Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
ec234a6
e-mail -> email
ChumOfChance Jun 10, 2026
d8fad70
remove all title case in headers
ChumOfChance Jun 11, 2026
2a76312
fix underlines I missed
ChumOfChance Jun 11, 2026
4e808f4
App -> Inbox
ChumOfChance Jun 11, 2026
ba8d75a
Change U+2019 to '
ChumOfChance Jun 11, 2026
0dd2adb
Further cleaning/clarifying 'application'
ChumOfChance Jun 13, 2026
6ad34bb
Glossarizing all Application and Monitor Server
ChumOfChance Jun 13, 2026
dd44260
glossarization mostly done, plus a few related edits
ChumOfChance Jun 13, 2026
1df716a
Admin and Journalist Workstation glossary cleanup
ChumOfChance Jun 15, 2026
ea23d3f
Remove title case
ChumOfChance Jun 15, 2026
5ccfb05
Standardize use of onion address, onion name
ChumOfChance Jun 15, 2026
60f1e9f
make commands to be copied easier to copy
ChumOfChance Jun 15, 2026
9501d0b
Standardize USB flash drive and related changes, add Export Device ba…
ChumOfChance Jun 17, 2026
7f8a9c3
Polish, small edits
ChumOfChance Jun 17, 2026
3c2e711
A few more USB flash drive fixes
ChumOfChance Jun 17, 2026
b5be01d
Clean up extra lines
ChumOfChance Jun 17, 2026
12267da
Typo fix
ChumOfChance Jun 17, 2026
58c6a79
Update docs/includes/backup-and-update-reminders.txt
ChumOfChance Jun 18, 2026
250686e
Update docs/admin/reference/ssh_access.rst
ChumOfChance Jun 18, 2026
268b2a6
Update docs/admin/installation/create_admin_account.rst
ChumOfChance Jun 18, 2026
2c15af6
Clean up SVS and some Admin/Journalist workstation references
ChumOfChance Jun 18, 2026
305d19c
More italics, formatting all terms of art more consistenly
ChumOfChance Jun 18, 2026
f76c7d6
Fix those pesky underlines
ChumOfChance Jun 18, 2026
31c47b7
Title Case Daily Journalist Alerts
ChumOfChance Jun 24, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions docs/admin/deployment/deployment_practices.rst
Original file line number Diff line number Diff line change
@@ -1,18 +1,18 @@
.. _Deployment:

Deployment Overview
Deployment overview
===================

Once SecureDrop is installed on a news organization's servers, it's important
for the administrator to configure it in a way that provides the greatest
protection for sources and journalists, given the unique needs and constraints
protection for *Sources* and *Journalists*, given the unique needs and constraints
of the organization.

The deployment section here covers a variety of tasks an administrator might
need to perform to successfully deploy SecureDrop, depending on organizational
needs and requirements.

Certain topics, such as creating a landing page and onboarding journalists, are
Certain topics, such as creating a *Landing Page* and onboarding *Journalists*, are
universal to all SecureDrop instances. Other topics are optional, and are only
needed if they fit in with the organization's security policies and newsroom
workflows.
Expand All @@ -21,16 +21,16 @@ The deployment tasks generally only need to be performed once. For tasks
related to the upkeep and troubleshooting of your SecureDrop instance, we
recommend reviewing :doc:`the maintenance documentation. <../maintenance/logging>`

Protecting the Security of the System
Protecting the security of the system
=====================================

SecureDrop is only as secure as the environment that surrounds it. To keep
sources safe, the news organization's website, physical space, and dedicated
*Sources* safe, the news organization's website, physical space, and dedicated
SecureDrop hardware must employ a set of basic security best practices or risk
losing any source protection provided by SecureDrop.

Freedom of the Press Foundation eventually plans to `list all of those
SecureDrop onion URLs <https://securedrop.org/directory>`__ that meet the
SecureDrop onion addresses <https://securedrop.org/directory>`__ that meet the
minimum requirements for deployment best practices as "verified" on its
website. If your organization cannot follow the minimum guidelines, we cannot
recommend your SecureDrop instance as safe to use.
Expand Down
42 changes: 21 additions & 21 deletions docs/admin/deployment/getting_the_most_out_of_securedrop.rst
Original file line number Diff line number Diff line change
@@ -1,26 +1,26 @@
Promoting Your SecureDrop Instance
Promoting your SecureDrop instance
==================================

At Freedom of the Press Foundation, weve found news organizations that get the
At Freedom of the Press Foundation, we've found news organizations that get the
most out of SecureDrop are those who promote it regularly and effectively.
SecureDrop will only be used by sources if they know it exists, so its best
SecureDrop will only be used by *Sources* if they know it exists, so it's best
to promote its use in a variety of ways so that a wide swath of people will see
it.

So here are a few tips used by some of the news outlets that have seen the most
success with SecureDrop.

Make a High Profile Announcement
Make a high profile announcement
--------------------------------

Anytime you launch a SecureDrop, youll want to write an accompanying news story
along with it to alert your readers and potential sources where to submit
Anytime you launch a SecureDrop, you'll want to write an accompanying news story
along with it to alert your readers and potential *Sources* where to submit
information. Almost every news organization already does this, but some good recent
examples come from `USA Today`_, `The Guardian`_, and `Wired`_. You can also write a
companion Q & A like the `Washington Post`_ did.

However, a launch announcement is really just a small piece of the puzzle. Its
important to regularly remind readers and potential sources that your SecureDrop
However, a launch announcement is really just a small piece of the puzzle. It's
important to regularly remind readers and potential *Sources* that your SecureDrop
exists, because only a tiny fraction will likely see the launch announcement and
it will quickly be buried in other news after a couple of days.

Expand All @@ -29,11 +29,11 @@ it will quickly be buried in other news after a couple of days.
.. _`Wired`: https://www.wired.com/2017/04/new-way-securely-send-information-wired/
.. _`Washington Post`: https://www.washingtonpost.com/pr/wp/2017/01/31/qa-about-sharing-confidential-tips-with-the-washington-post/

Provide a Clear Link on Your Homepage
Provide a clear link on your homepage
-------------------------------------

Making your SecureDrop or secure tips page easy to find is one of the most important
things you can do to ensure that potential sources use it. The best way you can do
things you can do to ensure that potential *Sources* use it. The best way you can do
this is providing a clear link on your home page, so that every time a user goes
to your website, they can quickly see where they need to go.

Expand All @@ -45,42 +45,42 @@ The Washington Post has a link on their front page for “how to share a tip sec

|How to Share a Tip Securely|

Other news organizations put a little link in their footer, however, weve found
Other news organizations put a little link in their footer, however, we've found
that this is not as effective as putting it in a more prominent on your front page.

Provide Links at the Bottom of Your Articles
Provide links at the bottom of your articles
--------------------------------------------

Another great way to remind potential sources know that they can use SecureDrop is
Another great way to remind potential *Sources* know that they can use SecureDrop is
to put a link at the bottom of each article. For example, Gizmodo Media Group,
uses a message like this:

|Gizmodo Article Footer|

Create an Instructional Video on How to Access and Use Your SecureDrop
Create an instructional video on how to access and use your SecureDrop
----------------------------------------------------------------------

To better help potential sources visualize how SecureDrop works, several
To better help potential *Sources* visualize how SecureDrop works, several
organizations have made short instructional videos walking through all the steps.
Some good examples include the `Toronto Globe and Mail`_, The Intercept, and
`Lucy Parsons Labs`_.

.. _`Toronto Globe and Mail`: https://www.youtube.com/watch?v=oSW2wMWtAMM
.. _`Lucy Parsons Labs`: https://www.youtube.com/watch?v=LkgN244ggzs

Regularly Share Your SecureDrop *Landing Page* on Social Media
Regularly share your SecureDrop *Landing Page* on social media
--------------------------------------------------------------

The majority of adults in the United States now get their news from Facebook or
other social media sites like Twitter, so its important to regularly remind
other social media sites like Twitter, so it's important to regularly remind
people via social media posts that SecureDrop is the safest way they can contact
your journalists if they have a sensitive tip to share. If theres specific
your *Journalists* if they have a sensitive tip to share. If there's specific
stories you are looking for tips on that may already be in the news, this is a
great way of getting added attention to your SecureDrop.

|New Yorker Tweet|

Target Potential Whistleblowers with Advertising
Target potential whistleblowers with advertising
------------------------------------------------

Facebook and Twitter also allow for targeted advertising to users in specific
Expand All @@ -94,7 +94,7 @@ how it can be done. You can read about `how you can do the same thing here`_.
.. _`tell on trump`: https://web.archive.org/web/20200926063152/https://specialprojectsdesk.com/tell-on-trump-1792401813
.. _`how you can do the same thing here`: https://freedom.press/news/we-targeted-securedrop-ad-potential-whistleblowers-trump-administration-you-can-too/

Put an Advertisement in Your Physical Paper
Put an advertisement in your physical paper
-------------------------------------------

Obviously this tip only applies to news outlets that also print a physical
Expand All @@ -107,7 +107,7 @@ launched SecureDrop and other secure communications tools for their tips line:
|New York Times Tweet|

And the Toronto Globe and Mail regularly puts a note in their physical paper
reminding potential sources where they can go:
reminding potential *Sources* where they can go:

|Globe and Mail Tweet|

Expand Down
Loading