CryptPad

Awesome Privacy➔ Productivity➔ Cloud Productivity Suites➔ CryptPad

A zero knowledge cloud productivity suite. Provides Rich Text, Presentations, Spreadsheets, Kanban, Paint a code editor and file drive. All notes and user content, are encrypted by default, and can only be accessed with specific URL. The main disadvantage, is a lack of Android, iOS and desktop apps - CryptPad is entirely web-based. You can use their web service, or you can host your own instance. Price for hosted: free for 50mb or $5/ month for premium.

Homepage:cryptpad.org
GitHub:github.com/xwiki-labs/cryptpad
Privacy:cryptpad.fr/privacy.html
Web info:web-check.xyz/check/cryptpad.org

Open Source

CryptPad Privacy Policy

Privacy Policy Summary

Only necessary user logs are kept by the service to ensure quality
The service does not share user information with third parties
This service collects your IP address, which can be used to view your approximate location
The service provides details about what kinds of personal information they collect
This service may collect, use, and share location data
The service will not allow third parties to access your personal information without a legal basis
Users agree not to use the service for illegal purposes
The service provider makes no warranty regarding uninterrupted, timely, secure or error-free service
The service informs users that its privacy policy does not apply to third party websites
The service provides information about how they intend to use your personal data
Your personal data is used for limited purposes
The service is open-source
You are responsible for maintaining the security of your account and for the activities on your account
The terms for this service are translated into different languages
The service informs you that its privacy policy does not apply to third party websites
You can retrieve an archive of your data

Score

Documents

About the Data

This data is kindly provided by tosdr.org. Read full report at: #2584

CryptPad Source Code

Author

cryptpad

Description

Collaborative office suite, end-to-end encrypted and open-source.

#chainpad#collaboration#collaborative-editing#cryptpad#e2ee#end-to-end-encryption#javascript#real-time

Homepage

https://cryptpad.org

Repository

LicenseAGPL-3.0
Created31 Oct 14
Primary languageJavaScript
Size550,960 KB
Stars8,029
Forks866
Watchers8,029

Language Usage

Project Health

Last commit7 days ago
Open issues356
Latest releasev1.15.0

Top Contributors

Recent Commits

David Benque(21 Oct 26)
chore: Update changelog
David Benque(21 Oct 26)
Merge pull request #2430 from cryptpad/weblate Translations update
David Benque(21 Oct 26)
Merge pull request #2429 from cryptpad-team/weblate-cryptpad-app Translations update from CryptPad Translations
Fabrice Mouhartem(21 Oct 26)
chore: bump version + upgrade server
yflory(19 Oct 26)
chore: remove stylelint
yflory(19 Oct 26)
Merge pull request #2424 from cryptpad/oo-license Update Office Licenses
yflory(19 Oct 26)
chore: rebuild shared worker
yflory(19 Oct 26)
Merge branch 'main' into fix-team-deletion
yflory(19 Oct 26)
Merge branch '2026.10-rc'
Fabrice Mouhartem(19 Oct 26)
fix(install-office): readme URL
yflory(19 Oct 26)
Merge branch 'main' into fix-team-deletion
yflory(19 Oct 26)
Merge pull request #2425 from cryptpad/config-cleanup Add missing configuration for the new server in config.example.js and config/README.md
yflory(19 Oct 26)
Merge pull request #2421 from cryptpad/clean-server-deps Cleanup server dependencies
Fabrice Mouhartem(19 Oct 26)
docs(install-office): accept both licenses (OO and EO) together
Fabrice Mouhartem(19 Oct 26)
docs(install-office): show readme only if licenses have not been accepted - Also add “press 'q' to continue”
Fabrice Mouhartem(19 Oct 26)
docs(docker): reordering lines
AAAMON(13 Oct 26)
Update OO install script
Fabrice Mouhartem(19 Oct 26)
fix(teams): missing releasing a resource in team deletion loop
Fabrice Mouhartem(16 Oct 26)
docs(config): documentation for new features in the server
Fabrice Mouhartem(16 Oct 26)
chore: clean up old dependencies
yflory(14 Oct 26)
chore: remove json.sortify dependency
yflory(14 Oct 26)
chore: update cryptpad-server version
yflory(14 Oct 26)
Merge pull request #2418 from cryptpad/office-licensing chore: remove licensing information for moved files
yflory(14 Oct 26)
Merge pull request #2417 from cryptpad/changelog-update update changelog
yflory(14 Oct 26)
Merge pull request #2416 from cryptpad/office-license Office apps attribution and readme
David Benque(13 Oct 26)
chore: update changelog version
David Benque(12 Oct 26)
chore: remove licensing information for moved files Office app files now live in other repos but we still had their licensing information in REUSE.toml
David Benque(12 Oct 26)
chore: update changelog
yflory(12 Oct 26)
chore(office): add attribution and license information for office apps
yflory(12 Oct 26)
fix(debug): TypeError when loading full history

CryptPad Security

4.3/10

Repo Security Summary

Updated 24 Aug 26

Code-Review0/10
PackagingN/A
Maintained4/10
CII-Best-Practices0/10
Dangerous-Workflow10/10
Token-Permissions0/10
Security-Policy10/10
License10/10
Signed-ReleasesN/A
Branch-ProtectionN/A
Binary-Artifacts10/10
SAST0/10
Pinned-Dependencies0/10
Fuzzing0/10

Security Advisories (3)

mediumPatchedCVSS 6.1
CVE-2026-26028Sanitizer Bypass in Diffmarked.js Allows Arbitrary HTML Injection Potentially Leading to XSS
20 May 26
lowPatched
CVE-2025-49590Dom-Based Cross-Site Scripting (XSS) Vector - Link Bouncer
18 Jun 25
highPatched
CVE-2025-495912FA Bypass
18 Jun 25

CryptPad Website

Website

CryptPad.org

End-to-end encrypted collaborative office suite

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

IP Address92.222.135.200
Hostnameblog.cryptpad.fr
LocationRoubaix,Hauts-de-France,France,EU
ISPOVH SAS
ASNAS16276

Associated Countries

Safety Score

Website marked as safe

100%

Trackers

No known trackers found

Blacklist Check

cryptpad.org was found on 0 blacklists

AntiSocial Blacklist
Artists Against 419
Badbitcoin
Bambenek Consulting
CERT Polska
CoinBlockerLists
CRDF
CryptoScamDB
EtherAddressLookup
EtherScamDB
Fake Website Buster
MetaMask EthPhishing
NABP Not Recommended Sites
OpenPhish
PetScams
PhishFeed
PhishFort
Phishing.Database
PhishStats
PhishTank
Phishunt
RPiList Not Serious
Scam.Directory
SecureReload Phishing List
Spam404
StopGunScams
Suspicious Hosting IP
ThreatFox
ThreatLog
TweetFeed
URLhaus
ViriBack C2 Tracker

Website Preview

View full report atweb-check.xyz

CryptPad Docker

Container Info

cryptpad

Collaboration suite, encrypted and open-source. Source: https://github.com/cryptpad/cryptpad

#Productivity#Cloud

Run Command

docker run -d \
  -e CPAD_MAIN_DOMAIN=${CPAD_MAIN_DOMAIN} \
  -e CPAD_SANDBOX_DOMAIN=${CPAD_SANDBOX_DOMAIN} \

Compose File

version: 3.8
services:
  cryptpad:
    environment:
      CPAD_MAIN_DOMAIN: "https://cryptpad.example.com"
      CPAD_SANDBOX_DOMAIN: "https://cryptpad-ui.example.com"

Environment Variables

Var NameDefault
CPAD_MAIN_DOMAINhttps://cryptpad.example.com
CPAD_SANDBOX_DOMAINhttps://cryptpad-ui.example.com

CryptPad Reviews

More Cloud Productivity Suites

Disroot
(Web)
disroot.org
A platform providing online services based on principles of freedom, privacy, federation and decentralization. It is an implementation of NextCloud, with strong encryption configured - it is widely used by journalists, activists and whistle-blowers. It is free to use, but there have been reported reliability issues of the cloud services.

View Disroot Report
NextCloud
(Web, Windows, Mac OS, Linux, Android, iOS)
nextcloud.com
A complete self-hosted productivity platform, with a strong community and growing app store. NextCloud is similar to (but arguably more complete than) Google Drive, Office 365 and Dropbox. Clear UI and stable native apps across all platforms, and also supports file sync. Supports encrypted files, but you need to configure this yourself. Fully open source.

Open Source nextcloud/server
View NextCloud Report
Sandstorm
(Web)
sandstorm.io
An open source platform for self-hosting web apps. Once you've set it up, you can install items from the Sandstorm App Market with -click, similar to NextCloud in terms of flexibility.

Open Source sandstorm-io/sandstorm
View Sandstorm Report

About the Data: CryptPad

Edit CryptPad Data

You can edit CryptPad's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

Origin Data

Modify Data

Delete CryptPad Submit Edit to CryptPad Add alternative

API

You can access CryptPad's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/cryptpad

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share CryptPad

Help your friends compare Cloud Productivity Suites, and pick privacy-respecting software and services.
Share CryptPad and Awesome Privacy with your network!

View Cloud Productivity Suites (4)

NextCloud