Skip to content
GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!
Branch: develop
Clone or download
Latest commit 38036ad Jun 18, 2019
Type Name Latest commit message Commit time
Failed to load latest commit information.
.circleci test docs for broken links during CI Jun 11, 2019
.github linting: update PR template May 16, 2019
admin admin tests: re-run git tests up to 3 times, remove unnecessary class May 25, 2019
build Move build debs to distribution-specific folder Jan 31, 2019
devops Add workaround for CircleCI's problems filtering from forks Jun 7, 2019
docs Add 0.13.0 to 0.13.1 upgrade docs Jun 18, 2019
git Shellcheck compliance: SC1090 fixes Sep 22, 2017
install_files Merge pull request #4494 from drewmassey/issue-4465 Jun 6, 2019
journalist_gui added tests Apr 3, 2019
junit Pull back junit test results from GCE env Nov 29, 2018
molecule Update builder image hash Jun 18, 2019
securedrop Fixes #4521 download journalist key via source interface Jun 14, 2019
tails_files Update KeePassX file to add entries Aug 20, 2017
.dockerignore Rename pages-layout -> pageslayout Oct 4, 2018
.editorconfig Adding ruby conventions to .editorconfig Nov 6, 2016
.flake8 bump max line length from 79 to 100 Dec 22, 2018
.gitignore Use Tor Browser for functional tests May 11, 2019
.mailmap mailmap: normalize pierwill <> Jun 18, 2018
.ruby-gemset Initial config for install specs using serverspec Sep 23, 2014
.ruby-version Initial config for install specs using serverspec Sep 23, 2014
.yamllint Creates custom yamllint config file Sep 13, 2017 Remove Loic from Community Team contacts (no longer active) Jan 9, 2019 Update docs to account for new Weblate Nov 20, 2018
LICENSE Tweak copyright statement to acknowledge all contributors Nov 9, 2018
Makefile Fix exclude paths for Bandit 1.6.1 Jun 18, 2019 Link directly to i18n repo contributors list in README Mar 6, 2019
SOURCE_OFFER Amends source offer language reference to users Jul 24, 2017
Vagrantfile vagrantfile: use xenial throughout Mar 4, 2019
ansible.cfg Removing hard-coded Ansible plugin "profile_tasks" Oct 17, 2018 SecureDrop 0.14.0~rc1 May 30, 2019
mypy.ini Fixes #3001 initial support for type annotation Feb 13, 2018
securedrop-admin In securedrop-admin setup -v: -v, setup can be passed in any order Mar 6, 2018 Remove Trusty-specific logic in builder and update scripts May 13, 2019

CircleCI branch codecov Gitter

SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymous sources. It was originally created by the late Aaron Swartz and is currently managed by the Freedom of the Press Foundation.

The SecureDrop documentation is now built and hosted by Read the Docs: If you are still trying to use links to Markdown files on our GitHub to read documentation, please update your bookmarks.

There are two versions of the SecureDrop documentation: stable and latest. The stable documentation is the default, and corresponds to the latest stable release of SecureDrop; therefore, it is the best version of the documentation for end users (Sources, Journalists, or Administrators). The latest documentation is automatically built from the latest commit on the SecureDrop development branch; therefore, it is most useful for developers and contributors to the project. You can choose to view a different version of the documentation by using the version picker shown at the bottom left of the screen.

Found an issue?

If you're here because you want to report an issue in SecureDrop, please observe the following protocol to do so responsibly:

How to Install SecureDrop

See the Installation Guide.

How to Use SecureDrop

How to Contribute to SecureDrop

See our contribution page


SecureDrop is open source and released under the GNU Affero General Public License v3.


The wordlist we use to generate source passphrases come from various sources:


A huge thank you to all SecureDrop contributors! You can see just code and documentation contributors in the "Contributors" tab on GitHub, and you can see code, documentation and translation contributors together here.

You can’t perform that action at this time.