Starting SecureDrop Inbox

After you log into Qubes, SecureDrop Inbox will start automatically. If you have previously exited the application, you can double-click on the SecureDrop Inbox shortcut in the top left of the desktop to launch it.

screenshot_desktop-shortcut

Performing updates

Unless the system has just been updated, you will now be prompted to automatically download and apply any available security updates:

screenshot_update_prompt

For security reasons, you will not be able to launch the SecureDrop Inbox until updates have been applied. This typically takes between 10 and 30 minutes.

Click “Start updates” if you are ready to start the process. (If you prefer to shut down the machine or do other work in Qubes OS instead, click “Cancel”.) You will see a progress indicator until updates are completed:

screenshot_apply_updates

Important

Allow the update process to complete fully, without closing or interrupting it, or you risk breaking important system components.

At the end of this process, SecureDrop Workstation may prompt you to reboot if core system components were updated. Once all steps in the update process have been completed, the SecureDrop Inbox will launch automatically.

Signing in

To sign in, enter the username and passphrase provided to you by your SecureDrop administrator, as well as the two-factor code using the method you have set up. If you have used SecureDrop before, these are the same credentials that you would use to sign in to the Journalist Interface.

screenshot_sd-app_login

Troubleshooting tips

If you have trouble running the updater or logging in, please contact your administrator. Our network troubleshooting guide for administrators gives detailed steps for investigating connectivity issues.

Syncing

Unless you are in offline mode, SecureDrop Inbox will automatically sync with your SecureDrop Instance every 60 seconds, or every time you send a reply. Syncing also fetches new submissions sent by sources or replies from other journalists in your organization. You can initiate a sync manually from the menu or by typing Ctrl+S.

The sync indicator will be green if the last sync was successful.

screenshot_sync_indicator

If the sync indicator is orange, it means the most recent sync failed or did not complete properly. If your SecureDrop Inbox is repeatedly unable to sync, you can try troubleshooting the network connection on your SecureDrop Workstation or contacting your admin for help.

Working offline

Offline mode is available for circumstances where you wish to work offline or are unable to connect to your SecureDrop server.

screenshot_use_offline

Because SecureDrop Workstation allows you to download and decrypt submissions on one machine, submissions that you have previously downloaded are still available in offline mode and can be accessed even when you are not signed in.

Important

Protecting downloaded submissions is another reason why SecureDrop Workstation needs to be powered off completely when it is not in use.

Any actions you take while in offline mode, such as sending replies or deleting conversations, will be synchronized to the server the next time you sign in. To sign in while in offline mode, click the orange “Offline Mode” to open the menu and select “Sign in”.

screenshot_offline_mode_menu

Falling back to the legacy SecureDrop Client

If you encounter an issue with the new SecureDrop Inbox or would like to use the older SecureDrop Client, you can access it for a limited time via Qubes Application menu ▸ System Tools ▸ Other ▸ SecureDrop Client (legacy). The older SecureDrop Client will remain available until the end of May 2026.

Important

Note that the older Client and newer Inbox sync and download data independently; any data you download in SecureDrop Inbox will have to be downloaded again in the Client, if you choose to use it, and vice versa.