SecureDrop

SecureDrop Workstation 1.5.0 has been released! This version simplifies the installation process by allowing you to install a bootstrap package from the Qubes-Contrib repo, and removes the remaining dependencies on Whonix.

https://securedrop.org/news/securedrop-workstation-1_5_0-released/ […]

Free the Internet: The Tor Project’s annual fundraiser Is the internet today the internet you want for future generations? What if instead of for-profit greed, rampant privacy violations, and pervasive government spying, we could have a different relationship with the internet? What if we could FREE THE INTERNET from the chains of surveillance and censorship? At the Tor Project, along with our incredible community of supporters, we're not just imagining a free internet — **we're building it** : * In countries like Turkmenistan where access to information is tightly controlled, Turkmen.news trusts Tor to provide safe access to the free internet where it once did not exist. * Freedom of the Press Foundation uses Tor as the backbone of SecureDrop, a tool that allows journalists and sources to communicate freely without fear of retaliation or exposure. * In Russia and Egypt, where authorities often block encrypted tools to control communications, individuals use Tor Browser to access encrypted email services like Tuta Mail to freely communicate. Tor is a building block for a free internet, and it takes our collective efforts to improve and amplify it. That’s why during the next three months, the Tor Project will be holding a fundraising campaign during which we ask for your support to advance digital freedom. As a 501(c)3 nonprofit, the Tor Project relies on donations to power its tools – the Tor network, Tor Browser, Tails OS, and the Tor ecosystem. These tools are trusted by millions and always **free** to use, without collecting, selling, trading, or renting any of your data for profit. This year we are calling to **FREE THE INTERNET** by supporting Tor. If you give now during the campaign, your donation will be matched by our supporters at Power Up Privacy. This means a $25 donation will have a $50 impact – and all donations over $25 will qualify you for fun Tor merchandise. 👀 In the 2023-2024 fiscal year, 84% of our expenses were associated with program services. That means that a very significant portion of our budget goes directly into building Tor and making it better. Those program services include building Tor technology, conducting outreach, and keeping Tor tools up-to-date and secure. We are proud to have a Four-Star Charity rating from Charity Navigator, and have been awarded Candid’s Platinum Seal of Transparency. This demonstrates the Tor Project’s commitment to openness and honesty in how the organization manages its finances and uses your investment for a greater impact. Join us in being defiant against profit-driven tech tools and keeping Tor tools FREE, private, and accessible. Your support today helps build a better internet for tomorrow. * * * To learn more about how Tor is freeing the internet from surveillance and censorship, and how we are putting charitable donations to work, please tune into our annual _State of the Onion_ virtual event to learn more. Save these dates and make your donation today! # Upcoming events * **State of the Onion – the Tor Project (Wednesday, November 12)** * The State of the Onion is the Tor Project's annual virtual event where we share updates from the Tor Project and the Tor community. The event on November 12 will focus on the Tor Project and the organization’s work. * 📺 Stream live on our YouTube channel * **State of the Onion – Community (Wednesday, December 10)** * The State of the Onion is the Tor Project's annual virtual event where we share updates from the Tor Project and the Tor community. The event on December 10 will be a special day celebrating the UN’s adoption and proclamation of the Universal Declaration of Human Rights (UDHR) in 1948 as well. * 📺 Stream live on our YouTube channel # Ways to contribute * **Make a donation** : Donate through our website (or any other method listed on our FAQ and your donation will be matched, 1:1, up to $250,000. * **Ask the company you work for if they will match your donation** : Many corporations will match their employees’ donations to charitable organizations. Ask at work if your company will match your gift. * **Share on social media** : Let the people in your networks know that all donations to the Tor Project are currently being matched. You can easily share a post from our social channels: Mastodon, Bluesky, X, and more. * **Subscribe to Tor News** : No ads. No tracking. Just low-traffic Tor updates via email. * * * # 1:1 Match provided by Power Up Privacy Power Up Privacy is matching all donations to the Tor Project between now and December 31, 2025. Power Up Privacy is an advocacy group that funds privacy-related research and development projects. They seek to make maximum impact by identifying key, underfunded areas in the privacy software ecosystem and injecting resources, financial and otherwise, in order to strengthen the necessary infrastructure we need to preserve freedom and human rights.

Tor is a critical component that helps make SecureDrop an effective tool for connecting journalists with anonymous sources.

Learn more about @torproject's efforts to Free the Internet: https://blog.torproject.org/2025-fundraiser-donations-matched/

We're simplifying how SecureDrop Workstation is installed!

Previously, users needed to manually download and verify an OpenPGP key; now we're eliminating that step without compromising on security.

Learn more in our blog post […]

SecureDrop 2.12.10 Released This is a Journalist and Admin Workstation-only release, which adds support for the recent Tails 7 version

SecureDrop 2.12.10 has been released. This is a Journalist and Admin Workstation-only release, which adds support for the recent Tails 7 version.

https://securedrop.org/news/securedrop-2_12_10-released/

#securedrop #whistleblowing #opensource

SecureDrop Workstation 1.4.0 has been released! This version integrates Tor directly in the sd-proxy VM instead of using Whonix, and fixes an issue that prevented USB devices from automatically attaching.

https://securedrop.org/news/securedrop-workstation-1_4_0-released

#securedrop […]

SecureDrop users, we have heard your requests for an updated support experience! We are now providing support directly via Signal, and will be completing a migration away from Redmine on Nov. 3, 2025

https://securedrop.org/news/changing-how-we-deliver-support/

#securedrop #whistleblowing […]

SecureDrop Workstation 1.3.0 released This version includes an improved installation experience by allowing users to import credentials during setup, and updates the base Fedora template.

SecureDrop Workstation 1.3.0 has been released! This version allows users to import credentials during setup, and updates the Fedora base template to version 42, which re-enables SELinux.

https://securedrop.org/news/securedrop-workstation-1_3_0-released

#securedrop #whistleblowing #opensource

SecureDrop Workstation 1.2.1 has been released!

This release introduces a preemptive fix to prevent potential breakage caused by a bad Qubes update. If you've already applied the bad update and are affected, instructions to manually fix it are in our advisory blog post […]

SecureDrop 2.12.9 has been released. This version disables upgrades from Ubuntu Focal to Noble, and updates Tor Browser safety-level guidance in the Source Interface.

If your SecureDrop is still running Ubuntu Focal, please contact us for assistance in reinstalling with Ubuntu Noble […]

Usually anything related to setting up and configuring printers gets a bad rap, but recently, the SecureDrop Workstation moved to a "just-works" printing approach.

Read how we did it: https://securedrop.org/news/implementing-just-works-printing-in-securedrop-workstation/

#OpenSource […]

SecureDrop Client 0.16.0 has been released! Along with regular dependency updates, this version updates the user interface to include more detailed timestamps of latest source activity, and to use a single typeface across the application […]

Ubuntu 20.04 (Focal) has reached end of life. Any SecureDrop installations that have not upgraded to Ubuntu Server 24.04 (Noble) will automatically take their Source Interfaces offline. If you are already using SecureDrop and your server has not been upgraded, contact us […]

SecureDrop Workstation 1.2.0 released SecureDrop Workstation 1.2.0 has been released! This version brings initial support for driverless printing, making SecureDrop Workstation compatible with a much larger selection of printers.

SecureDrop Workstation 1.2.0 has been released! This version brings initial support for driverless printing, making SecureDrop Workstation compatible with a much larger selection of printers.

https://securedrop.org/news/securedrop-workstation-1_2_0-released/

#securedrop #whistleblowing #opensource

Ubuntu 20.04 (Focal) is now deprecated for use with SecureDrop Application and Monitor Servers. All new SecureDrop installations should use Ubuntu Server 24.04 (Noble). If you are already using SecureDrop and your server did not upgrade automatically, contact support […]

SecureDrop 2.12.8 has just been released, which triggers upgrades to Ubuntu Noble on 100% of Application and Monitor Servers. If either of your servers are not upgraded to Ubuntu Noble with this version installed, please contact support via https://support.freedom.press […]

SecureDrop 2.12.7 has just been released - this version will trigger upgrades to Ubuntu Noble on approximately 40% of all Monitor Servers. If your Application Server has not already been upgraded to Ubuntu Noble, please contact support via https://support.freedom.press […]

SecureDrop 2.12.6 has just been released, which will trigger upgrades to Ubuntu Noble on approximately 20% of all Monitor Servers. If your Application Server has not already been upgraded to Ubuntu Noble, please contact support via https://support.freedom.press […]

SecureDrop Noble Upgrade Progress Upgrades to Ubuntu Noble are going strong, with approximately 40% of all Application Servers updated. Over the next week, we will push a series of point releases to begin automated upgrades of all remaining Application Servers, with Monitor Servers to follow.

SecureDrop 2.12.5 has been released. This version upgrades 100% of Application Servers to Ubuntu Noble. We will begin upgrading Monitor Servers later this week.

https://securedrop.org/news/securedrop-noble-upgrade-progress/

#security #whistleblowing #OpenSource

Upgrades to Ubuntu Noble are going strong, with approximately 40% of all Application Servers updated. Over the next week, we will push a series of point releases to begin automated upgrades of all remaining Application Servers, with Monitor Servers to follow […]

SecureDrop 2.12.3 Released SecureDrop 2.12.3 has been released. This version enables the second phase of automated upgrades, and fixes a bug where failing the Noble migration check could disable unattended updates.

SecureDrop 2.12.3 has been released. This version upgrades about 40% of servers to Ubuntu Noble, and fixes a bug where failing the pre-upgrade migration check could disable automatic updates.

https://securedrop.org/news/securedrop-2_12_3-released/

#security #whistleblowing #OpenSource

SecureDrop 2.12.2 released SecureDrop 2.12.2 has been released. This release enables the first phase of automated Noble upgrades and provides an additional check to verify the state of Ethernet interfaces prior to upgrade.

SecureDrop 2.12.2 has been released. This release enables the first phase of automated Noble upgrades and provides an additional check to verify the state of Ethernet interfaces prior to upgrade.

https://securedrop.org/news/securedrop-2_12_2-released/

#security #whistleblowing #OpenSource

SecureDrop Workstation 1.1.2 released SecureDrop Workstation 1.1.2 has been released! This version removes the “sd-retain-logvm” that was created for forensic analysis purposes in response to a vulnerability disclosed in February.

SecureDrop Workstation 1.1.2 has been released! This version removes the “sd-retain-logvm” that was created for forensic analysis purposes in response to a vulnerability disclosed in February.

https://securedrop.org/news/securedrop-workstation-1_1_2-released/

#security #whistleblowing #OpenSource

SecureDrop 2.12.1 released SecureDrop 2.12.1 has been released. This is an Admin Workstation-only release, which improves the reliability of the semiautomated Ubuntu Noble upgrade when using SSH-over-Tor.

SecureDrop 2.12.1 has been released. This is an Admin Workstation-only release, which improves the reliability of the semiautomated Ubuntu Noble upgrade when using SSH-over-Tor.

https://securedrop.org/news/securedrop-2_12_1-released/

#security #whistleblowing #OpenSource

GitHub - freedomofpress/webcat: WEBCAT is an architectural framework for providing blocking code signing and verification, integrity and transparency checks for browser-based single page applications. WEBCAT is an architectural framework for providing blocking code signing and verification, integrity and transparency checks for browser-based single page applications. - freedomofpress/webcat

WEBCAT allows developers to sign their web applications, site operators to enroll their domains, and web browsers to transparently verify the resources they receive.

It uses established technologies and is open source: https://github.com/freedomofpress/webcat

Today we're releasing WEBCAT, a set of open-source tools that enables tamper-proof web applications.

This is a major milestone on the path to the next generation of SecureDrop, to provide trustworthy browser-based encryption […]

SecureDrop 2.12.0 has been released, adding support for Ubuntu Noble, plus a semiautomated upgrade process. Administrators can upgrade themselves before April 15 or wait for our automated upgrade process after that date.

https://securedrop.org/news/securedrop-2_12_0-released/

#security […]

Missed out on our presentation at #RightsCon? Don't worry, we've posted the recording and slides of @legoktm's intro to the new #SecureDrop Workstation on our blog.

In 15 minutes, learn about the technology behind the Workstation and how it improves on the classic workflow […]

SecureDrop 2.12.0 is scheduled to be released on March 18, adding support for Ubuntu Noble, plus a semiautomated upgrade process.

Administrators will have three weeks following the release to perform the semiautomated upgrade, or wait for our automated upgrade process after that period […]

Over the next two months, all SecureDrops will have their underlying Ubuntu OS upgraded from 20.04 (“Focal”) to 24.04 (“Noble”).

This is the fifth version of Ubuntu we've supported, and for the first time, we're going to support an automated, in-place upgrade.

Learn about the technical […]

FYI, if you use Bluesky, we now have an official account there as well:

https://bsky.app/profile/securedrop.org

We'll still keep posting updates here on the fediverse, of course.