Using Redmine

Logging In

Once your account has been activated, go to the Support Page and log in with your new account.


After logging in, you will be be taken to the Home page. In the top menu bar, you will see helpful links to a variety of resources. The most important links are:

  • Projects: The list of projects you have access to.

  • My Page: An overview of the open issues that were either created by you or are assigned to you.


Click on Projects in the top menu bar. You’ll see a project for your SecureDrop instance listed underneath the parent SecureDrop project. Only Freedom of the Press Foundation staff and people within your organization have access to your instance’s project.


Click on the project link. You’ll be shown an Overview of the project and all of its issues.


To view the list of open issues, click the Issues button to open the issues pane.


Onboarding Issue

By the time you log in, we’ll have created an initial issue for onboarding, called “Onboarding Verification”. Please write a reply on this issue, which will let us know that you succeeded in logging in and finding your project page.


To write a reply, click Edit button at the top of the issue. Write your reply in the Notes text box, then click Submit.


We’ll reply to the issue and start a little exchange to explain some features of the platform and answer any questions you might have. The goal here is to make sure you’re comfortable and confident using the new Support site.


Once we’re satisfied you’re ready to use the new site, we’ll close the issue.

Once we’re finished with the onboarding issue, you’re ready to use the Support site. If you want to additionally set up encrypted email notifications, head over to the Encrypted Email Overview.

The rest of this documentation is for your reference.

Key Features

Creating a new issue

To create a new issue, click New issue and fill out the Subject and Description fields. All other fields can be left blank, although you can assign a priority if you want. When we see the issue, we will respond and assign it to the appropriate person. If we’re waiting for a reply from someone in your organization, we may assign it back to you.


Creating a new issue via email

Sending an email to will automatically create a new issue in your project, using the subject line of the email for the Subject and the body of the email for the Description.

Enabling two-factor authentication

Two-factor authentication (2FA) protects your account in the event that your passphrase is compromised. Once enabled, you will be prompted to provide a one-time six digit code every time you log into the support portal, in addition to your passphrase.

To enable 2FA:

  1. Choose an application to generate two-factor codes. We recommend the FreeOTP app for Android or iOS, but any app that implements the Time-based One Time Password (TOTP) algorithm should work.

  2. If you are not already logged in, log into the support portal.

  3. Click My account in the top right corner to navigate to your account settings. On the settings page, click Enable authenticator app.

    2FA setting

  4. You will see a page that shows a QR code, similar to the one below. Use your 2FA app’s QR code scanning function to scan the code on the page, or manually enter the 2FA secret (called a “plain text key” here) in the app.

    2FA example

  5. Select the account you have just added to your 2FA app, and generate a new one-time token using the app. Enter it on the webpage and click Activate.

  6. You should see a success message like the one below. Follow the recommendation and click generate backup codes.

    2FA success

  7. You will see a list of codes like the one below. Each code (e.g., ec96 a5d7 c678) can be used once instead of a 2FA code during the login sequence. Store these codes securely and separately from your passphrase. The recommended method is to keep a printout of the recovery codes in a secure location.

    2FA backup codes

  8. Log out of your account and attempt to log in again. After entering your passphrase, you will additionally be prompted for a two-factor code, which you can generate using your 2FA app.

If you have to reset your 2FA settings at any time, you can use a recovery code. Once you are logged in, disable and then re-enable 2FA from your account settings.

Please do not hesitate to open a ticket or email us at (GPG-encrypted) if you encounter difficulties using 2FA on the support portal.

Other account settings

In addition to two-factor authentication, you can also configure your local time zone in the account settings.

We encourage you to leave the notification setting as the default: “For any event on all my projects”.

Account settings

Additional Documentation

For more information on using Redmine, consult their User Guide.