🤫 Hush Line is a free, open-source, self-hosted, anonymous tip line designed for easy installation and use by organizations and individuals. Aimed at journalists, educators, and corporate environments, it provides a secure channel for anonymous reporting.
Compared to other whistleblowing platforms like SecureDrop and GlobalLeaks, whose installation and setup process can be prohibitively complex, Hush Line doesn't require technical proficiency to set up and manage. The app offers a simple text-only, one-way communication method and removes the ability for senders to attach potentially malicious files.
Hush Line can be deployed as an onion-only instance or on Tor and the public web. It functions as a web and email server, with a Python application encrypting messages using the recipient's public PGP key. Messages are encrypted upon submission, saved, and emailed to the recipient, ensuring data is never stored unencrypted. The system features robust security measures like Nginx with hardened security headers, auto-renewing Let's Encrypt HTTPS certificates, privacy-preserving logging, and automatic updates.
The only requirements for users are a public PGP key and an SMTP-compatible email address.
Hush Line is compatible with ubiquitous hardware and software, including Raspberry Pi and Debian-based systems. It even supports an e-paper display for easier address dissemination and setup 🤩.