We recently discovered that the SecureDrop Application and Monitor servers have swapfiles enabled on production instances. This is not intended behavior, and was identified during the expansion of our automated testing efforts. We intended to disable swap during installation, and discovered that this setting was not persisting across reboots. Since the machines are configured to reboot nightly, to aid in clearing memory, the method currently used is ineffective. Read More

Today we are announcing the release of SecureDrop 0.3.11. This release adds some improvements to SecureDrop’s source interface. The most important change is to provide clear instructions for sources to use Tor Browser’s Security Slider at the highest setting. Read More

Today we are announcing the release of SecureDrop 0.3.10. This release adds a new package, securedrop-keyring, to manage the public keys used to verify packages provided by the Freedom of the Press Foundation's apt package server. Read More

Today we are announcing the release of SecureDrop 0.3.9. This release fixes several minor issues; for details, see the changelog. . Read More

Today we are announcing the release of SecureDrop 0.3.8, to fix a regression in 0.3.7 where a dependency of SecureDrop's Python web application was mistakenly removed from the list of dependencies.  Read More

Today we are announcing the release of SecureDrop 0.3.7. Read More

Today we are announcing the release of SecureDrop 0.3.6. If you are a SecureDrop administrator, please check your instance to ensure that you are running the latest version; if not, follow the instructions below to upgrade your system. Read More

Today the Tow Center for Digital Journalism at Columbia Journalism School has published a first-of-its-kind study on how newsrooms are using SecureDrop, our open-source whistleblower submission system that is now in-use at over thirty news organizations worldwide. Read More