Guide / Share & Publish
Share & Publish

Publish evidence / leak safely

Whistleblowing requires operational security. One wrong upload can expose the source.

Goal

Get sensitive evidence to journalists or the public without revealing who provided it.

Best first move

Contact a trusted journalist or platform through a secure channel before sending files.

Recommended path

Best first move: Contact a trusted journalist or platform through a secure channel before sending files.

  1. 1

    Assess your threat model

    Who might try to identify you? What logs exist on your side and theirs?

  2. 2

    Use a whistleblower platform

    SecureDrop and GlobaLeaks are designed to receive documents anonymously.

  3. 3

    Strip metadata and fingerprints

    Clean files, avoid cloud editing, and use public Wi-Fi or Tor cautiously.

  4. 4

    Separate communication from submission

    Use a different device/network for follow-up questions if possible.

Best tools for this

SecureDrop

advanced

Newsrooms accepting leaked documents.

Tor-based whistleblower drop system with strict operational security.

GlobaLeaks

advanced

Setting up your own anonymous submission channel.

Open-source whistleblowing platform; easier to self-host than SecureDrop.

OnionShare

medium

Sending files to someone without a cloud account.

Host a temporary Tor onion service directly from your device.

Tor Browser

easy

Anonymous browsing and bypassing censorship.

Routes traffic through three volunteer relays; hides origin.

Warnings

Leaks can be traced by content

Unique formatting, watermarks, or distribution lists can identify a source.

Legal risk varies by jurisdiction

Consult legal resources; this guide does not encourage illegal disclosure.

Limitations

Perfect anonymity is rare

Behavioral patterns and timing can reveal a leaker even with strong tools.

Trust the recipient

A careless journalist or activist can accidentally expose a source.

Related use cases

Related news