News

Release Announcement

SecureDrop Workstation 1.0.0 Released

SecureDrop Workstation 1.0.0 has been released! This is the first release targeting Qubes 4.2 and will require a full reinstall. With 1.0.0, we’re now switching to an open beta: if you are interested in using SecureDrop Workstation, please reach out to us! Read More

Release Announcement

SecureDrop Workstation 0.11.1 Released

We're pleased to announce that SecureDrop Workstation 0.11.1 and SecureDrop Client 0.10.2 have just been released.These releases target the Qubes 4.1-based version of SecureDrop Workstation and update the SecureDrop Release Key expiration date. Pilot participants must run the SecureDrop Workstation updater before July 7, 2024 to receive this update.Changes in … Read More

Release Announcement

SecureDrop 2.9.0 Released

We’re pleased to announce that SecureDrop 2.9.0 has been released. Changes that journalists and administrators should be aware of are summarized in this blog post. A complete list of changes can be found on GitHub. Read More

Pre-Release Announcement

SecureDrop 2.9.0: Pre-Release Announcement

SecureDrop 2.9.0 is scheduled to be released on June 27, 2024. We will send out another notification through this blog, Mastodon, X, and the support portal when the release is live. Changes that journalists and administrators should be aware of are summarized in this blog post. A complete list of changes can be found on GitHub. Read More

Release Announcement

SecureDrop Workstation 0.11.0 Released

SecureDrop Workstation 0.11.0 has been released. This release updates various system VMs to use Fedora 39. Users will receive this update the next time they run the updater, which is likely to take longer than usual.Changes in this release:Update 4.1 SDW to use Fedora 39 (#1000)SecureDrop Workstation Pilot StatusSecureDrop Workstation … Read More

Interest Article

Introducing SecureDrop Protocol

This blog post is a part of a series about our research toward the next generation of the SecureDrop whistleblowing system. If you haven’t been following along, check out our previous post for some recommended context.Here, we present a proposed end-to-end encryption protocol for a future version of SecureDrop server, … Read More

Security Advisory

Security Advisory: Misconfigured package repository servers and developer infrastructure

An internal review discovered that some servers maintained by Freedom of the Press Foundation (FPF) and used to support SecureDrop were installed in an insecure manner. Read More

Interest Article

How to research your own cryptography and survive

This blog post is a part of a series about our research toward the next-generation SecureDrop server. In part 1, “Future directions for SecureDrop,” we outlined our current work on the Qubes OS-based SecureDrop Workstation and described our plans for a redesign of SecureDrop. In part 2, “Anatomy of a … Read More