SecureDrop is an open-source whistleblower platform that lets you submit documents and messages anonymously to over 60 news organizations worldwide, including The New York Times and The Washington Post[1][2]. You can upload files up to 500MB through Tor Browser without logging IP addresses or metadata[3][4]. The system was created by Aaron Swartz and is managed by Freedom of the Press Foundation[5]. To start, download Tor Browser, set security level to Safest, and access SecureDrop from public Wi-Fi unassociated with you[6][7].
What You Get with SecureDrop
- Anonymous Document Submission
- Submit documents and messages up to 500MB in size without revealing your identity [3]. The system encrypts your submissions immediately upon upload through the Tor-based interface [1].
- Zero Metadata Logging
- SecureDrop does not log IP addresses, browser information, or computer details [4]. This minimizes digital trails that could identify you or your device.
- Secure Two-Way Communication
- Exchange messages with journalists through an encrypted channel accessible only via Tor [1]. Both sources and reporters connect through dedicated onion services that protect communication endpoints.
- Session Auto-Termination
- Your session expires after 120 minutes of inactivity or when you log out [8]. All session data is discarded at logout and fully deleted when you exit Tor Browser.
- HTTPS Certificate Verification
- Extended Validation certificates attest to the identity of organizations running SecureDrop instances [9]. DigiCert issues these certificates specifically for .onion addresses through a rigorous validation process [9].
- Trusted by Major Newsrooms
- Over 60 news organizations worldwide use SecureDrop, including The New York Times and The Washington Post [2]. The platform is managed by the Freedom of the Press Foundation [5].
SecureDrop Access Conditions
- Options
- Access via Tor Network
- Price
- Free
- Timeline
- Immediate
- Requirements
- Tor Browser, Safest security level
- Limitations
- Public Wi-Fi recommended, not home or work networks
- Options
- File Uploads
- Price
- Free
- Timeline
- Immediate
- Requirements
- Up to 500MB per file
- Limitations
- None
- Options
- Extended Validation Certificate
- Price
- Varies
- Timeline
- Depends on organization
- Requirements
- Follow Extended Validation process
- Limitations
- Only issued to .onion sites
- Options
- Using Tails OS
- Price
- Free
- Timeline
- Immediate
- Requirements
- Boot from USB stick
- Limitations
- None
- Options
- Session Validity
- Price
- Free
- Timeline
- 120 minutes
- Requirements
- Logout or inactivity invalidates session
- Limitations
- Session data discarded at logout
How to Access SecureDrop Onion Service
- Download and install Tor Browser
- Configure Tor Browser security settings
Open Tor Browser and set the security level to Safest. This disables JavaScript on all pages you visit[6]. Click the shield icon in the address bar, select Settings, and choose Safest from the security level options.
- Connect from a public network
- Enter the onion address
- Submit documents or messages
- Save your codename securely
Frequently asked questions
- How do I access secrdrop5wyphb5x onion address
Download Tor Browser, set security level to Safest, and type the onion address into the browser's address bar[6]. Connect from public Wi-Fi at a library or cafe rather than your home or work network[7]. Verify the full v3 address matches what the organization published and check for the HTTPS padlock icon[12][9].
- Is secrdrop5wyphb5x onion safe to use
SecureDrop encrypts submissions immediately upon upload and does not log IP addresses, browser information, or computer details[4][1]. Sessions expire after 120 minutes of inactivity, with all data discarded at logout and fully deleted when you exit Tor Browser[8]. For maximum safety, use Tails OS booted from a USB stick and connect from public Wi-Fi unassociated with you[7][10].
- What organization runs secrdrop5wyphb5x onion
Each SecureDrop instance is operated by a specific news organization—over 60 newsrooms worldwide use the platform, including The New York Times and The Washington Post[2]. Check the organization's official website or landing page to verify which newsroom runs the specific onion address you're accessing[12]. Extended Validation certificates from DigiCert attest to the identity of the organization running the service[9].
- How to verify SecureDrop onion link authenticity
Compare both the onion name and the full v3 address against what the organization published on its official landing page[12]. Look for the HTTPS padlock icon in Tor Browser—DigiCert issues Extended Validation certificates specifically for legitimate .onion SecureDrop sites[9]. Never access SecureDrop links from third-party sources or search engines.
- Can I be traced when using SecureDrop
SecureDrop does not log IP addresses, browser details, or computer information to minimize metadata trails[4]. Connect through Tor Browser from public Wi-Fi unassociated with you, not from home or work networks[7]. For additional protection, use Tails OS booted from a USB stick, which leaves no traces of your activity on the computer[10].
Cited sources
- What Is SecureDrop? — SecureDrop stable documentation
- Overview - SecureDrop
- SecureDrop for Sources — SecureDrop stable documentation
- SecureDrop
- freedomofpress/securedrop - GitHub
- How To Submit — SecureDrop stable documentation
- SecureDrop - ABC News
- Attacks and Countermeasures on the SecureDrop Environment — SecureDrop stable documentation
- HTTPS on the Source Interface — SecureDrop stable documentation
- Before You Submit — SecureDrop stable documentation
- Tor Browser with VPN - General - Tor Browser — Tor
- Getting An Onion Name for Your SecureDrop — SecureDrop stable documentation
Explore More Resources on SecureDrop
Discover additional guides and insights to enhance your experience.
Visit Our Resources

All Onion Websites: A Comprehensive ListExplore all onion websites with our curated list. Discover safe access, hidden services, and essential resources for navigating the dark we…
Fake Dark Web Website: How to Identify ThemLearn how to identify fake dark web websites to protect yourself from scams and phishing attempts while navigating hidden services.
Deep Web Gore Site: Access and RisksExplore deep web gore sites safely. Learn access methods, risks, and how to protect yourself while navigating this hidden part of the inter…