials.
https://securedrop.org/news/advisory-securedrop-2_16_1-released
#OpenSource #Whistleblowing

2026-06-24 16:28:22 CEST

SecureDrop 2.16.0 is now available, with a number of improvements to APIv2, and a fix for a low-severity security vulnerability:
https://securedrop.org/news/securedrop-2_16_0-released/
#OpenSource #Whistleblowing

2026-05-27 19:11:55 CEST

SecureDrop Client, which has been replaced by SecureDrop Inbox, is now end-of-life.
https://securedrop.org/news/securedrop-client-is-end-of-life/
#OpenSource #Whistleblowing #Qubes

2026-04-21 18:38:56 CEST

RE: https://social.freedom.press/@securedrop/116376731571291768
We're getting closer to the release of the brand new SecureDrop Inbox — today we're publishing results from the security audit we commissioned to ensure it's safe before putting it in the hands of journalists.
https://securedrop.org/news/audit-of-securedrop-inbox-completed/
#note195c…n730

2026-04-09 22:53:18 CEST

- reply

This is the result of work begun by the SecureDrop team in July 2025 to completely overhaul how journalists process submissions. SecureDrop Workstation users will receive it automatically during a system update in the next few weeks.
https://securedrop.org/news/securedrop-inbox-is-coming/
#OpenSource #Whistleblowing #Electron #Qubes

2026-01-12 22:36:24 CET

We are looking for a contract security-focused developer to work on WEBCAT (https://github.com/freedomofpress/webcat), a browser extension and a few other components that bring code integrity and transparency to the web.
Read more and submit a proposal here:
https://freedom.press/careers/job/?gh_jid=4647982005

2025-11-24 16:43:09 CET

SecureDrop Client 0.17.1 has been released! This release addresses a low-impact, high-complexity denial-of-service issue:
https://securedrop.org/news/securedrop-client-0_17_1-released/
#securedrop #whistleblowing #opensource

2025-03-19 21:34:08 CET

- reply

WEBCAT allows developers to sign their web applications, site operators to enroll their domains, and web browsers to transparently verify the resources they receive.
It uses established technologies and is open source: https://github.com/freedomofpress/webcat

2025-03-19 21:33:25 CET

Today we're releasing WEBCAT, a set of open-source tools that enables tamper-proof web applications.
This is a major milestone on the path to the next generation of SecureDrop, to provide trustworthy browser-based encryption.
https://securedrop.org/news/introducing-webcat-web-based-code-assurance-and-transparency/
#SecureDrop #browsers #Tor #whistleblowing #OpenSource

2025-03-18 20:07:35 CET

SecureDrop 2.12.0 has been released, adding support for Ubuntu Noble, plus a semiautomated upgrade process. Administrators can upgrade themselves before April 15 or wait for our automated upgrade process after that date.
https://securedrop.org/news/securedrop-2_12_0-released/
#security #whistleblowing #OpenSource

2025-02-18 23:18:28 CET

We’ve seen significant interest in newsrooms setting up SecureDrop to better protect whistleblowers, so we've put together a quick list of 5 key things you should know before setting it up:
https://securedrop.org/news/five-things-to-know-about-securedrop/
#SecureDrop #security #whistleblowing #OpenSource

2024-12-19 18:07:48 CET

Almost every platform but the web supports code verification. For web apps that rely on encryption, that's a problem. Here's why: https://securedrop.org/news/browser-based-cryptography/
#SecureDrop #Whistleblowing #OpenSource

2024-11-15 00:24:07 CET

SecureDrop's fediverse presence is now hosted on Freedom of the Press Foundation's organizational Mastodon server. 🎉
Follow us here at securedrop(at)freedom(dot)press for project updates.