How does receive-mode security compare to SecureDrop?

Receive mode is simpler. SecureDrop adds segmentation between Source Server and Journalist Workstation, two-factor identification per source, encrypted submission storage. For high-stakes journalism use SecureDrop.

Can sources resubmit without leaking identity?

Sources are anonymous between submissions. Receive mode does not generate per-source identifiers. If you need source continuity, SecureDrop is the better choice.

What is the upload size limit?

Determined by VPS disk capacity and Tor circuit stability. Practical effective limit: 500 MB. For larger uploads, instruct sources to split and chunk.

Should the OnionShare URL appear on my clearnet site?

Common pattern: publish the .onion URL on your clearnet site with instructions to use Tor Browser. The .onion is verified by its own key.

Tor Hosting

OnionShare Receive Mode VPS for Anonymous Drop Boxes

OnionShare receive mode runs a persistent .onion address that anyone with Tor Browser can use to upload files anonymously. This is the simplest possible anonymous drop box. AnubizHost provides VPS preconfigured for receive-mode operation with hardened upload-directory encryption and crypto-only billing. Sources need only Tor Browser; no account, no credentials.

Need this done for your project?

We implement, you ship. Async, documented, done in days.

Start a Brief

Receive Mode as a Drop Box

Receive mode displays an upload form at the .onion address. Sources connect with Tor Browser, drop files, click submit. Files arrive in /var/lib/onionshare/uploads/ on the VPS with original filenames and a timestamp. No source identification, no metadata beyond filenames. The journalist or operator retrieves files via SSH-over-Tor periodically.

Hardened Configuration

onionshare-cli --persistent /etc/onionshare/receive.json \
    --receive \
    --receive-data-dir /var/lib/onionshare/uploads/ \
    --auto-start-timer 0 \
    --auto-stop-timer 0 \
    --public

--public removes the OnionShare default access password. For closed communities, omit --public and distribute the password out-of-band. For open journalism drop boxes, --public is appropriate.

Operational Discipline

The journalist or operator needs to retrieve files regularly. SSH into the VPS over Tor, download to a separate analysis machine, wipe the originals. The uploads directory should be on a LUKS-encrypted partition mounted only during retrieval sessions.

Do not analyze documents on the receive-mode VPS itself. Compromised submissions can compromise the box. Air-gap or qubes-style isolation for analysis.

Crypto Billing

BTC and XMR. Iceland is the most common jurisdiction for receive-mode drop boxes due to press-shield jurisprudence.

Serviços Relacionados

Offshore VPS from $19.99/mo Offshore VPS Locations Global VPS from $29.99/mo Servidores Dedicados Compare Plans by Jurisdiction DevOps Services

Privacy & anti-censorship guides

Tor in Russia 2026 Tor obfs4 Bridges Guide

Why Anubiz Host

100% async — no calls, no meetings

Delivered in days, not weeks

Full documentation included

Production-grade from day one

Security-first approach

Post-delivery support included

Ready to get started?

Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.

Start a Brief Browse Receive Mode VPS