- Sources access the organization's SecureDrop .onion address through Tor Browser
- They receive a unique codename - no account, no email, no identity required
- Sources can submit documents and messages using only their codename
- Journalists review submissions on an air-gapped computer (no internet connection)
- Responses are posted back through SecureDrop - sources check using their codename
The entire system is designed so that even if the server is seized, sources cannot be identified.