SecureDrop Workstation 1.2.1 has been released!. This release adds a fix to prevent potential breakage caused by a bad Qubes update. If you've already applied the bad update and are affected, instructions to manually fix it are in our advisory blog post.

SecureDrop 2.12.9 has been released. This version disables upgrades from Ubuntu Focal to Noble, and updates Tor Browser safety-level guidance in the Source Interface. If your SecureDrop is still running Ubuntu Focal, please contact us for assistance.

RT @FreedomofPress: On the 14th anniversary of @SecureDrop, we're proud to carry on Aaron Swartz's legacy. SecureDrop is used by over 60 m….

Usually anything related to setting up and configuring printers gets a bad rap, but recently, the SecureDrop Workstation moved to a "just-works" printing approach. Read how we did it:

RT @FreedomofPress: 👋 Join @freedomofpress on @reddit_AMA at 2 p.m. EDT for an AMA with @Harlo Holmes, our director of digital security, an….

SecureDrop Client 0.16.0 has been released! Along with regular dependency updates, this version updates the user interface to include more detailed timestamps of latest source activity, and to use a single typeface across the application.

Ubuntu 20.04 has reached end of life. Any SecureDrop installations that have not upgraded to Ubuntu Server 24.04 (Noble) will automatically take their Source Interfaces offline. If you have a SecureDrop and your server has not been upgraded, contact us.

SecureDrop Workstation 1.2.0 has been released! This version brings initial support for driverless printing, making SecureDrop Workstation compatible with a much larger selection of printers.

Ubuntu 20.04 (Focal) is now deprecated for use with SecureDrop Application and Monitor Servers. If you are already using SecureDrop and your server did not upgrade automatically, contact support.

SecureDrop 2.12.8 has just been released, which triggers upgrades to Ubuntu Noble on 100% of Monitor Servers. If either of your servers are not upgraded to Ubuntu Noble with this version installed, please contact support via

SecureDrop 2.12.7 has just been released - this version will trigger upgrades to Ubuntu Noble on approximately 40% of all Monitor Servers. If your Application Server has not already been upgraded to Noble, please contact us via

SecureDrop 2.12.6 has just been released, which will trigger upgrades to Ubuntu Noble on approximately 20% of all Monitor Servers. If your Application Server has not already been upgraded to Noble, please contact support via

SecureDrop 2.12.5 has been released. This version upgrades 100% of Application Servers to Ubuntu Noble. We will begin upgrading Monitor Servers later this week.

Upgrades to Ubuntu Noble are going strong, with approximately 40% of Application Servers updated. Over the next week, we will push a series of point releases to begin automated upgrades of all remaining Application Servers, with Monitor Servers to follow.

SecureDrop 2.12.3 has been released. This version upgrades about 40% of servers to Ubuntu Noble, and fixes a bug where failing the pre-upgrade migration check could disable automatic updates.

SecureDrop 2.12.2 has been released. This release enables the first phase of automated Noble upgrades and provides an additional check to verify the state of Ethernet interfaces prior to upgrade.

SecureDrop Workstation 1.1.2 has been released! This version removes the “sd-retain-logvm” that was created for forensic analysis purposes in response to a vulnerability disclosed in February.

SecureDrop 2.12.1 has been released. This is an Admin Workstation-only release, which improves the reliability of the semiautomated Ubuntu Noble upgrade when using SSH-over-Tor.

WEBCAT allows developers to sign their web applications, site operators to enroll their domains, and web browsers to transparently verify the resources they receive. It uses established technologies and is open source:

Today we're releasing WEBCAT, a set of open-source tools that enables tamper-proof web applications. This is a major milestone on the path to the next generation of SecureDrop, to provide trustworthy browser-based encryption.