We have established a secure system to help whistleblowers or people with important information, video, photographs, documents or tips to communicate confidentially and anonymously with the Stuff Circuit investigative team.
If used as directed below in the ‘HOW TO USE SECUREDROP’ section, the SecureDrop service is a way in which you can share files with us and remain confident of complete anonymity. Even we won’t know who you are unless you choose to tell us.
While SecureDrop uses Tor hidden services to support anonymity, we would advise you to take precautions and think very carefully about where you access it from. You should avoid using SecureDrop on networks where Tor usage may be monitored or restricted, or where CCTV cameras may be able to capture the activity on your screen.
We recommend that you undertake these steps using a public wifi connection in a cafe or public library, rather than on your work or home network. If there is a risk someone could investigate your computer for evidence you have visited SecureDrop, consider downloading and installing Tails OS onto a USB stick and use that to submit your documents.
Stuff Circuit journalists will check for submissions to SecureDrop. If we want to contact you about information you have submitted, we will leave a message for you in SecureDrop.
If you want to remain anonymous you should not supply any personally identifying information in your exchanges with us.
If you want to communicate with a specific journalist outside of the Stuff Circuit team please indicate this in your submission.
The SecureDrop platform has the following characteristics, which reduce the chance that your identity will be linked to the documents you upload:
If you prefer to use an alternative, or Tor is blocked, you can also contact our journalists using a PGP email plugin or client (with a dummy email account, if you prefer - we recommend Protonmail.com). Please note that unlike SecureDrop, PGP only encrypts the message you are trying to send. It does not offer to anonymise the sender’s email address or IP address, and does not hide other fields such as what the email subject is.
The list of PGP Public keys for Stuff Circuit and other Stuff journalists who use PGP are here as are their keybase.io profiles, which show cryptographic proof that the owners work for Stuff.