There are many ways to contribute, and we welcome your help! By contributing to this project, you agree to abide by our Code of Conduct.
The SecureDrop Inbox is a desktop application for journalists to communicate with sources and work with submissions on the SecureDrop Workstation. It runs within a Qubes OS virtual machine that has no direct network access and opens files within individual, non-networked, disposable VMs.
This repository contains multiple components, including:
app: Electron application (Inbox)export: logic for exporting submissionsgpg-config: sets up the GPG keyring with the secret keykeyring: APT configuration and signing keylog: centralized loggingproxy: restricted HTTP proxy and Tor bootstrappingworkstation-config: base configuration for all templates
Each component's folder has a README with more detail.
To learn more about architecture and our rationale behind our Qubes OS approach, see the SecureDrop Workstation readme.
We initially piloted this project with a small number of news organizations; see our blog post for additional information. In July 2024, we transitioned SecureDrop Workstation to an open beta with the 1.0.0 release.