CryptPad

cryptpad.org
Awesome Privacy➔ Productivity➔ Cloud Productivity Suites➔ CryptPad
CryptPad

A zero knowledge cloud productivity suite. Provides Rich Text, Presentations, Spreadsheets, Kanban, Paint a code editor and file drive. All notes and user content, are encrypted by default, and can only be accessed with specific URL. The main disadvantage, is a lack of Android, iOS and desktop apps - CryptPad is entirely web-based. You can use their web service, or you can host your own instance. Price for hosted: free for 50mb or $5/ month for premium.

Avoid

  • microsoft office 365
  • google workspace
  • zoho office suite
  • libreoffice online

Also Consider

Open Source

CryptPad Privacy Policy

Privacy Policy Summary

  • Only necessary user logs are kept by the service to ensure quality
  • The service does not share user information with third parties
  • This service collects your IP address, which can be used to view your approximate location
  • The service provides details about what kinds of personal information they collect
  • This service may collect, use, and share location data
  • The service will not allow third parties to access your personal information without a legal basis
  • Users agree not to use the service for illegal purposes
  • The service provider makes no warranty regarding uninterrupted, timely, secure or error-free service
  • The service informs users that its privacy policy does not apply to third party websites
  • The service provides information about how they intend to use your personal data
  • Your personal data is used for limited purposes
  • The service is open-source
  • You are responsible for maintaining the security of your account and for the activities on your account
  • The terms for this service are translated into different languages
  • The service informs you that its privacy policy does not apply to third party websites
  • You can retrieve an archive of your data

Score

B

Documents

About the Data

This data is kindly provided by tosdr.org. Read full report at: #2584

CryptPad Source Code

Author

cryptpad

Description

Collaborative office suite, end-to-end encrypted and open-source.

#chainpad#collaboration#collaborative-editing#cryptpad#e2ee#end-to-end-encryption#javascript#real-time

Homepage

https://cryptpad.org

Repository

  • LicenseAGPL-3.0
  • Created31 Oct 14
  • Primary languageJavaScript
  • Size549,481 KB
  • Stars7,880
  • Forks843
  • Watchers7,880

Language Usage

Language Usage

Project Health

  • Last commit5 days ago
  • Open issues394
  • Latest releasev1.15.0

Top Contributors

Recent Commits

  • David Benque(26 May 26)

    chore: update changelog

  • David Benque(26 May 26)

    chore: add 2026.5.1 to issue template

  • yflory(26 May 26)

    chore: update version in package.json

  • yflory(26 May 26)

    Merge branch 'main' into 2026.5.1-rc

  • yflory(26 May 26)

    chore: update dependencies

  • David Benque(22 May 26)

    chore: add 2026.5.0 to issue template

  • yflory(22 May 26)

    Merge remote-tracking branch 'origin/small-fix-oo-corruption' into staging

  • yflory(22 May 26)

    chore(sso): update default sso settings

  • yflory(22 May 26)

    fix(sso): allow sso token with underscore

  • yflory(22 May 26)

    fix(password): fix TypeError on password change with user registry enabled

  • Wolfgang Ginolas(20 May 26)

    Small fix for history corruption bug

  • Wolfgang Ginolas(20 May 26)

    Revert "Prepare Office history corruption fix" This reverts commit fd9c19b6e683794ac715518f913397acea88ee97.

  • Wolfgang Ginolas(20 May 26)

    Revert "Log an error when a Office document is corrupted" This reverts commit 19341fc6c551d912f0f9823ead23df6d421f2fab.

  • Wolfgang Ginolas(20 May 26)

    Revert "Fix ID collison and add feedback if it happens again" This reverts commit 2ed07f1c26430f1ad6a81f002e2a79a1cc6373a3.

  • Wolfgang Ginolas(20 May 26)

    Revert "Send idCollision feedback only once per new doc" This reverts commit ea004e3f0b16992f2f8f5ab6d87d84c7373a1670.

  • Wolfgang Ginolas(20 May 26)

    Revert "Init content.debug in onDocumentReady" This reverts commit d2a4e53a3e8cd7c03b4057147f28e2376382f5c4.

  • yflory(19 May 26)

    chore: update dependencies

  • yflory(19 May 26)

    Merge pull request #2297 from cryptpad/fix-oo-history-corruption Fix oo history corruption

  • Wolfgang Ginolas(19 May 26)

    Init content.debug in onDocumentReady

  • Wolfgang Ginolas(19 May 26)

    Send idCollision feedback only once per new doc

  • Wolfgang Ginolas(15 May 26)

    Fix ID collison and add feedback if it happens again https://github.com/cryptpad/cryptpad/issues/2291

  • Wolfgang Ginolas(15 May 26)

    Log an error when a Office document is corrupted https://github.com/cryptpad/cryptpad/issues/2291

  • Wolfgang Ginolas(11 May 26)

    Prepare Office history corruption fix https://github.com/cryptpad/cryptpad/issues/2291

  • David Benque(13 May 26)

    Update Changelog

  • David Benque(13 May 26)

    Merge pull request #2281 from cryptpad/weblate Translations update

  • David Benque(13 May 26)

    Merge pull request #2294 from cryptpad-team/weblate-cryptpad-app Translations update from CryptPad Translations

  • yflory(13 May 26)

    chore: update dependencies

  • yflory(13 May 26)

    fix(api): fix TypeError with integration API

  • yflory(12 May 26)

    fix(sso): redirect to correct page on request login

  • yflory(12 May 26)

    Merge branch '2026.4-rc' of github.com:cryptpad/cryptpad into 2026.4-rc

CryptPad Security

4.3/10

Repo Security Summary

Updated 24 Aug 26

  • Code-Review0/10
  • PackagingN/A
  • Maintained4/10
  • CII-Best-Practices0/10
  • Dangerous-Workflow10/10
  • Token-Permissions0/10
  • Security-Policy10/10
  • License10/10
  • Signed-ReleasesN/A
  • Branch-ProtectionN/A
  • Binary-Artifacts10/10
  • SAST0/10
  • Pinned-Dependencies0/10
  • Fuzzing0/10

Security Advisories (3)

  • mediumPatchedCVSS 6.1

    CVE-2026-26028Sanitizer Bypass in Diffmarked.js Allows Arbitrary HTML Injection Potentially Leading to XSS

  • lowPatched

    CVE-2025-49590Dom-Based Cross-Site Scripting (XSS) Vector - Link Bouncer

  • highPatched

    CVE-2025-495912FA Bypass

CryptPad Website

Website

CryptPad.org

End-to-end encrypted collaborative office suite

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address92.222.135.200
  • Hostnameblog.cryptpad.fr
  • LocationRoubaix,Hauts-de-France,France,EU
  • ISPOVH SAS
  • ASNAS16276

Associated Countries

  • FRFR

Safety Score

Website marked as safe

100%

Blacklist Check

cryptpad.org was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview
View full report atweb-check.xyz

CryptPad Docker

Container Info

cryptpad

Collaboration suite, encrypted and open-source. Source: https://github.com/cryptpad/cryptpad

#Productivity#Cloud

Run Command

docker run -d \
  -e CPAD_MAIN_DOMAIN=${CPAD_MAIN_DOMAIN} \
  -e CPAD_SANDBOX_DOMAIN=${CPAD_SANDBOX_DOMAIN} \

Compose File

version: 3.8
services:
  cryptpad:
    environment:
      CPAD_MAIN_DOMAIN: "https://cryptpad.example.com"
      CPAD_SANDBOX_DOMAIN: "https://cryptpad-ui.example.com"

Environment Variables

  • Var NameDefault
  • CPAD_MAIN_DOMAINhttps://cryptpad.example.com
  • CPAD_SANDBOX_DOMAINhttps://cryptpad-ui.example.com

CryptPad Reviews

More Cloud Productivity Suites

  • Disroot

    Disroot

    disroot.org

    A platform providing online services based on principles of freedom, privacy, federation and decentralization. It is an implementation of NextCloud, with strong encryption configured - it is widely used by journalists, activists and whistle-blowers. It is free to use, but there have been reported reliability issues of the cloud services.

    View Disroot Report
  • NextCloud

    NextCloud

    nextcloud.com

    A complete self-hosted productivity platform, with a strong community and growing app store. NextCloud is similar to (but arguably more complete than) Google Drive, Office 365 and Dropbox. Clear UI and stable native apps across all platforms, and also supports file sync. Supports encrypted files, but you need to configure this yourself. Fully open source.

    Open Source nextcloud/server
    View NextCloud Report
  • Sandstorm

    Sandstorm

    sandstorm.io

    An open source platform for self-hosting web apps. Once you've set it up, you can install items from the Sandstorm App Market with -click, similar to NextCloud in terms of flexibility.

    Open Source sandstorm-io/sandstorm
    View Sandstorm Report
View More...

About the Data: CryptPad

Edit CryptPad Data

You can edit CryptPad's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

Origin Data

Modify Data

Delete CryptPad Submit Edit to CryptPad Add alternative

API

You can access CryptPad's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/cryptpad

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share CryptPad

Help your friends compare Cloud Productivity Suites, and pick privacy-respecting software and services.
Share CryptPad and Awesome Privacy with your network!

View Cloud Productivity Suites (4)
Next →

NextCloud