Secure document sharing for journalists

For a journalist sharing documents with anonymous sources, my top recommendation is SecureDrop if your newsroom can support it. If you need a simpler way to exchange files directly with a source, OnionShare is an excellent alternative.

The key distinction is that protecting a document's contents is not the same as protecting the source's identity. You want a tool that minimizes identifying metadata, avoids unnecessary third-party records, and supports anonymous communication.docs.securedrop.org+2

The best tools for journalists

• 

1. SecureDrop

(Best overall)

Best for: High-risk investigations, whistleblowers and sensitive leaks.

• Accepts documents and messages anonymously through Tor.
• Designed to minimize identifying metadata and third-party records.
• Supports ongoing communication using a source codename.

Trade-off: Your newsroom needs a properly configured installation and a secure workflow for handling potentially dangerous files.docs.securedrop.org+3

Official website and newsroom directory

---

• 

2. OnionShare

Best for: Direct, ad hoc file transfers without setting up a full whistleblower platform.

• Open-source software that shares files through Tor onion services.
• Can receive documents anonymously using its Receive feature.
• Files can be transferred directly between computers without uploading them to a conventional cloud storage provider.

Trade-off: The recipient's address and access key must be shared safely, and you must protect the computer receiving the files.docs.securedrop.org+2

Official website and downloads

---

• 

3. Signal

Best for: Secure conversations, clarifying details and coordinating with a source.

• End-to-end encrypted messages and calls.
• Disappearing messages can reduce the amount of conversation history retained on devices.
• Usernames can help avoid sharing a phone number directly.

Trade-off: Signal is not designed to provide complete anonymity, and it is not my first choice for a highly sensitive anonymous document-submission workflow.freedom.press+1

Official website

How I'd choose

Five precautions that matter as much as the tool

1. Publish a secure tip channel in advance. Sources should know how to reach you without first emailing their employer's documents to your newsroom.
2. Use Tor for anonymous submissions. Do not assume an encrypted website alone hides a source's identity.
3. Separate your work environment. Avoid employer-managed devices and networks when source protection requires anonymity.
4. Treat every incoming document as potentially malicious. PDFs and Office files can contain malware; use an isolated, secure document-review workflow.
5. Check metadata. Files may reveal author names, usernames, revision history, comments, or other identifying details. Preserve originals securely if needed for verification, and analyze copies for metadata exposure.freedom.press+1

No tool guarantees anonymity. A source's device, network logs, document contents and distinctive knowledge may still identify them.

For a practical, authoritative starting point, read the Freedom of the Press Foundation's guide to sharing sensitive leaks with the press. It covers source risks, SecureDrop, Tor, and document metadata.

One question that would help me narrow this down: Are you a reporter who needs to receive documents from sources, or are you setting up a system for an entire newsroom? The best choice differs depending on whether you need a quick transfer or a long-term anonymous tip line.

For a journalist protecting confidential sources, the best tool depends on how documents arrive, how sensitive they are, and whether you need to protect a source's identity from your employer, an internet provider, a cloud service, or a potentially hostile government.

My main recommendation is to use a dedicated anonymous submission system for receiving sensitive documents, combined with encrypted communications and secure document-handling practices. No single tool can protect a source if, for example, a document contains identifying metadata or your device is compromised.

Best tools for protecting journalistic sources

• 

1. SecureDrop

(Best for highly sensitive leaks)

A purpose-built system for newsrooms to receive documents and communicate with anonymous sources. It uses Tor, encryption, and infrastructure controlled by the news organization, reducing reliance on third-party providers and limiting identifying metadata.securedrop.org+2

Best for: Investigative reporting, whistleblowers, and sources who could face retaliation.

Trade-off: Your newsroom must operate and maintain the system securely; it isn't simply a personal file-sharing app.

Official site and documentation

---

• 

2. Signal

(Best for secure conversations)

Provides end-to-end encrypted messaging and file attachments, making it a strong option for communicating with an established source. Disappearing messages can reduce stored history, but recipients can still save or photograph messages.support.signal.org+1

Best for: Routine confidential exchanges, coordinating interviews, and sharing less exceptionally sensitive files.

Trade-off: It is not a complete anonymous document-submission system. Your contact with a source and your device security still matter.

Official site

---

• 

3. GlobaLeaks

A configurable whistleblowing platform with encryption, Tor support, two-factor authentication, and security-hardening features. It can be a good choice for a newsroom, nonprofit, or investigative organization building its own submission portal.globaleaks.org+1

Best for: Organizations that want a tailored reporting workflow or an alternative to SecureDrop.

Trade-off: Security depends on deployment, configuration, maintenance, and who administers the system.

Official security features

---

• 

4. GnuPG

Lets you encrypt files so only someone with the appropriate private key can decrypt them. It is useful when a source needs to send documents through an otherwise ordinary transfer channel, provided encryption is set up and verified correctly.

Best for: Encrypting files before transfer or protecting archived documents.

Trade-off: It doesn't provide anonymous submission by itself, and mistakes in key verification or file handling can undermine protection.

Official website

Which tool should you choose?

Five practices that matter as much as the software

• Separate receiving from reviewing. Treat unexpected attachments as potentially malicious. For high-risk cases, use a dedicated, isolated workstation to inspect documents rather than opening them on your everyday laptop. SecureDrop's journalist workflow is designed around this separation.docs.securedrop.org+1
• Watch for document metadata. Word files, PDFs, images, and spreadsheets can expose author names, usernames, revision history, location information, or other clues. Work on copies and inspect metadata before publishing.
• Avoid ordinary email and consumer cloud links for highly sensitive leaks. Encryption in transit does not necessarily prevent a provider from accessing stored content or metadata.
• Protect your devices and accounts. Keep software updated, use full-disk encryption, enable strong authentication, and restrict access to source material.
• Minimize retained copies. Decide where documents will be stored, who can access them, and how long they need to be retained. Deleting one copy does not erase backups, logs, or other copies.

One important distinction: confidentiality is not the same as anonymity. An encrypted file may remain confidential while the sender's identity is exposed through account records, network logs, document metadata, or the circumstances of the transfer.

For practical, journalist-specific guidance, the Freedom of the Press Foundation's SecureDrop documentation is a good starting point. No tool guarantees protection against every threat.

One question to narrow this down

What best describes your situation?

1. How do you receive documents?

I'm an independent journalist receiving files directly

I work for a newsroom that can set up secure infrastructure

I already use email, cloud storage, or messaging and want to improve security

---

2. What's the main threat?

Ordinary confidentiality and preventing leaks

Protecting a whistleblower from identification or retaliation

A sophisticated adversary, such as a government or well-resourced organization

[Get a tailored recommendation]

SecureDrop, Signal, Proton Mail, and VeraCrypt are the gold-standard tools for journalists receiving sensitive documents and protecting anonymous sources.icij.org+2

Protecting a source requires combining strong technical encryption with careful operational security (OpSec) so that neither message content nor digital metadata can be traced back to the person leaking the information.proton.me+1

Top Tools for Document Submission and Communication

1. Anonymous Document Submission Platforms

• SecureDrop: An open-source whistleblower submission system used by major news organizations (such as ProPublica, The Washington Post, and The New York Times). It routes document transfers through the Tor network , allowing sources to upload files anonymously without revealing their IP address or location.ire.org
• Onionshare: An open-source tool that lets you or a source securely and anonymously share files of any size directly over the Tor network without relying on third-party cloud servers.

2. Encrypted Messaging and File Sharing

• Signal: An end-to-end encrypted messaging and calling app that offers disappearing messages and minimal metadata collection. It is user-friendly enough for less tech-savvy sources, though you should ensure message-expiration timers are turned on and that sensitive files are handled carefully.icij.org+1
• Proton Mail / Thunderbird with OpenPGP: End-to-end encrypted email services. Proton Mail provides built-in encrypted communication when both parties use it, or PGP encryption for external correspondence. Alternatively, using Thunderbird paired with Enigmail/PGP allows you to send and receive cryptographically signed and encrypted emails.icfj.org

3. Local Storage and Disk Encryption

• VeraCrypt: Free, open-source disk encryption software that lets you create a password-protected, encrypted container or encrypt an entire hard drive/USB stick. Any sensitive documents you download should be stored inside an encrypted VeraCrypt volume.
• 1Password for Journalists: A secure password and sensitive-note manager (often provided free or discounted to press via organizations like the Nieman Foundation ) to manage strong, unique passphrases and store encrypted records.nieman.harvard.edu+1

Critical Operational Security (OpSec) Best Practices

• Strip Metadata from Documents: PDF files, Word docs, and photos often contain hidden metadata (author names, editing history, GPS coordinates, device serial numbers). Always scrub metadata before publishing or archiving documents.
• Beware of Email Attachments: Standard email attachments can expose routing headers and server logs. Never ask a source to send classified or sensitive files through standard, unencrypted corporate or personal email.
• Air-Gapped Devices: For high-risk investigations, many newsrooms maintain a dedicated, offline ("air-gapped") computer—one that has never touched the internet—to safely inspect suspicious USB drives or analyze leaked files for malware.
• Educate Your Source: The tool is only as secure as the weakest link. Guide your source on how to use a public Wi-Fi network (not work or home internet) or Tor/VPN when making contact, and make sure they understand how to keep their own device clean.icfj.org+2

If you'd like, let me know:

• How tech-savvy your source is expected to be
• Whether you need a solution for one-off leaks or an ongoing anonymous drop-line for your publication
• What type of documents (PDFs, physical scans, large databases) you expect to receive