Does SecureDrop require KYC?

As of May 12, 2026, SecureDrop does not require KYC for normal use. Open-source whistleblower submission system run by individual publications. Sources contact via Tor onion service with no account, no email, no phone.

Where is SecureDrop based?

Operating jurisdiction listed as Freedom of the Press Foundation (United States). This is best-known information; corporate structure can be opaque.

Anonymous hosting · Messaging

SecureDrop

SecureDrop is the canonical Tor-onion-service whistleblower intake system.

Website: securedrop.org
KYC: no KYC — Open-source whistleblower submission system run by individual publications. Sources contact via Tor onion service with no account, no email, no phone.
Status: active
Fiat on-ramp: no
Payment: donation
Jurisdiction: Freedom of the Press Foundation (United States)
Founded: 2013
Open source: yes
Custodial: no
Last verified: May 12, 2026
Sources: 3

Overview

What SecureDrop is#

A whistleblower submission system implemented as a Tor onion service. Each publication runs its own instance.

Threat-model fit#

The reference channel for whistleblowing to a newsroom. See the journalists and whistleblowers stack guides for the broader context.

Strengths

The reference Tor-onion-service-based intake system for journalist sources.
Multiple layers of cryptographic protection between submitter and journalist's identity.
Used by The New York Times, The Guardian, ProPublica, The Washington Post, The Intercept, and dozens of others.
Maintained by the Freedom of the Press Foundation; open source.

Caveats

Source/submitter does not pick the operator — the operator is the publication running the instance.
Each publication's threat model and operational discipline determines actual privacy in practice.
Use Tor Browser and follow the publication's specific instructions before submitting.

Verdict

SecureDrop is the canonical Tor-onion-service whistleblower intake system. Operated by individual publications under FPF stewardship. For journalists handling sensitive sources, it is the gold standard; for sources, it is the highest-privacy submission channel available to most newsrooms. See the directory at securedrop.org/directory/ for participating publications.

FAQ

Does SecureDrop require KYC?: As of May 12, 2026, SecureDrop does not require KYC for normal use. Open-source whistleblower submission system run by individual publications. Sources contact via Tor onion service with no account, no email, no phone.
What payment methods does SecureDrop accept?: SecureDrop accepts: donation.
Where is SecureDrop based?: Operating jurisdiction listed as Freedom of the Press Foundation (United States). This is best-known information; corporate structure can be opaque.

Sources

SecureDrop project · accessed May 12, 2026
SecureDrop — directory of publications · accessed May 12, 2026
Freedom of the Press Foundation · accessed May 12, 2026

Alternatives to SecureDrop

Entry last verified May 12, 2026. Notice an error? Send it via the contact form.