We are pleased to announce that Trail of Bits has completed the second independent audit of the SecureDrop Workstation, directly funded by The New York Times. This audit, which took place in December 2020 and January 2021, is the result of a two-engineer, six person-weeks effort. The SecureDrop Workstation, based on Qubes OS, is our next-generation platform which allows journalists to safely retrieve, decrypt, open and export anonymous submissions. It is currently being used in a limited pilot, and the first audit of the SecureDrop Workstation was completed in late 2018. Read More

We’re pleased to announce that SecureDrop 1.8.0 has been released. Changes that journalists and administrators should be aware of are summarized in this blog post. A complete list of changes can be found on GitHub.Important: This is the first release to provide support for Ubuntu 20.04 (Focal). All administrators must … Read More

The release of the next version of SecureDrop, 1.8.0, is scheduled for March 9, 2021. We will send out another notification through this blog, Twitter, Mastodon, and the support portal when the release is live. Changes that journalists and administrators should be aware of are summarized in this blog post. … Read More

SecureDrop 1.7.1 has been released, which addresses the issues described in our advisory from earlier today, restoring the availability of all instances. Read More

On January 27, the SecureDrop 1.7.0 update affected the availability of some longer running SecureDrop instances. This was due to a bug introduced by a recent code change. Read More

We are pleased to announce that SecureDrop 1.7.0 has been released. Changes that journalists and administrators should be aware of are summarized in this blog post. A complete list of changes can be found on GitHub.For all usersNew language: SecureDrop is now available in Simplified Chinese. Administrators can enable it … Read More

SecureDrop administrators and users should be aware of two upcoming critical migrations that are required to keep SecureDrop instances online. Read More

SecureDrop 1.7.0 will be released on January 26, 2021. We will send out another notification through this blog, Twitter, Mastodon, and the support portal when the release is live. Changes that journalists and administrators should be aware of are summarized in this blog post. A complete list of changes can be found on GitHub. Read More