Use the newsroom’s verified SecureDrop page if it offers one and the journalist recommends it. Otherwise, agree on a suitable channel with the journalist, share only what is necessary, and reduce identifying metadata in any file you send. No channel or cleanup step guarantees anonymity: file contents, messages, accounts, and devices can still reveal who you are.
Start by choosing what to share and how sensitive it is
Before sending anything, consider what could happen if your identity became known. Contact the journalist through a verified method and ask which secure submission routes their newsroom supports. Use the newsroom’s own instructions rather than a link or account you cannot verify.
As an Amazon Associate I earn from qualifying purchases.
Where possible, share only the information needed to support the story rather than an entire collection of files. Freedom of the Press Foundation notes that “Sharing information may be less risky than sharing documents because they can be embedded with information about the file, which we call metadata.” Its guidance on sharing sensitive leaks explains why the original file may expose more than its visible contents.
Choose a submission channel with the journalist
Use SecureDrop if the newsroom provides it
SecureDrop is a newsroom-operated submission system designed to support anonymous tips. Freedom of the Press Foundation says its traffic is routed over Tor and describes SecureDrop as designed to support source anonymity by default. Availability differs by newsroom, so find the submission page through the newsroom’s official website or its verified instructions.
#1 Best Overall
- Certified to FIPS 197 - High-level information security standard approved by the U.S. Government
- Brute-Force Password Attack Protection - Data is automatically erased after 6 failed access attempts. The data and encryption key are securely destroyed and the crypto drive is reset
- Rugged Double-Layer Waterproof* Design - Protects the crypto drive against knocks, drops, break-in and submerging in water. The electronics are shielded by a hardended inner case. The rubberised silicone outer casing provides a final layer of protection
- Auto-lock - The crypto drive will automatically encrypt all data and lock when removed from a PC/Mac or when the screen saver or "computer lock" function is activated on the host PC/Mac
- Secure Entry - Data cannot be accessed without the correct high-strength alphanumeric 8-16 character password. A password hint option is available. The password hint cannot match the password
SecureDrop does not make the contents of a submitted file or message anonymous. A document may contain details that identify its creator, device, location, or timing, and a source can also identify themselves in what they write. Freedom of the Press Foundation’s guidance on confidential tip pages discusses the limits and security considerations of these channels.
Consider encrypted messaging for smaller files
If the newsroom does not offer SecureDrop, follow the journalist’s current instructions and agree on a channel directly. CPJ’s 2021 guidance recommends Signal or another end-to-end encrypted service for documents under 100 MB when SecureDrop is unavailable. That threshold is a recommendation in that guidance, not a guarantee that a particular service is appropriate for every case.
Rank #2
- Certified to FIPS 197 - High-level information security standard approved by the U.S. Government
- Brute-Force Password Attack Protection - Data is automatically erased after 6 failed access attempts. The data and encryption key are securely destroyed and the crypto drive is reset
- Auto-lock - The crypto drive will automatically encrypt all data and lock when removed from a PC/Mac or when the screen saver or "computer lock" function is activated on the host PC/Mac
- Secure Entry - Data cannot be accessed without the correct high-strength alphanumeric 8-16 character password. A password hint option is available. The password hint cannot match the password
- SuperSpeed USB 3.0 - Transfer all your confidential files and folders faster than ever before. Works on both PC & Mac
End-to-end encryption protects message contents in transit, but it does not necessarily hide communication metadata. Service providers may still be able to see who communicated and when, and access to either person’s device or account can expose information. CPJ explains these distinctions in its Digital Safety Kit.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Ask about OnionShare for larger documents
For documents over 100 MB, CPJ’s 2021 article recommends OnionShare when SecureDrop is unavailable. Confirm that the journalist wants you to use it and follow the newsroom’s current directions; the size-based advice is dated and should not override a newsroom’s present-day procedure.
Rank #3
- Certified to FIPS 197 - U.S. Government Approved High Level Information Security Standard.
- Protection against brute force password attacks - Data is automatically erased after 6 unsuccessful access attempts. The data of the USB flash drive type c encryption with dual connectors is destroyed and the cryptographic drive is reset.
- Durable dual-layer waterproof design* — Protects the crypto reader from bumps, drops, run-in and immersion in water. The electronics are protected by a hardened internal case. Rubberized silicone outer case provides a final layer of protection.
- Auto-Lock —The cryptographic key automatically encrypts all data and locks when removed from a PC/Mac or when screen protection or "computer lock" is enabled.
- Secure Entry —Data on these flash drives cannot be accessed without the correct alphanumeric password of 8 to 16 characters. A password indication option is available for this flash drive. The hint cannot match the password.
Reduce metadata without assuming you have removed every clue
Metadata is information associated with a file beyond what is plainly visible in its contents. Depending on the file and how it was created, it may reveal details about a creator, device, location, or time. Metadata and visible content are separate risks: removing one does not make the other safe.
If you need to send the original file
Remove identifying metadata before sending, then inspect the resulting file to check what remains. The exact steps vary by file type and software, and the cited guidance does not establish that any cleanup method removes every identifying detail. Avoid describing a file as “metadata-free” unless you can substantiate that claim.
Rank #4
- FIPS 197 with XTS-AES 256-bit Encryption: Provides business-grade security with hardware-based encryption to protect your sensitive data
- Brute Force and BadUSB Attack Protection: Safeguards against unauthorized access attempts and malicious USB attacks with digitally-signed firmware
- Multi-Password Option with Complex/Passphrase modes: Offers flexible password configuration options to meet various security requirements and user preferences
- New Passphrase Mode: Enhanced security feature allowing users to create longer, more memorable password phrases for easier access without compromising protection
- Dual Read-Only (Write-Protect) Settings: Enables write protection functionality to prevent accidental data modification or deletion when needed
If the original file is not necessary
Consider sharing the relevant information in another form, such as a screenshot or a photograph made with a conventional camera. Freedom of the Press Foundation discusses these alternatives in its guide to sharing sensitive leaks. They can change the metadata risk, but visible text, background details, reflections, or other clues may still identify a source.
Do not assume a screenshot is automatically safer. CPJ warns that screenshots can reveal details about the source’s device. It also cautions that blurred or obscured redactions can sometimes be recovered; do not rely on a visual cover-up to protect information that must not be disclosed. CPJ’s confidential-source safety guidance covers these risks.
Best Value
- FIPS 140-3 Level 3 (Pending) Certified Military-Grade Security
- OS/Device Independent
- XTS-AES Hardware Encryption
- Enforced Alphanumeric PIN
- Multi-PIN (Admin and User) Option
Keep storage protection separate from file cleanup
Encrypting a computer, phone, or external drive can help protect documents stored on it if the device or drive is lost or accessed by someone else. CPJ recommends encrypting devices, documents, and external drives where possible. Storage encryption protects copies at rest; it does not remove identifying metadata from a file before you transmit it.
Quick Recap
Compare the practical options
| Option | Useful when | Trade-offs |
|---|---|---|
| SecureDrop | The newsroom operates a verified instance and recommends it for the submission. | Not every newsroom offers it. The file and message can still contain identifying details. |
| End-to-end encrypted messaging | The journalist agrees to a direct channel, particularly for a smaller file. | Encrypted contents do not necessarily conceal who communicated or when; devices and accounts remain relevant. CPJ’s 2021 advice specifies files under 100 MB. |
| OnionShare | The file is larger than 100 MB and the journalist recommends this route. | Follow current newsroom instructions. The size recommendation comes from CPJ guidance published in 2021. |
| Screenshot or camera image | The original file is unnecessary and changing its metadata profile may help. | Visible details can identify a source, and screenshots or redactions are not automatically safe. |
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
