SafeDeposit

Who this is for

• Employees and contractors considering a confidential disclosure
• Journalists’ sources needing a file path that is not plain email
• Civil-society tipsters documenting rights abuses or fraud
• Anyone comparing anonymous tip tools and encrypted upload options

Available internationally over the public internet. Interface language is English. Your jurisdiction’s laws govern what you may lawfully disclose.

How to submit more safely (checklist)

1. Network: Prefer Tor Browser or Tails and the published .onion address. Avoid corporate VPN that identifies you to your employer. Clearnet HTTPS is a fallback with stronger warnings.
2. Session hygiene: Do not log into personal email, social media, or cloud drives in the same browser profile.
3. Verify the key: On the operator key page, match the fingerprint to more than one channel (this site, @SafeDepositOrg on X, source repo) before encrypting high-risk material.
4. Sanitize files: For high-risk documents, convert offline with Dangerzone (or mat2 / print-to-PDF). SafeDeposit only best-effort strips JPEG EXIF / PNG text in-browser.
5. Files: Prefer originals you need; avoid your name in filenames or the optional message.
6. Upload: Use the home deposit box to encrypt and send. Keep the receipt if offered.
7. After: Clear session data; do not screenshot receipts on a work phone.

Open the secure upload box Compare tools

Contextual risk notes (optional)

These tips are technical OPSEC only. They are not legal advice and do not encourage reckless submissions. This tool reduces technical risk only.

High-risk government or regulated employee

• Assume workplace devices and networks are monitored — prefer a clean Tails session when possible.
• Never use work accounts, SSO, or managed browsers for a submission path.
• Verify the operator key from a channel you already trust, not only this page.

Corporate or institutional insider

• Corporate DLP/VPN may log destinations; onion via Tor Browser reduces some metadata exposure.
• Strip document author fields and track changes before sealing (Dangerzone helps).
• Avoid unique filenames that only you would use.

Journalist source

• Prefer tools the newsroom already publishes (SecureDrop when available for that outlet).
• SafeDeposit is a lightweight sealed drop — see comparison.
• Agree out-of-band how follow-up works; blind receipts do not replace a newsroom reply channel.

What SafeDeposit does and does not do

Does

• Encrypt files in the browser (end-to-end sealing to the operator public key)
• Avoid accounts, passwords, and marketing trackers on the submit path
• Store ciphertext the origin is not designed to read without the offline private key
• Publish key verification and a warrant canary for transparency signals

Does not

• Guarantee legal immunity or protection from retaliation
• Hide you if your device is already compromised or you identify yourself in content
• Replace specialized counsel, unions, or jurisdiction-specific whistleblower programs
• Promise absolute anonymity on clearnet (CDN edge still sees connection metadata)

Related searches this page answers

Common intents people type when looking for whistleblower avenues: anonymous tip line online, how to report corruption anonymously, secure file upload for journalists, confidential source drop, encrypted document submission, zero-knowledge leak portal, Tor-friendly whistleblower form, and alternatives to emailing sensitive evidence.