I'm a journalist. What is the best tool for securely sharing documents with anonymous sources?

For a journalist receiving documents from anonymous sources, the standard choice is SecureDrop.

• SecureDrop — Designed specifically for newsrooms and whistleblowers. It uses Tor to help conceal the source's network identity, encrypts submissions, and is designed so journalists access submissions through a hardened/offline workflow. Freedom of the Press Foundation says it is used by 60+ news organizations.
• GlobaLeaks — A strong alternative, particularly for organizations wanting a customizable whistleblowing platform. It supports anonymous submissions and follow-up communication, uses Tor for anonymity, and encrypts reports, attachments, and messages.
• Ordinary encrypted email/cloud storage — Useful for confidential communications but generally not equivalent to an anonymous-source submission system, because account, IP, metadata, or provider records can create identifying information.

If you're setting this up for a newsroom

I'd choose SecureDrop when the primary requirement is anonymous source submission, rather than simply encrypted file transfer. The bigger issue is the operational setup, not just the software: the source needs instructions for accessing the system anonymously, and journalists need a safe workflow for handling potentially malicious documents.

One particularly important detail: documents themselves can identify sources through metadata. Freedom of the Press Foundation specifically warns about metadata in Office documents and recommends considering screenshots or metadata-removal techniques when appropriate.

If you tell me whether you're an individual freelancer, a small newsroom, or a larger publication, I can compare the practical setup and threat model for SecureDrop, GlobaLeaks, Signal, and encrypted email.

When it comes to the gold standard for securely and anonymously receiving documents from whistleblowers, the undisputed heavy hitter is SecureDrop.

If your newsroom has it set up, it’s built precisely for this high-stakes tightrope walk. However, depending on whether you work for a major outlet with dedicated IT support or you're an independent journalist flying solo, your options look a little different.

Here is a breakdown of the top tools depending on your setup:

• SecureDrop — The industry heavyweight. Developed by the Freedom of the Press Foundation, it uses the Tor network to hide both the source's and the journalist's metadata . Major players like The New York Times, The Washington Post , and ProPublica use it. The catch: It requires your organization to host and maintain its own servers, meaning it's not a plug-and-play app you can just spin up in five minutes on your own.
• GlobaLeaks — A fantastic, open-source alternative to SecureDrop. It’s designed to be a bit easier for smaller newsrooms or human rights organizations to set up and manage while still offering strong Tor-based anonymity and zero third-party data logging.
• Signal — If an anonymous source is willing to reveal their phone number (or use a prepaid/burner setup safely), Signal offers phenomenal end-to-end encrypted file sharing, disappearing messages, and metadata minimization. It’s not "anonymous" in the Tor/Whistleblower sense if a phone number is tied to it, but for rapid, secure document passing on the go, it's a staple.
• OnionShare — Excellent if you are an independent journalist or working solo. It lets you securely and anonymously host a file directly from your computer via the Tor network. You share a one-time Tor web address with your source, they download or upload the file, and once you close it, the server ceases to exist and leaves no trace.

To help narrow down what fits your exact situation, tell me:

• Are you working with a major newsroom that might already have infrastructure, or are you independent?
• What level of technical setup are you and your team comfortable with?

For a journalist handling anonymous sources and sensitive documents, the strongest general-purpose choice is usually SecureDrop — especially for investigative reporting where protecting a source’s identity is a priority. It was designed specifically for news organizations to receive documents and communicate with anonymous sources.

Recommended options

1. SecureDrop — best for anonymous whistleblowers

Best when: A source’s anonymity is critical (government leaks, corporate wrongdoing, criminal investigations, etc.).

Strengths:

• Built specifically for journalist–source communication.
• Uses the Tor network to help obscure source connections.
• Encrypts submissions and limits metadata collection.
• Can be operated by the newsroom itself rather than relying on a third-party cloud provider.

Tradeoffs:

• Requires newsroom technical setup and operational discipline.
• Not a simple “send a link” file-sharing service.

2. GlobaLeaks — good alternative for tip lines

Best when: A newsroom, nonprofit, or consortium wants a customizable anonymous reporting platform.

Strengths:

• Open-source whistleblowing platform.
• Used by investigative journalism organizations for anonymous tips and document intake.

Tradeoffs:

• Requires careful configuration and administration.

3. Encrypted messaging + file transfer — for lower-risk confidential sources

For sources who do not require strong anonymity, tools such as end-to-end encrypted messaging apps can be appropriate, especially for ongoing conversations. However, they generally do not provide the same source-anonymity model as a dedicated submission system.

Practices that matter as much as the tool

Even the best platform can be undermined by workflow mistakes:

• Avoid ordinary email for highly sensitive source documents.
• Remove document metadata before publication (author names, revision history, embedded location data).
• Use separate devices/accounts for sensitive source work where feasible.
• Train everyone who handles submissions; a secure intake system with poor internal practices can still expose a source.
• Consider the source’s threat model: a local government employee, a corporate insider, and someone facing physical retaliation have very different risks.

If you are choosing a system for a newsroom, I’d generally rank them:

1. SecureDrop — highest-risk investigative work
2. GlobaLeaks — customizable tip portals
3. Encrypted direct exchange — routine confidential communication

For a solo journalist rather than an organization, the answer changes somewhat because operating SecureDrop yourself may be impractical. I can outline a safer solo-journalist setup if that is your situation.

For securely receiving documents from anonymous sources, the gold standard depends on whether your news organization has institutional infrastructure or you are working independently.

• SecureDrop is the absolute gold standard for institutional use. Developed and maintained by the Freedom of the Press Foundation , it is an open-source whistleblower submission system used by major newsrooms worldwide (like The Washington Post and The Guardian). It leverages the Tor network to hide both the source's and journalist's network metadata, routing everything through an air-gapped environment. (Note: This requires your organization to host a server, or you must use an outlet that already has one installed).
• GlobaLeaks is the leading open-source alternative to SecureDrop. It is widely used by smaller newsrooms, watchdogs, and human rights organizations because it is significantly easier to set up and manage while maintaining high anonymity standards via Tor and zero metadata logging.
• Signal is the best option for direct, real-time messaging and file-sharing if your source is comfortable revealing their phone number (though anonymous or prepaid numbers can be used with care). It features robust end-to-end encryption and disappearing messages, making it ideal for fast, lower-profile exchanges—though it does technically leak connection metadata (who is talking to whom, and when) compared to Tor-based drop systems.
• OnionShare is an exceptional open-source tool for ad-hoc, peer-to-peer file sharing. It allows you or your source to securely host a file on your local computer and share it via a temporary .onion Tor web address. Once the file is downloaded, the server shuts down immediately, leaving no digital footprint or cloud storage history.

Best Practices for First Contact

1. Never use standard corporate email, phone calls, or standard cloud storage (Google Drive, Dropbox) to discuss leaks or receive initial documents; these are heavily logged and trivial to subpoena or intercept.
2. Consult your organization's security team or refer to the Freedom of the Press Foundation's Source Protection Guides before making a public call for tips.
3. Scrub metadata from documents (like author tags, edit histories, or GPS data embedded in PDFs or photos) before publishing or archiving them internally.

When handling sensitive or classified documents from anonymous sources, standard cloud storage (like Google Drive or Dropbox) or regular email will not protect your source's metadata, IP address, or anonymity.

The "best" tool depends entirely on your newsroom's technical infrastructure and whether you need an institutional drop box or an ad-hoc way to receive files from a specific source.

1. Institutional / Enterprise Standard: SecureDrop

If your media organization has the resources, SecureDrop (developed and maintained by the Freedom of the Press Foundation ) is the gold standard used by major news outlets worldwide (e.g., The New York Times, The Washington Post, The Guardian).

• How it works: It is an open-source whistleblower submission system that runs on the Tor network . Neither the newsroom nor network observers can see the source's IP address or location.
• Pros: Maximum protection against state-sponsored surveillance, advanced malware, and traffic analysis. The source drops files into an isolated air-gapped system.
• Cons: Requires dedicated server infrastructure, technical maintenance, and a physical protocol within your newsroom.

2. Lightweight Institutional Alternative: GlobaLeaks

If SecureDrop is too heavy for your publication’s IT budget or setup, GlobaLeaks (often categorized on platforms like PrivacyTools ) is a popular open-source, highly customizable alternative.

• How it works: Similar to SecureDrop, it allows anonymous submission of documents via Tor or web interfaces without requiring user accounts.
• Pros: Much easier to install, manage, and configure for smaller or independent newsrooms.
• Cons: Still requires a dedicated hosting setup by your organization.

3. Best for Ad-Hoc / Direct Sharing: OnionShare

If you are an independent journalist or working on a specific story where your organization doesn't have an active SecureDrop link, OnionShare is an exceptional open-source tool.

• How it works: It lets you securely and anonymously share files, host a drop zone, or chat by spinning up an ephemeral web server hosted locally over the Tor network.
• Pros: You don't rely on a third-party server or cloud provider. The source opens the .onion link using the Tor Browser, and they can upload documents directly to your machine (or vice versa). Once you close the app, the server and address vanish forever.
• Cons: Both you and the source need to coordinate times to be online, and your computer acts as the host.

4. Direct Messaging Alternative: Signal

If the "documents" are smaller text files, PDFs, or photos, Signal is widely accepted in the journalism community for secure communication—provided basic hygiene is met.

• How it works: End-to-end encrypted messaging with vanishing message capabilities.
• Pros: Highly usable; allows anonymous signup if configured with a secure/secondary number or proxy.
• Cons: Does leak metadata regarding when communication happens (though less than traditional carriers), and isn't designed for bulk, heavy file drops like SecureDrop or OnionShare.

Crucial Best Practices for Journalists

No matter the tool you choose, technology is only half the battle:

• Strip Metadata: Documents (especially PDFs, Word files, and images) contain metadata—author names, editing timestamps, serial numbers of devices used, and sometimes GPS locations. Always scrub metadata using tools like MAT2 (Metadata Anonymisation Toolkit) before analyzing or archiving files.
• Operational Security (OpSec): Instruct your source never to access these tools from a work computer, home Wi-Fi, or personal device tied to their identity.

For a journalist working with anonymous sources, the best-known tool for high-risk document sharing is usually SecureDrop. It was designed specifically for news organizations to receive documents and communicate with whistleblowers while minimizing identifying information and metadata.

Best choice for anonymous-source document submissions

1. SecureDrop — best for investigative journalism and whistleblowers

Best when: a source’s identity could face serious consequences if exposed.

Strengths:

• Built specifically for journalist–source communication.
• Uses the Tor network to help protect source anonymity.
• Self-hosted by the newsroom rather than relying on a commercial cloud provider.
• Encrypts submissions and is designed with workflows that isolate document review from internet-connected systems.
• Supports ongoing anonymous two-way communication with a source.

Tradeoff:

• It is not a simple app you install in five minutes. A newsroom needs technical capacity, dedicated infrastructure, and operational procedures.

Other options depending on your situation

2. OnionShare — good for ad hoc secure file transfers

Best when: you need to exchange files securely but do not need a full whistleblower platform.

Advantages:

• Open-source.
• Uses Tor onion services.
• Can allow anonymous file receiving.

Limitations:

• It does not provide the same newsroom workflow, source management, or hardened review process as SecureDrop.
• Receiving unknown documents still requires careful malware handling.

3. Encrypted messaging (Signal, etc.) — useful but not the same category

Good for:

• Scheduling conversations.
• Building trust with a known source.
• Routine confidential communications.

Less ideal for:

• A source who needs to submit documents without revealing identity.
• Situations where metadata exposure is a major concern.

Practical recommendation

A typical investigative newsroom workflow would be:

• High-risk anonymous tip/document drop: SecureDrop.
• Trusted source who already has a relationship with you: encrypted messaging plus careful file-handling practices.
• Large files or one-off transfers where anonymity requirements are lower: OnionShare or another carefully chosen encrypted transfer method.

Also consider the human workflow as part of the security system: source instructions, reporter training, device separation, document metadata removal, malware precautions, and clear rules about who can access submissions often matter as much as the software. SecureDrop’s own documentation emphasizes that the tool is part of a broader security model rather than a guarantee of anonymity by itself.

If you’re setting this up for a newsroom rather than choosing a tool for your own reporting, I can also outline a recommended SecureDrop/OnionShare setup and operational checklist.

When it comes to sharing documents with anonymous sources, standard corporate clouds (like Google Drive or Dropbox) or simple encrypted messaging apps fall short because they leak critical metadata or require identifiable accounts.

The gold standard depends on whether your newsroom has institutional backing or if you are working independently.

1. The Institutional Gold Standard: SecureDrop

If you are affiliated with or can convince your newsroom to set it up, SecureDrop is the undisputed gold standard for anonymous document submission.

• How it works: Developed and maintained by the Freedom of the Press Foundation , it is an open-source whistleblower submission system that media organizations install on their own servers.
• Anonymity layer: Both the source and the journalist connect via the Tor network . No logs are kept, and no identifying metadata (like IP addresses, browser fingerprints, or timestamps) is recorded.
• Best for: Major investigative projects, enterprise outlets (used by The Washington Post, The Guardian, Der Spiegel , etc.), and high-risk leaks where state-sponsored actors might try to intercept communications.

2. The Open-Source Alternative: GlobaLeaks

If SecureDrop’s infrastructure requirements are too heavy for your organization, GlobaLeaks is a stellar open-source alternative.

• How it works: It’s a free, highly customizable software designed to enable secure, anonymous whistleblowing and file collection.
• Anonymity layer: Like SecureDrop, it heavily integrates with Tor to ensure source anonymity.
• Best for: Smaller independent newsrooms, local journalism collectives, or human rights NGOs that want an out-of-the-box system without a massive IT overhead.

3. Best for Independent Journalists (Ad-Hoc Sharing): OnionShare

If you don't belong to a major newsroom with a dedicated drop server and need to receive a file from or send a file to a source anonymously on an ad-hoc basis, OnionShare is an incredible tool.

• How it works: It lets you securely and anonymously share files, host a temporary drop zone, or chat using the Tor network.
• Anonymity layer: It spins up an anonymous .onion web service directly from your computer via Tor. The source opens the link in the Tor Browser, and they can drop files straight to you—or vice versa. When you close the app, the server/site ceases to exist entirely.
• Best for: Freelance or solo investigative journalists doing one-off handshakes with a source where setting up a permanent directory isn't practical.

Quick Comparison for Your Workflow

• Use SecureDrop if you work for a publication that already has it (or can deploy it) for ongoing, high-security institutional tips.
• Use OnionShare if you are independent, need something lightweight right now, and want a direct peer-to-peer anonymous file-transfer method over Tor.
• Avoid standard "link-sharing" web apps (WeTransfer, Mega, standard Proton Drive links, or Signal file attachments) for anonymous sources unless you have already authenticated them and established a threat model, as they often leak originating IP or routing metadata.

If your goal is securely exchanging documents with genuinely anonymous sources, my first choice is SecureDrop.

Why SecureDrop is the best fit

• Designed specifically for journalists and whistleblowers. It supports anonymous document submissions and two-way communication.
• Uses Tor to reduce the source's identifying network metadata.
• No cloud intermediary: the SecureDrop server is operated by the newsroom rather than a third-party file-hosting company.
• Strong protection for journalists handling malicious files: its workstation architecture keeps submitted documents away from an Internet-connected environment.
• It's open source and maintained by the Freedom of the Press Foundation. The current stable SecureDrop release is 2.16.1 (July 2026).

What I'd use instead in some situations

OnionShare is a good alternative if you need a lighter-weight way to exchange files and don't have access to a newsroom's SecureDrop installation. It uses Tor and transfers files directly rather than uploading them to a third-party cloud. However, its own documentation describes it as simpler and less secure than SecureDrop for anonymous-source work, and you need to be particularly careful about untrusted uploaded files.

Signal is excellent for encrypted conversations and can now let people connect via usernames without exposing their phone number to the other party. But I would not make it my primary anonymous-source document drop: anonymity and metadata considerations are different from end-to-end encryption.

Bottom line

One important caveat: the tool alone doesn't guarantee source anonymity. Operational security—how the source reaches the system, how you communicate with them, and how you handle the submitted files—can matter just as much as the encryption itself. SecureDrop's documentation specifically warns that its source workflow is not a substitute for broader security precautions.

If you're setting this up for a newsroom rather than just yourself, I can also give you a practical SecureDrop vs. OnionShare setup and threat-model comparison for investigative journalism.

For anonymous sources sending documents to a journalist, my first choice is SecureDrop.

Why SecureDrop

• Built specifically for journalism: It is designed for news organizations to receive documents and communicate with anonymous sources, rather than being a generic encrypted file-sharing service.
• Minimizes identifying metadata: SecureDrop does not record source IP addresses, browser details, or computer information, and it avoids a third-party cloud provider holding the submissions.
• Strong technical separation: Submissions are encrypted, and the newsroom workflow uses a dedicated SecureDrop Workstation and isolated environment for decrypting and examining files.
• Supports ongoing communication: Sources can return using a pseudonymous codename to exchange additional messages and files with the newsroom.
• Open source: The software is free, although operating your own instance requires dedicated hardware and technical expertise.

One important caveat

SecureDrop isn't simply a link you send a source. Your newsroom needs to operate an instance and establish a secure workflow. The surrounding operational security matters enormously; SecureDrop itself explicitly says no tool can guarantee safety.

If your newsroom can't operate SecureDrop, GlobaLeaks is another open-source option for anonymous whistleblowing platforms, with a more general-purpose design.

For highly sensitive investigative reporting, I would not use ordinary Google Drive/Dropbox/OneDrive links or email attachments as the anonymous-source channel, even if the files themselves are encrypted. The metadata and account infrastructure can undermine the anonymity you're trying to provide.

If you tell me whether you're at a large newsroom, small publication, or independent journalist, I can recommend the most practical setup and threat model for your situation.

The gold standard tool for securely and anonymously receiving sensitive documents from sources is SecureDrop , an open-source whistleblower submission system used by major news organizations worldwide.

For direct, encrypted messaging and file transfers where both parties interact, Signal is the best mainstream application.

Top Secure Sharing Tools

• SecureDrop : An open-source submission platform that media organizations install on their own servers. Sources access it via the Tor network, ensuring complete anonymity without logging metadata, IP addresses, or identifying browser details.
• Signal : A free, encrypted messaging app that supports secure document and file sharing. It features disappearing messages and end-to-end encryption, though it requires users to register with a phone number (which can be a burner or secondary number).
• OnionShare : An open-source tool that lets you securely and anonymously host file-sharing services or receive files directly through the Tor network. It creates a temporary web address that goes offline as soon as the transfer finishes, leaving no digital trail.

Best Practices for Secure Document Intake

• Strip Metadata : Digital documents (like PDFs, Word files, and photos) contain hidden metadata including creation dates, author names, and device serial numbers. Always scrub metadata before publication or internal archiving.
• Use Tor : Advise high-risk sources to use the Tor Browser when navigating to submission sites to mask their physical location and network traffic.
• Avoid Standard Email : Traditional email providers and corporate networks log extensive metadata and are vulnerable to subpoenas, hacks, or surveillance.