Welcome to the SecureDrop Workstation documentation!

Warning

SecureDrop Workstation is currently in a closed beta, and we do not recommend installing it for production purposes independently. See our blog post for more information.

SecureDrop Workstation is a tool to enable journalists to communicate with anonymous sources and manage submitted documents, while providing mitigations against malware and other security risks. It is built on Qubes OS and requires a SecureDrop server setup.

Overview

• Introduction
  • What is Qubes OS?
  • What is SecureDrop Workstation?
• SecureDrop Workstation Architecture
  • SecureDrop Workstation networking architecture
• SecureDrop Workstation Project Status
  • Is SecureDrop Workstation right for you?
  • Do you still need a Tails-based Secure Viewing Station?
  • Roadmap and Timeline
  • General availability

Guide for Journalists

• Starting Qubes
• Starting the SecureDrop Client
  • Performing updates
  • Signing in
  • Seen and unseen submissions
  • Working offline
• Communicating with sources
  • Opening a conversation
  • Highlighting conversations
  • Sending a reply
  • Deleting a conversation
• Working with submissions
  • Downloading
  • Viewing
  • Printing
  • Exporting to an Export USB
• Ending your session
• FAQ
  • Frequently Asked Questions

Guide for Administrators

• Recommended hardware
  • Qubes OS hardware requirements
  • Lenovo X1 series laptops
  • Lenovo T series laptops
  • Upgrading the BIOS on Lenovo ThinkPad laptops
  • USB-C ports
• Installing and Configuring SecureDrop Workstation
  • Overview
  • Prerequisites
  • Pre-install tasks
  • Install tasks
  • Troubleshooting installation errors
  • Uninstalling SecureDrop Workstation
  • Getting Support
• Keeping the Workstation secure
  • Physically secure the workstation
  • Use strong passphrases
  • Apply updates when prompted
• Managing Clipboard Access
  • Configuring clipboard access to sd-app
• Reviewing and exporting logs
• Troubleshooting connection problems
  • Step 1: Verify you are connected to the Internet
  • Step 2: Troubleshooting login issues
  • Step 3: Verify that all required VMs are running
  • Step 4: Verify that required VMs have connectivity
  • Step 5: Restart Tor
  • Step 6: Restart sd-proxy and sd-whonix
  • Step 7: Restart sys-net and sys-firewall
  • Customizing Synchronization Timeouts
  • Examining logs
• Troubleshooting system updates
  • Step 1: Locate the updater log
  • Step 2: Identify the cause(s) of the error
  • Step 3: Resolve the issue(s)
  • Step 4: Restart the updater
• Provisioning Export USB devices
  • Creating a LUKS-encrypted drive
  • Creating a VeraCrypt-encrypted drive
• Limitations and known issues
  • Reporting issues
  • Current known issues
• Upgrading to Fedora 38
  • Why do I need to upgrade?
  • Install Fedora-38 template
  • Update the Fedora-38 template
  • Configure VMs to use the new template
  • Getting Support
• Backup and Restore
  • Backup
  • Restore

• Index

• Search Page