GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!
SecureDrop 2.8.0 was released on March 12 2024. This release added Tails 6 support for Journalist and Admin Workstations, along with other miscellaneous updates and bugfixes.
SecureDrop 2.7.0 was released on November 7, 2023. It includes a migration from GnuPG to Sequoia for OpenPGP cryptography functionality, updates to support continuous localization via Weblate, and miscellaneous other bugfixes and updates.
SecureDrop 2.6.1 was released on August 17, 2023. It contains a fix to the logic for provisioning Journalist Workstations on Tails. As there were no server-side code changes, .deb packages were not built for this release.
SecureDrop 2.6.0 was released on June 22, 2023. It contains a number of security, accessibility, usability and performance improvements, including a new SecureDrop menu in the Admin and Journalist Workstations.
SecureDrop 2.5.2 was released on February 23, 2023. It updated various software dependencies, including a fix for a denial-of-service vulnerability in the Werkzeug package.
SecureDrop 2.5.1 was released on December 8, 2022. It included user and permissions-related changes.
SecureDrop 2.5.0 was released on October 18, 2022. In addition to other fixes and improvements, it included new server-side session handling for the Journalist Interface and API, updates to production dependencies, and miscellaneous improvements in the Source and Journalist interfaces.
SecureDrop 2.4.2 was released on August 9, 2022. It updated the Linux kernel version used by the SecureDrop servers from 5.15.26 to 5.15.57 to include patches for the recently discovered Retbleed security issue.
SecureDrop 2.4.1 was released on July 20 2022. It included a fix for a bug that prevented initial messages with non-ASCII characters if the codename filter feature was enabled on the Source Interface.
SecureDrop 2.4.0 was released on May 24 2022. On top of several bugfixes and other improvements, the frontend of the source interface was refactored and its design updated, improving usability and accessibility. This release also introduces support for using SecureDrop in Portuguese (Portugal), thanks to a volunteer translator.