There are many ways to contribute, and we welcome your help! By contributing to this project, you agree to abide by our Code of Conduct.

SecureDrop Inbox

The SecureDrop Inbox is a desktop application for journalists to communicate with sources and work with submissions on the SecureDrop Workstation. It runs within a Qubes OS virtual machine that has no direct network access and opens files within individual, non-networked, disposable VMs.

This repository contains multiple components, including:

• app: Electron application (Inbox)
• export: logic for exporting submissions
• gpg-config: sets up the GPG keyring with the secret key
• keyring: APT configuration and signing key
• log: centralized logging
• proxy: restricted HTTP proxy and Tor bootstrapping
• workstation-config: base configuration for all templates

Each component's folder has a README with more detail.

To learn more about architecture and our rationale behind our Qubes OS approach, see the SecureDrop Workstation readme.

We initially piloted this project with a small number of news organizations; see our blog post for additional information. In July 2024, we transitioned SecureDrop Workstation to an open beta with the 1.0.0 release.