Report anonymously.Upload on the official site.
Trust checklist, key verification, and source-protection guidance for SafeDeposit — then open their real Encrypt & Upload panel to deposit.
- 1Verify key
- 2Use Tor if needed
- 3Upload on official site
- 4Save receipt
Upload on the real SafeDeposit site
For a genuine secure drop, open the official service. Encryption, proof-of-work, and storage all run on their origin — not through this demo shell.
Why we send you there
Whistleblower tooling works best when you deal with one verified operator origin. Proxying ciphertext through a third-party app adds trust surface and can break under bot protection. Prefer the site that holds the operator keys.
- 1.Verify the operator fingerprint out-of-band (or use our Verify page, then confirm on X @SafeDepositOrg).
- 2.Open safedepositbox.org in Tor Browser or Tails when risk is high.
- 3.Use their Encrypt & Upload panel — seal happens in that browser, on that origin.
- 4.Download and store the receipt offline. Never re-upload it.
6b3c dbb6 5f9e 15ac 8379 f643 5a80 c849 ba94 9cd9 3824 58a9 ec8e 12d3 14e1 6978
Compare with official verify page and independent channels before high-risk use.
https://safedepositbox.org/
http://q364nsvmbwg66fk4i5rq4ynn456phr2flgzoz265oayxdj5xxhn25uyd.onion/
This page is a guide and trust companion for SafeDeposit — not a deposit endpoint. We do not accept files, store ciphertext, or hold operator keys.
How SafeDeposit works
Ciphertext only reaches their server
On the official site, every sensitive step happens in your browser before the network is involved.
Strip & pack
Optionally strip image metadata, then pack files entirely in your browser.
Encrypt first
XChaCha20-Poly1305 seals payloads on-device. Plaintext never leaves your machine.
Seal the key
The stream key is sealed to the operator X25519 public key for offline opening.
Proof-of-work
A small PoW slows bulk abuse before ciphertext is accepted.
Upload ciphertext
Only sealed binary reaches SafeDeposit. The server holds zero plaintext.
Operator offline
Operators open deposits offline. No hot private keys on the web tier.
Source protection
Reduce technical risk — then verify
SafeDeposit reduces the chance that a web server can read your materials. It does not protect against a compromised device or coercion. High-risk sources should use Tor or Tails.
- Prefer Tor Browser or Tails over everyday browsers
- Avoid personal filenames, EXIF GPS, and account-tied cloud docs
- Compare the operator fingerprint with @SafeDepositOrg
- Save the receipt offline; do not email it from a personal account
6b3c dbb6 5f9e 15ac 8379 f643 5a80 c849 ba94 9cd9 3824 58a9 ec8e 12d3 14e1 6978
Onion (preferred for high-risk): q364nsvmbwg66fk4i5rq4ynn456phr2flgzoz265oayxdj5xxhn25uyd.onion
FAQ