What Is SecureDrop?
SecureDrop is source-protection infrastructure for anonymous tips using Tor Browser and receiving-side operations, but remaining risks still need management.
SecureDrop is a system that news organizations and other organizations use to receive anonymous tips.
It is not just a file submission service. It is a source-protection system based on the assumption that sources access it with Tor Browser and that the news organization side prepares a secure receiving environment.
SecureDrop is a practical foundation for news organizations and other organizations to receive anonymous tips. It is introduced here because it is not just a submission form, but assumes that sources use Tor Browser and that the receiving side operates with source protection in mind.
URL : https://securedrop.org/
This article organizes SecureDrop not as a "convenient submission form," but as an operation for source protection.
SecureDrop Basics
SecureDrop is a tip-submission system for sending materials and messages anonymously.
In many cases, the receiving side, such as a news organization or NGO, operates a SecureDrop environment, and the source accesses that organization's SecureDrop page from Tor Browser.
| Role | Responsibility |
|---|---|
| Source | Uses Tor Browser to send materials and messages |
| News organization | Operates the SecureDrop environment and receives submissions |
| Journalist | Verifies received materials and handles them while considering source protection |
| SecureDrop | Becomes submission infrastructure for anonymous tips |
SecureDrop is used to protect initial contact between a source and a news organization.
However, using it does not automatically remove every risk.
Sources using SecureDrop normally access it from Tor Browser. This is to make it harder to directly show the receiving side the usual originating IP address.
However, even if you access it with Tor Browser, using a workplace device or work network leaves other logs. Also, if the materials you send contain information that points to you, danger remains even if you hide the communication route.
SecureDrop is a system for creating an "anonymous entry point." It is not a system that makes the contents of materials anonymous too.
What It Is Designed to Protect
SecureDrop mainly tries to protect the contact path between the source and the receiving side.
With ordinary email or social media DMs, the sender account, IP address, send time, attached files, and records on the service provider side become problems. SecureDrop assumes Tor and makes it possible to submit in a form where the source's connection origin is harder to see directly.
| What is easier to protect | Explanation |
|---|---|
| Connection source IP | Because access is through Tor, it is harder for the receiving side to see directly |
| Real-name account | Can be sent without using email or social media accounts |
| Initial contact | Can provide information without immediately using ordinary contact details |
| Continuing messages | Can communicate using a codename |
SecureDrop is powerful as an entrance for anonymous tips.
However, risks remain separately that the source may be inferred from file contents, metadata, writing characteristics, or the substance of the information.
Risks That Remain Even With SecureDrop
Using SecureDrop does not finish source protection.
The source accessed it from a workplace device. The material retained the creator name. The body text described circumstances only the person would know. Immediately after sending, file-viewing logs remained inside the organization. In such cases, the source may be inferred through another path.
| Remaining risk | Explanation |
|---|---|
| File metadata | Creator, organization name, capture location, and edit history remain |
| Inference from content | If few people know the information, candidates narrow |
| Device and environment | Use from workplace devices or monitored networks is dangerous |
| Submission timing | Compared against internal logs or events |
| Receiving-side operation | Leaks through how journalists store, view, and share materials |
SecureDrop is a system that protects part of the communication route.
Protecting sources also requires checking materials, care in publication decisions, and receiving-side operation.
What Sources Should Check
Sources also need to check before sending.
In particular, it is important not to access from workplace or school devices, not to use work networks, and not to work while logged in to real-name accounts.
| Check item | Reason |
|---|---|
| Device | Managed devices leave operation logs |
| Network | Workplace and school lines leave connection records |
| Materials | Creator, edit history, and watermarks remain |
| Body text | Avoid including too many details only you would know |
| Reply checking | Do not access repeatedly from the same environment |
SecureDrop is meaningful when the news organization side has prepared a safer receiving channel. However, if the source's own environment is compromised, protection at the entrance alone is not enough.
For high-risk tips, take time before sending and check the materials and environment.
Responsibilities of the Receiving Side
Installing SecureDrop is not the end.
The news organization side needs an operational structure. Decide who checks submissions, which devices handle them, where materials are stored, how they are shared inside the newsroom, and how metadata is checked before publication.
| Operational item | Reason |
|---|---|
| Reviewer | Limit who can access submissions |
| Dedicated environment | Do not mix with ordinary work devices |
| Material storage | Avoid unnecessary sharing and copying |
| Metadata check | Check information that connects to sources before publication |
| Publication judgment | Avoid allowing the source to be inferred from the content |
In source protection, failures on the receiving side put sources in danger.
"They sent it anonymously, so it is fine" is not enough.
The receiving side also needs to explain SecureDrop's availability clearly. Show how to access it, what can be sent, what risks remain, and how replies are checked.
A submission channel with vague explanations can lead sources into dangerous decisions. A safer system consists not only of technology, but also of explanations that reach users.
Situations Where SecureDrop Fits
SecureDrop fits situations where someone wants to deliver materials or information to news organizations or public-interest investigations while protecting their identity.
On the other hand, it may not fit simple inquiries, general consultation, emergency reports, or communication that needs an immediate reply. SecureDrop is not a substitute for ordinary chat or email.
| Suited situations | Unsuitable situations |
|---|---|
| Providing internal materials in the public interest | Emergency contact where immediate help is needed |
| Contact that needs source protection | General inquiry |
| Initial contact where real-name email should be avoided | Consultation requiring rapid back-and-forth communication |
| High-risk tips | Contact windows where the destination's operation is unclear |
Before using it, check what that submission channel accepts and how it replies.
Summary
SecureDrop is a system that news organizations and other organizations use to receive anonymous tips.
When considering SecureDrop, check the official site for explanations for sources, operator documentation, and deployment assumptions.
URL : https://securedrop.org/
SecureDrop assumes Tor and allows tips to be received in a way that makes a source's connection origin and real-name account harder to see than with ordinary email or social media DMs.
However, SecureDrop alone does not complete source protection.
File metadata, inference from content, submission timing, device environment, and receiving-side operation must be managed separately.
SecureDrop is a tool, and source protection is an operational practice.
Related tools
Tor Project
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
SecureDrop
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
URL : https://securedrop.org/
GlobaLeaks
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
URL : https://globaleaks.org/