HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
freedomofpress
securedrop
Python2013–2022
freedomofpress / securedrop

securedrop

GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!

Explore on GitHubRead Hacker News discussions
21Distinct people
26Mentions
0Explicit recommenders
3.9KGitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!

GitHub

Where it is used

No documented product use was verified in the last source check.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year26 dated mentions

Observed mentions: 2013-10-15 17:48:33 UTC to 2022-12-08 21:56:23 UTC.

02462013-01-01 00:00:00 UTC to 2014-01-01 00:00:00 UTC (exclusive): 4 mentions; 0 submissions, 4 comments20132014-01-01 00:00:00 UTC to 2015-01-01 00:00:00 UTC (exclusive): 6 mentions; 2 submissions, 4 comments2015-01-01 00:00:00 UTC to 2016-01-01 00:00:00 UTC (exclusive): 3 mentions; 1 submissions, 2 comments2016-01-01 00:00:00 UTC to 2017-01-01 00:00:00 UTC (exclusive): 2 mentions; 0 submissions, 2 comments2017-01-01 00:00:00 UTC to 2018-01-01 00:00:00 UTC (exclusive): 3 mentions; 0 submissions, 3 comments20172018-01-01 00:00:00 UTC to 2019-01-01 00:00:00 UTC (exclusive): 2 mentions; 2 submissions, 0 comments2019-01-01 00:00:00 UTC to 2020-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2022-01-01 00:00:00 UTC to 2023-01-01 00:00:00 UTC (exclusive): 6 mentions; 0 submissions, 6 comments2022

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20132013-01-01 00:00:00 UTC2014-01-01 00:00:00 UTC404
20142014-01-01 00:00:00 UTC2015-01-01 00:00:00 UTC624
20152015-01-01 00:00:00 UTC2016-01-01 00:00:00 UTC312
20162016-01-01 00:00:00 UTC2017-01-01 00:00:00 UTC202
20172017-01-01 00:00:00 UTC2018-01-01 00:00:00 UTC303
20182018-01-01 00:00:00 UTC2019-01-01 00:00:00 UTC220
20192019-01-01 00:00:00 UTC2020-01-01 00:00:00 UTC000
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC000
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC000
20222022-01-01 00:00:00 UTC2023-01-01 00:00:00 UTC606

From the project README

An excerpt from the repository, fetched Nov 13, 2026.

Read the project’s introduction
There are many ways to contribute to SecureDrop, and we welcome your help! By contributing to this project, you agree to abide by our Code of Conduct. SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymous sources. It was originally created by the late Aaron Swartz and is currently managed by the Freedom of the Press Foundation. Project status SecureDrop is a stable, mature project that is actively in use in newsrooms across the globe. Most feature development efforts are focused towards the SecureDrop Workstation, SecureDrop Client, and SecureDrop Protocol; see the "Future directions for SecureDrop" blog post for more information. SecureDrop continues to receive security and bug fixes in the meantime. Documentation SecureDrop's end user documentation is hosted at https://docs.securedrop.org. It is maintained in a standalone repository: https://github.com/freedomofpress/securedrop-docs. By default, the documentation describes the most recent SecureDrop release. This is known as the stable version and is recommended for end users (Sources, Journalists, or Administrators). The latest documentation is automatically built from the most recent commit to the SecureDrop documentation repository. It is most useful for developers and contributors to the project. You can switch between versions of the documentation by using the toolbar in the bottom left corner of the Read the Docs screen. Developer documentation can be found at https://developers.securedrop.org/, maintained in https://github.com/freedomofpress/securedrop-dev-docs/. Found an issue? If you're here because you want to report an issue in SecureDrop, please observe the following protocol to do so responsibly: If you want to report a security issue, please use our bug bounty hosted by Bugcrowd. If filing the issue does not impact security, just create a GitHub Issue. How to Install SecureDrop See the Installation Guide. How to Use SecureDrop As a source As a journalist How to Contribute to SecureDrop See our contribution page. Developer Quickstart To run SecureDrop locally, ensure you have Docker installed before proceeding any further. Linux (CentOS/Debian/Fedora/RHEL/Ubuntu) Follow the official Docker Engine documentation to install Docker Engine. TipIt's also possible to use Docker Desktop on Linux, if you want to. Follow the steps to install Docker Desktop for Linux then. Windows/MacOS If you are using Windows or MacOS follow the official Docker Desktop documentation to install Docker Desktop. Once you have Docker up and running, run: make dev This will start the source interface on 127.0.0.1:8080 and the journalist interface on 127.0.0.1:8081. The credentials to login are printed in the Terminal. To login to the journalist interface, you must also generate a two-factor code. To provision a Python 3 virtual environment for development: make venv && source ./venv/bin/activate License SecureDrop is open source and released under the GNU Affero General Public License v3. Wordlists The wordlist we use to generate source passphrases come from various sources: en.txt is based off a new Diceware wordlist from the EFF. fr.txt is based off Matthieu Weber's translated diceware list and the French word list found in trezor/python-mnemonic (MIT licensed). Acknowledgments A huge thank you to all SecureDrop contributors! You can find a list of code and documentation contributors in the "Contributors" tab on GitHub. SecureDrop is translated into many languages by a community of volunteers; please see our Weblate instance for details. Thanks to our friends at PyUp for sponsoring a subscription to their Python security database.
Read the full README on GitHub

What Hacker News says

26 sources
Trouble_007·Dec 8, 2022
SecureDrop 2.5.1 – Released → (December 8, 2022 ) SecureDrop 2.5.1 – Change Log (Text) : https://raw.githubusercontent.com/freedomofpress/securedrop/... SecureDrop – Freedom of the Press Foundation @ GitHub : https://github.com/freedomofpress/securedrop/ SecureDrop – Journalist and Whistleblower – Secure Submission System – Overview : https://securedrop.org/overview/ SecureDrop – User Documentation : https://docs.securedrop.org/ Report a Security Issue (Bug Bounty) : https://bugcrowd.com/freedomofpress SecureDrop – Community Forums : https://forum.securedrop.org * @securedrop at fosstodon : https://fosstodon.org/@securedrop --- Tor Project – Tor Status : https://status.torproject.org Tor Project – Tor Metrics : https://metrics.torproject.org Tor Project – Check Tor Connection : https://check.torproject.org Tor Support – FAQ : https://supp
Read the rest
ort.torproject.org Tor User Support Forum : https://forum.torproject.net Tor Community : https://community.torproject.org Tor Download : https://www.torproject.org/download/ Tor Distribution Directory : https://www.torproject.org/dist/torbrowser/12.0/ --- The Tor Project – @torproject – Nov 10th If you need Support Downloading or Connecting to Tor, find us on; * Telegram – Tor Support-Bot: https://t.me/torprojectsupportbot * Telegram – Tor (preview) : https://t.me/s/torproject * Signal : (+1 778-743-1312) * The Tor Project – Email : (frontdesk at torproject.org) * The Tor Project – Forum : https://forum.torproject.net #keepiton --- The Tor Project – @torproject – Nov 18th Follow Tor – Links; * Mastodon : https://mastodon.social/@torproject * Facebook : https://www.facebook.com/TorProject/ * Instagram : https://www.instagram.com/TorProject/ * LinkedIn : https://www.instagram.com/TorProject/ * YouTube : https://www.youtube.com/c/TorProjectInc * Tor Forum : https://forum.torproject.net * Tor News : https://newsletter.torproject.org * Telegram – The Tor Project : https://t.me/torproject
In SecureDrop 2.5.1 – Released
Trouble_007·Oct 19, 2022
SecureDrop 2.5.0 – Released → (October 18, 2022) SecureDrop 2.5.0 – Change Log (Text) : https://raw.githubusercontent.com/freedomofpress/securedrop/... SecureDrop – Freedom of the Press Foundation @ GitHub : https://github.com/freedomofpress/securedrop/ SecureDrop – Journalist and Whistleblower – Secure Submission System – Overview : https://securedrop.org/overview/ SecureDrop – User Documentation : https://docs.securedrop.org SecureDrop – Developer Documentation : https://developers.securedrop.org SecureDrop – Support Documentation : https://support-docs.securedrop.org Report a Security Issue (Bug Bounty) : https://bugcrowd.com/freedomofpress SecureDrop – Community Forums : https://forum.securedrop.org ---- Freedom of the Press Foundation : https://freedom.press/ Freedom of the Press Foundation – Guides & Training - News Organizations, F
Read the rest
reelance/Citizen Journalists, at-risk Groups : https://freedom.press/training/ Reporters Committee for Freedom of the Press : https://www.rcfp.org/
In SecureDrop 2.5.0 Released
bhcc·Jul 25, 2017
I think you could easily start with forks of ZeroNet (distributed TOR hosting): https://zeronet.io https://github.com/HelloZeroNet/ZeroNet and either: SecureDrop: https://securedrop.org https://github.com/freedomofpress/securedrop or NextCloud: https://nextcloud.com https://github.com/nextcloud Though basically you're just routing .onion at a bucket. Another thing to look at would be building on https://libcloud.apache.org/ https://libcloud.readthedocs.io/en/latest/supported_provider... or https://jclouds.apache.org/ https://jclouds.apache.org/reference/providers/ And providing a storage target. Though you have to consider the possibility of seizure of the host[s] by the service providers state. See: https://www.deepdotweb.com/2017/06/10/french-police-seized-t... https://www.bleepingcomputer.com/news/security/french-police...
In Ask HN: Would anyone be interested in a darknet dropbox type thing?
ehartsuyker·Mar 8, 2016
I was hired as a Data Engineer for my skills in Scala, AWS, and other data technologies. I ended up falling into Backend Engineer (also Scala) as our core services needed significant support. From there, I drifted into Operations as our infra and deployment processes were negatively impacting QOS and the time from code-to-prod. In my spare time I: - made a shitty personal website[0] for kicks - maintain an npm package[1] - contribute to SecureDrop[2] - run the not-yet-live BerlinLeaks[3] [0] - https://heartsucker.com [1] - https://github.com/ehartsuyker/node-deb [2] - https://github.com/freedomofpress/securedrop [3] - https://berlinleaks.com
In Ask HN: What is your job role and what are the side projects you are working on?
slasaus·Apr 2, 2015
I've recently found out about Diceware and the importance of a strong password [1][2]. Often users choose a really weak password to begin with. I've read [3] that if you have a strong password (like a 7 word Diceware password) even MD4 or MD5 would suffice :O. I'm really curious if this is true. [1] http://world.std.com/~reinhold/diceware.html [2] https://firstlook.org/theintercept/2015/03/26/passphrases-ca... [3] https://github.com/freedomofpress/securedrop/issues/180#issu... ps. for those that use bcrypt and want to ensure a constant user experience on their server see https://www.npmjs.com/package/bcrypt-speed
In Enough with the Salts: Updates on Secure Password Schemes

Showing the 15 most recent of 26 sources. Enable JavaScript to search and browse every indexed mention.

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.