If used as directed, the Guardian SecureDrop service allows you to share files with the Guardian confident of complete anonymity.

Encrypting the contents of an email using public key cryptographic methods is a good way to avoid compromising the content.

While the platform itself uses Tor hidden services to support anonymity, it is advisable to be careful where you access it from. You should avoid using the platform on small networks where use of Tor may be monitored or restricted, or in public places where your screen may be viewed by CCTV. We recommend that you don't jump straight from this landing page to the SecureDrop site, especially on business networks that may be monitored. Best practice would be to make a note of the Tor URL (see below) and then to upload your content from a different machine at a later time.

How to access the Guardian's SecureDrop service

1. Download and install software to access the Tor network: https://www.torproject.org. For security reasons, we advise you, especially if you are uploading documents, not to use your home or work network, but instead to use a public Wi-Fi network in an area where your screen is not visible to security cameras. Alternately, you can start up your computer from a USB key loaded with the Tails secure operating system, which is available at https://tails.boum.org and includes the Tor web browser.
2. Once you launch the Tor browser, copy and paste the URL 33y6fjyhs3phzfjj.onion into the Tor address bar. When the page loads, you will find further instructions on how to submit files and messages to the Guardian.
3. You will be assigned a randomly generated and unique code phrase. If a writer or editor at the Guardian wants to contact you about the information you have submitted, they will leave a message for you in SecureDrop. The messages can only be accessed using your code name. These messages are the only way we will be able to reach you.

The SecureDrop software is an open source project sponsored by the Freedom of the Press Foundation. The software has been through thorough independent security reviews to ensure that it meets stringent confidentiality and anti-leakage requirements. The platform has been built and commissioned with the latest fixes for the Heartbleed SSL vulnerability.