A comprehensive guide to explor…

Https secrdrop5wyphb5x onion

SecureDrop at https secrdrop5wyphb5x onion provides a safe way to report sensitive information anonymously, ensuring your privacy.

Posted: — Editor: Oliver Gray — 4 min read

SecureDrop server rack with glowing LEDs

A glimpse into the SecureDrop infrastructure for secure whistleblowing.

SecureDrop is an open-source whistleblower platform that lets you submit documents and messages anonymously to over 60 news organizations worldwide, including The New York Times and The Washington Post[1][2]. You can upload files up to 500MB through Tor Browser without logging IP addresses or metadata[3][4]. The system was created by Aaron Swartz and is managed by Freedom of the Press Foundation[5]. To start, download Tor Browser, set security level to Safest, and access SecureDrop from public Wi-Fi unassociated with you[6][7].

What You Get with SecureDrop

Anonymous Document Submission
Submit documents and messages up to 500MB in size without revealing your identity [3]. The system encrypts your submissions immediately upon upload through the Tor-based interface [1].
Zero Metadata Logging
SecureDrop does not log IP addresses, browser information, or computer details [4]. This minimizes digital trails that could identify you or your device.
Secure Two-Way Communication
Exchange messages with journalists through an encrypted channel accessible only via Tor [1]. Both sources and reporters connect through dedicated onion services that protect communication endpoints.
Session Auto-Termination
Your session expires after 120 minutes of inactivity or when you log out [8]. All session data is discarded at logout and fully deleted when you exit Tor Browser.
HTTPS Certificate Verification
Extended Validation certificates attest to the identity of organizations running SecureDrop instances [9]. DigiCert issues these certificates specifically for .onion addresses through a rigorous validation process [9].
Trusted by Major Newsrooms
Over 60 news organizations worldwide use SecureDrop, including The New York Times and The Washington Post [2]. The platform is managed by the Freedom of the Press Foundation [5].

SecureDrop Access Conditions

Options
Access via Tor Network
Price
Free
Timeline
Immediate
Requirements
Tor Browser, Safest security level
Limitations
Public Wi-Fi recommended, not home or work networks
Options
File Uploads
Price
Free
Timeline
Immediate
Requirements
Up to 500MB per file
Limitations
None
Options
Extended Validation Certificate
Price
Varies
Timeline
Depends on organization
Requirements
Follow Extended Validation process
Limitations
Only issued to .onion sites
Options
Using Tails OS
Price
Free
Timeline
Immediate
Requirements
Boot from USB stick
Limitations
None
Options
Session Validity
Price
Free
Timeline
120 minutes
Requirements
Logout or inactivity invalidates session
Limitations
Session data discarded at logout

How to Access SecureDrop Onion Service

  1. Download and install Tor Browser

    Get the official Tor Browser from the Tor Project website. This browser routes your connection through the Tor network, which SecureDrop requires for anonymous access[1]. Install it on your system or use Tails OS booted from a USB stick for maximum privacy[10].

  2. Configure Tor Browser security settings

    Open Tor Browser and set the security level to Safest. This disables JavaScript on all pages you visit[6]. Click the shield icon in the address bar, select Settings, and choose Safest from the security level options.

  3. Connect from a public network

    Use public Wi-Fi at a library, cafe, or other location not associated with you[7]. Avoid your home or employer network. Do not use a VPN with Tor unless you are an advanced user who understands the privacy implications[11].

  4. Enter the onion address

    Type the SecureDrop onion address into Tor Browser's address bar. Verify the full v3 address matches what the organization published[12]. Check for the HTTPS padlock icon—DigiCert issues Extended Validation certificates for legitimate .onion SecureDrop sites[9].

  5. Submit documents or messages

    Follow the on-screen instructions to upload files up to 500MB or send messages[3]. Your submission encrypts automatically as it uploads[1]. SecureDrop does not log your IP address, browser details, or computer information[4].

  6. Save your codename securely

    SecureDrop generates a unique codename for you. Write it down offline—you need it to check replies. Sessions expire after 120 minutes of inactivity or when you log out[8]. Exit Tor Browser completely when finished to delete all session data[8].

Frequently asked questions

How do I access secrdrop5wyphb5x onion address

Download Tor Browser, set security level to Safest, and type the onion address into the browser's address bar[6]. Connect from public Wi-Fi at a library or cafe rather than your home or work network[7]. Verify the full v3 address matches what the organization published and check for the HTTPS padlock icon[12][9].

Is secrdrop5wyphb5x onion safe to use

SecureDrop encrypts submissions immediately upon upload and does not log IP addresses, browser information, or computer details[4][1]. Sessions expire after 120 minutes of inactivity, with all data discarded at logout and fully deleted when you exit Tor Browser[8]. For maximum safety, use Tails OS booted from a USB stick and connect from public Wi-Fi unassociated with you[7][10].

What organization runs secrdrop5wyphb5x onion

Each SecureDrop instance is operated by a specific news organization—over 60 newsrooms worldwide use the platform, including The New York Times and The Washington Post[2]. Check the organization's official website or landing page to verify which newsroom runs the specific onion address you're accessing[12]. Extended Validation certificates from DigiCert attest to the identity of the organization running the service[9].

How to verify SecureDrop onion link authenticity

Compare both the onion name and the full v3 address against what the organization published on its official landing page[12]. Look for the HTTPS padlock icon in Tor Browser—DigiCert issues Extended Validation certificates specifically for legitimate .onion SecureDrop sites[9]. Never access SecureDrop links from third-party sources or search engines.

Can I be traced when using SecureDrop

SecureDrop does not log IP addresses, browser details, or computer information to minimize metadata trails[4]. Connect through Tor Browser from public Wi-Fi unassociated with you, not from home or work networks[7]. For additional protection, use Tails OS booted from a USB stick, which leaves no traces of your activity on the computer[10].

Explore More Resources on SecureDrop

Discover additional guides and insights to enhance your experience.

Visit Our Resources