How to submit a confidential tip to The Associated Press
The AP is one of the largest and most trusted sources of independent newsgathering, having covered every major news event of the past 175 years. We rely on readers and knowledgeable sources to help us keep the world informed.
Amid recent concerns surrounding information security, we’ve created new ways for the public to contact our journalists — safely and confidentially — and they’re listed below.
You should consider using these services on an internet connection different from your home or place of work.
This service offers greater security than traditional email or other means that can be traced easily. To get started, we’ll need to walk you through a few, easy steps.
Our SecureDrop service is accessible only using the Tor network. That’s because we don’t record your Internet Protocol (IP) address, what web browser you’re using, or other potentially identifying information about your computer when using this service.
To get started, you’ll need to download free software to connect to our SecureDrop service. It’s easy to use, and works like a web browser that you’re familiar with, like Firefox or Chrome.
Here’s how to get started:
- Visit TorProject.org, and follow the directions to download Tor.
- Launch the Tor application, which will start the Tor Browser.
- Inside the Tor Browser, copy and paste the following URL into the address bar: http://kutj6adn66vdrpauox236wbc6g52ogg3pl4nfb5bfx7gzdgnqvhsl2qd.onion/
From there, you can complete the instructions for how to send us files and messages. To protect your identity, you’ll receive a randomly generated code name. You’ll want to remember it in case you want to come back — using the code name provided — and see if we’ve sent a response to you. We do this so you don’t have to provide your name.
Using a USB drive, you can also temporarily boot your computer into the TAILS secure operating system, which includes the Tor Browser; more information is available on the TAILS website.
The SecureDrop software we use is a project of the Freedom of the Press Foundation.
Signal is a free app for your phone that works like text messaging programs you may be familiar with, but its servers never have access to your data or store it. You can configure the service to delete messages after a certain period of time. You may need to add our number, below, to your phone’s address book first.
Our number: +1 (202) 281-8604
You may also contact us via postal mail if you’re residing within the United States. You could consider mailing your package from an unfamiliar letter box and not including a return address.
Our mailing address is:
The Associated Press
Investigations editor
1100 13th Street NW
Suite 500
Washington, DC 20005
If you are unable to download Tor, or you are trying to reach us from a country that blocks the Tor network, you can instead send many AP journalists around the world encrypted messages via PGP. For a directory of AP reporters’ and editors’ PGP keys, go here. You may need to create a separate email account from the one you normally use, and install a client to use PGP on your computer.
The AP offers or suggests these services as way to provide you with greater anonymity and security than what’s available through traditional electronic means. They are, however, provided on an “as is” basis, with no warranties or representations, and any use is at your own risk.
Regarding our SecureDrop server: When you visit and follow the instructions provided above, we will not record your IP address or information about your browser, computer or operating system. Nor will we embed third-party content or deliver persistent cookies to your browser. Our SecureDrop service is under our physical control, located in a segregated area within the AP’s global newsroom.
SecureDrop is designed to be accessed only through what’s called a hidden service on the Tor system, which is set up to conceal both your online and physical location — and to offer encryption for your communications with the AP. You should also know SecureDrop doesn’t provide perfect security. If your computer is compromised, any activities, including communications through SecureDrop, could be compromised.