Be sure that the .onion address provided on Apache’s landing page below matches okd7utbak43lm7qaixr6yv7s62e32mhngjsfpjn26eklokqofg6776yd.onion or apache.securedrop.tor.onion before continuing. This helps ensure you are visiting a legitimate SecureDrop instance. See our Source Guide for more information on SecureDrop usage and risks.
If you encounter a mismatch, make sure to report an error here. This could be evidence of an attempted attack, or it could be a simple failure to communicate between an organization running SecureDrop and Freedom of the Press Foundation. In either case, we will investigate the matter and establish a path to resolution.