SecureDrop is only available via Tor. The administrative user, its password and TOTP can be set as documented in this file and can be modified in the ~/.enough/ file.


The URL of the source and journalist interfaces can be retrieved with:

$ enough --domain ssh securedrop-host cat /var/lib/tor/services/source/hostname /var/lib/tor/services/journalist/hostname

The URL of the journalist interface requires an authentication token and must be copied in the torrc file.