The International Consortium of Investigative Journalists encourages whistleblowers to securely submit all forms of content that might be of public concern - documents, photos, video clips as well as story tips. We accept all information that relates to potential wrongdoing by corporate, government or public service entities in any country, anywhere in the world. We do our utmost to guarantee the confidentiality of our sources.
SecureDrop is an open-source whistleblower submission system supported by the Freedom of the Press Foundation. Contacting us through our encrypted SecureDrop server is a way to share documents and messages with ICIJ that allows you to protect your identity, even from us.
When you use our SecureDrop service, we will not collect any identifying information from you (like your IP address, location, or browser details). All information you provide will be stored encrypted, and will only be decrypted on an air-gapped machine that never connects to any networks.
There are a number of precautions you can and should take to protect yourself before using our SecureDrop system.
ICIJ’s SecureDrop has a new onion URL: lzpczap7l3zxu7zv.onion.
ICIJ uses PGP encryption: our public key can be found on the MIT Public Key Server (fingerprint:
986A 572D 3B95 BD42 331E 839A B532 F18C 2A17 696B).
Our email address is email@example.com.
Please note: if you use our public PGP key to contact us via email, only the contents of your message will be encrypted – the subject line, name of the sender and other header information will be unencrypted.
A free, open-source, end-to-end encrypted messaging app, Signal enables you to send text messages, multimedia and some small files to us.
Signal does not retain any metadata and can also be configured to make messages disappear from all devices after the timer has elapsed.
WhatsApp enforces end-to-end encryption by default on messages, using technology developed in collaboration with Open Whisper Systems.
According to WhatsApp, only you and the person you’re communicating with can read what is sent, and nobody in between, not even WhatsApp. Messages are not stored on WhatsApp’s servers.
ICIJ can be also found on Wire, a free, open-source app that offers end-to-end encrypted chats, calls and files, protected by European privacy laws. Wire can be used on iOS, Android, Windows, Mac and Linux.
Another free, open-source, end-to-end encrypted messaging app, which can be used to communicate directly with ICIJ reporters.
One of the standout features of Peerio is fully-encrypted cloud storage for files, which allows transfer of documents as large as 400mb.
ICIJ is also on Keybase, a free, open-source security app for mobile phones and desktop computers. Powered by public-key cryptography, it uses publicly auditable proofs of identity.
Keybase can store up to 10GB of files for free. And files in your private folder will be encrypted end-to-end, so even Keybase’s servers won’t be able to read them.
Ultimately, no electronic form of communication is entirely secure – sometimes the safest ways are the old-fashioned ways. You can post printed documents, or electronic files on a portable storage device (a thumb drive, hard drive, memory card, DVD, CD, etc.) directly to ICIJ at the below address: