GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!
Python CSS Shell HTML JavaScript Makefile ApacheConf
Switch branches/tags
Latest commit 9f94a34 Jul 19, 2017 @redshiftzero redshiftzero committed on GitHub Merge pull request #1995 from dachary/wip-i18n-test-menu-id
journalist: tests menu with id instead of text
Failed to load latest commit information.
.circleci CircleCI - add test result folder as artifacts May 26, 2017
.github Add issue template Jun 9, 2017
build Refactor ansible build-generic-pkg for CI May 3, 2017
devops CI - Allow apptest script failures to break build May 26, 2017
docs doc: remove extra leading $ Jul 17, 2017
install_files Remove hard-coded sass/rvm versions in playbooks Jul 13, 2017
migration_scripts renamed "document interface" to "journalist interface" Nov 14, 2016
securedrop journalist: tests menu with id instead of text Jul 19, 2017
tails_files Replace XML KeePassX database with kdbx KeePassX database Jun 30, 2017
testinfra Sets Apache listening addresses in app role defaults Jul 3, 2017
.editorconfig Adding ruby conventions to .editorconfig Nov 6, 2016
.gitignore i18n: do not gitignore .pot translation files Jul 18, 2017
.ruby-gemset Initial config for install specs using serverspec Sep 23, 2014
.ruby-version Initial config for install specs using serverspec Sep 23, 2014
.travis.yml tests: functional: travis verifies flake8 compliance Jul 17, 2017
LICENSE Update license from GPL2 to AGPL Aug 1, 2014
Makefile Make func to run against build docker instance May 26, 2017 fix link to wordlist Apr 26, 2017
Vagrantfile Consolidates app requirements and dependencies Jun 16, 2017
ansible.cfg Re-ordered iptables ssh throttling rules Jun 19, 2015 SecureDrop 0.3.12 Mar 29, 2017
securedrop-admin Passes args in activate_env throughout securedrop-admin Jul 3, 2017
setup.cfg Update pytest section syntax in setup.cfg Mar 22, 2017 Check for username and hostname match in update_version Apr 8, 2017

Build Status Coverage Status Gitter

SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from and communicate with anonymous sources. It was originally created by the late Aaron Swartz and is currently managed by Freedom of the Press Foundation.

SecureDrop's documentation is now built and hosted by Read the Docs: If you are still trying to use links to Markdown files on our Github to read documentation, please update your bookmarks.

Found an issue?

If you're here because you want to report an issue in SecureDrop, please observe the following protocol to report an issue responsibly:

How to Install SecureDrop

See the Installation Guide.

How to Use SecureDrop

How to Contribute to SecureDrop

See the Development Guide.


SecureDrop is open source and released under the GNU Affero General Public License v3.

The wordlist we use to generate source passphrases is based off a new Diceware wordlist from the EFF.