Can the SafeDeposit server read my files?

No. Files are encrypted in your browser with libsodium before upload. The server stores ciphertext only and does not hold the private key needed to open deposits.

Do I need an account to submit as a whistleblower?

No. SafeDeposit requires no registration, email, or personal identity fields. Prefer Tor Browser or Tails for stronger network anonymity.

Can people outside the United States use SafeDeposit?

Yes. Reachable worldwide over HTTPS and, when published, Tor onion. Multilingual first-party UI. Local laws still apply to what you submit and how you connect.

Does SafeDeposit use Google Analytics?

No. The site does not embed Google Analytics, ad pixels, or third-party translate widgets. Scripts are first-party with a strict Content-Security-Policy.

How do I verify I am encrypting to the right operator?

Use the Verify page to compare the published public-key fingerprint with a trusted out-of-band channel before encrypting high-risk material.

How do I report corruption anonymously online?

Use a secure drop that encrypts on your device. On SafeDeposit: prefer Tor for high risk, verify the operator key fingerprint, encrypt files in the browser, upload ciphertext, and keep your local receipt. No account is required.

Yes. Free for sources. No paywall, no account, and no Google Analytics or ad trackers in the page.

How do I check status after uploading a deposit?

Save the receipt JSON after upload. Open the Status page with the receipt token to check lifecycle or sealed follow-up channel without creating an account.

What if JavaScript is disabled on SafeDeposit?

Client-side encryption requires JavaScript. Without it, files cannot be sealed on your device. Prefer Tor Browser with scripts enabled for this site only.

Whistleblower Secure Drop & Anonymous Encrypted Upload

Anonymous encrypted upload for sources worldwide

Report anonymously. Encrypt first. No account.

A free whistleblower secure drop for people who need to tip documents without a hotline form or email trail. Every deposit is encrypted in your browser before upload; the server is designed to hold only ciphertext. Common image metadata (JPEG EXIF / PNG text) is stripped by default when that option is checked.

Not legal advice; encryption is not a shield against retaliation or a compromised device.

How it works

Optional best-effort strip of common JPEG/PNG metadata, then your browser packs files and encrypts with XChaCha20-Poly1305 — all on your device.
That key is sealed to the operator’s public key (X25519 sealed box). Only they can open it offline.
A short proof-of-work slows bulk abuse without identifying you.
Only ciphertext is uploaded; the server never receives plaintext or your encryption keys.

Source protection — protect yourself

Prefer Tor Browser or Tails. Avoid logging into personal accounts in the same session.
Do not include your name, workplace, or unique metadata in filenames or messages.
Confirm the public key fingerprint matches a trusted channel before encrypting.
This tool reduces technical risk; it cannot protect a compromised device or a coerced operator with the offline key.
If you are in immediate danger, prioritize personal safety over submitting files.

Full whistleblower guide →

Trust & Verification

Before high-risk deposits, verify who you are encrypting to.

Critical step

Verify operator key

Compare this instance’s SHA-256 fingerprint with @SafeDepositOrg and any channel you already trust.

Verify key

Transparency

Warrant canary

A best-effort transparency signal. Not cryptographic proof. Still verify the operator out of band.

Canary

Who is on the other side

A small team with deep personal ties to many hardened journalists, and years of behind-the-scenes experience on work of the most sensitive kind. We believe in free speech, government transparency, and protecting those who step forward on matters of public importance.

No promise of publication or legal immunity — only seriousness. Verify the operator key before high-risk use.

FAQ — whistleblowers & sources

What is a whistleblower secure drop?

A private channel to send documents or tips without signing up. SafeDeposit encrypts in your browser so the server never sees plaintext.

Can the server read my deposit?

No. Encryption runs in your browser. The server is designed never to hold the private key.

Is this anonymous?

We require no account. Network anonymity depends on how you connect (Tor/Tails recommended). Clearnet TLS still terminates at the CDN edge.

Can I use this from outside the US?

Yes — the site is reachable internationally over HTTPS (and onion when published). English UI; no geo paywall. Your local laws and network risks still apply.

Is SafeDeposit the same as SecureDrop?

No. Independent sealed drop; not affiliated with SecureDrop. Different architecture, same general goal of safer source→operator transfers.

What about legal process?

Ciphertext may still be subject to lawful process. A healthy warrant canary is published when available. See privacy policy and terms of service.

What is Trust Pack 1.0?

A trust upgrade for sources: onion-first guidance, a clearnet risk checklist, multi-channel key verification, Dangerzone sanitization tips, optional signed canary support, and public compare page — still no accounts or trackers.

Should I use clearnet or Tor?

Prefer Tor Browser or Tails and the published onion when you can. Clearnet HTTPS works after an explicit risk checklist at submit time; the network edge may still see your IP.

Can I check status or message the operator later?

Download your receipt JSON after upload. On the status page you can check lifecycle without an account. If the operator opens an optional sealed follow-up channel, you can exchange sealed messages with that same receipt. Keep the receipt offline and secret.

What if JavaScript is disabled?

Client-side encryption requires JavaScript in a modern browser. Without it, SafeDeposit cannot seal files on your device. Prefer Tor Browser with scripts enabled for this site only, or another modern browser you trust.

How large can my files be?

Limits depend on the operator configuration and your device memory. Very large packages may fail during browser encryption or upload. Prefer smaller packages when risk or bandwidth is high; chunked upload is used when the server enables it.

Should I screenshot my receipt?

Prefer Download receipt JSON. Screenshots can leak via cloud photo backups, OCR, or compromised devices. Never re-upload the receipt file to any website.