CryptPad

cryptpad.org
Awesome Privacy ➔ Productivity ➔ Cloud Productivity Suites ➔ CryptPad
CryptPad

A zero knowledge cloud productivity suite. Provides Rich Text, Presentations, Spreadsheets, Kanban, Paint a code editor and file drive. All notes and user content, are encrypted by default, and can only be accessed with specific URL. The main disadvantage, is a lack of Android, iOS and desktop apps - CryptPad is entirely web-based. You can use their web service, or you can host your own instance. Price for hosted: free for 50mb or $5/ month for premium.

Avoid

  • microsoft office 365
  • google workspace
  • zoho office suite
  • libreoffice online

Also Consider

Open Source

CryptPad Privacy Policy

Privacy Policy Summary

  • Only necessary user logs are kept by the service to ensure quality
  • The service does not share user information with third parties
  • This service collects your IP address, which can be used to view your approximate location
  • The service provides details about what kinds of personal information they collect
  • This service may collect, use, and share location data
  • The service will not allow third parties to access your personal information without a legal basis
  • Users agree not to use the service for illegal purposes
  • The service provider makes no warranty regarding uninterrupted, timely, secure or error-free service
  • The service informs users that its privacy policy does not apply to third party websites
  • The service provides information about how they intend to use your personal data
  • Your personal data is used for limited purposes
  • The service is open-source
  • You are responsible for maintaining the security of your account and for the activities on your account
  • The terms for this service are translated into different languages
  • The service informs you that its privacy policy does not apply to third party websites
  • You can retrieve an archive of your data

Score

B

Documents

About the Data

This data is kindly provided by tosdr.org. Read full report at: #2584

CryptPad Source Code

Author

cryptpad

Description

Collaborative office suite, end-to-end encrypted and open-source.

#chainpad#collaboration#collaborative-editing#cryptpad#e2ee#end-to-end-encryption#javascript#real-time

Homepage

https://cryptpad.org

License

AGPL-3.0

Created

31 Oct 14

Last Updated

16 Jun 26

Latest version

v1.15.0

Primary Language

JavaScript

Size

550,169 KB

Stars

7,734

Forks

828

Watchers

7,734

Language Usage

Language Usage

Star History

Star History

Top Contributors

Recent Commits

  • David Benque (26 May 26)

    chore: update changelog

  • David Benque (26 May 26)

    chore: add 2026.5.1 to issue template

  • yflory (26 May 26)

    chore: update version in package.json

  • yflory (26 May 26)

    Merge branch 'main' into 2026.5.1-rc

  • yflory (26 May 26)

    chore: update dependencies

  • David Benque (22 May 26)

    chore: add 2026.5.0 to issue template

  • yflory (22 May 26)

    Merge remote-tracking branch 'origin/small-fix-oo-corruption' into staging

  • yflory (22 May 26)

    chore(sso): update default sso settings

  • yflory (22 May 26)

    fix(sso): allow sso token with underscore

  • yflory (22 May 26)

    fix(password): fix TypeError on password change with user registry enabled

  • Wolfgang Ginolas (20 May 26)

    Small fix for history corruption bug

  • Wolfgang Ginolas (20 May 26)

    Revert "Prepare Office history corruption fix" This reverts commit fd9c19b6e683794ac715518f913397acea88ee97.

  • Wolfgang Ginolas (20 May 26)

    Revert "Log an error when a Office document is corrupted" This reverts commit 19341fc6c551d912f0f9823ead23df6d421f2fab.

  • Wolfgang Ginolas (20 May 26)

    Revert "Fix ID collison and add feedback if it happens again" This reverts commit 2ed07f1c26430f1ad6a81f002e2a79a1cc6373a3.

  • Wolfgang Ginolas (20 May 26)

    Revert "Send idCollision feedback only once per new doc" This reverts commit ea004e3f0b16992f2f8f5ab6d87d84c7373a1670.

  • Wolfgang Ginolas (20 May 26)

    Revert "Init content.debug in onDocumentReady" This reverts commit d2a4e53a3e8cd7c03b4057147f28e2376382f5c4.

  • yflory (19 May 26)

    chore: update dependencies

  • yflory (19 May 26)

    Merge pull request #2297 from cryptpad/fix-oo-history-corruption Fix oo history corruption

  • Wolfgang Ginolas (19 May 26)

    Init content.debug in onDocumentReady

  • Wolfgang Ginolas (19 May 26)

    Send idCollision feedback only once per new doc

  • Wolfgang Ginolas (15 May 26)

    Fix ID collison and add feedback if it happens again https://github.com/cryptpad/cryptpad/issues/2291

  • Wolfgang Ginolas (15 May 26)

    Log an error when a Office document is corrupted https://github.com/cryptpad/cryptpad/issues/2291

  • Wolfgang Ginolas (11 May 26)

    Prepare Office history corruption fix https://github.com/cryptpad/cryptpad/issues/2291

  • David Benque (13 May 26)

    Update Changelog

  • David Benque (13 May 26)

    Merge pull request #2281 from cryptpad/weblate Translations update

  • David Benque (13 May 26)

    Merge pull request #2294 from cryptpad-team/weblate-cryptpad-app Translations update from CryptPad Translations

  • yflory (13 May 26)

    chore: update dependencies

  • yflory (13 May 26)

    fix(api): fix TypeError with integration API

  • yflory (12 May 26)

    fix(sso): redirect to correct page on request login

  • yflory (12 May 26)

    Merge branch '2026.4-rc' of github.com:cryptpad/cryptpad into 2026.4-rc

CryptPad Security

5/10

Repo Security Summary

Updated 25 May 26

  • Maintained 10/10
  • Code-Review 0/10
  • Packaging N/A
  • Security-Policy 10/10
  • Dangerous-Workflow 10/10
  • CII-Best-Practices 0/10
  • Token-Permissions 0/10
  • Binary-Artifacts 10/10
  • License 10/10
  • Signed-Releases N/A
  • Branch-Protection N/A
  • Pinned-Dependencies 0/10
  • SAST 0/10
  • Fuzzing 0/10

Security Advisories (3)

  • medium Patched CVSS 6.1

    CVE-2026-26028 Sanitizer Bypass in Diffmarked.js Allows Arbitrary HTML Injection Potentially Leading to XSS

  • low Unpatched

    CVE-2025-49590 Dom-Based Cross-Site Scripting (XSS) Vector - Link Bouncer

  • high Unpatched

    CVE-2025-49591 2FA Bypass

CryptPad Website

Website

CryptPad.org

End-to-end encrypted collaborative office suite

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address 92.222.135.200
  • Hostname blog.cryptpad.fr
  • Location Roubaix, Hauts-de-France, France, EU
  • ISP OVH SAS
  • ASN AS16276

Associated Countries

  • FR FR

Safety Score

Website marked as safe

100%

Blacklist Check

cryptpad.org was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview
View full report at web-check.xyz

CryptPad Docker

Container Info

cryptpad

Collaboration suite, encrypted and open-source

#Productivity#Cloud

Run Command

docker run -d \

Compose File

version: 3.8

Environment Variables

  • Var Name Default

CryptPad Reviews

More Cloud Productivity Suites

  •
    Disroot

    Disroot

     disroot.org

    A platform providing online services based on principles of freedom, privacy, federation and decentralization. It is an implementation of NextCloud, with strong encryption configured - it is widely used by journalists, activists and whistle-blowers. It is free to use, but there have been reported reliability issues of the cloud services.

    View Disroot Report
  • NextCloud

    NextCloud

     nextcloud.com

    A complete self-hosted productivity platform, with a strong community and growing app store. NextCloud is similar to (but arguably more complete than) Google Drive, Office 365 and Dropbox. Clear UI and stable native apps across all platforms, and also supports file sync. Supports encrypted files, but you need to configure this yourself. Fully open source.

    Open Source nextcloud/server
    View NextCloud Report
  • Sandstorm

    Sandstorm

     sandstorm.io

    An open source platform for self-hosting web apps. Once you've set it up, you can install items from the Sandstorm App Market with -click, similar to NextCloud in terms of flexibility.

    Open Source sandstorm-io/sandstorm
    View Sandstorm Report
  • Vikunja

    Vikunja

     vikunja.io

    Vikunja is an open-source to-do application. It is suitable for a wide variety of projects, supporting List, Gantt, Table and Kanban views to visualize all tasks in different contexts. For collaboration, it has sharing support via private teams or public links. It can be self-hosted or used as a managed service for a small fee.

    Open Source go-vikunja/vikunja
    View Vikunja Report
View More...

About the Data: CryptPad

API

You can access CryptPad's data programmatically via our API. Simply make a GET request to: 

https://api.awesome-privacy.xyz/v1/services/cryptpad

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share CryptPad

Help your friends compare Cloud Productivity Suites, and pick privacy-respecting software and services.
Share CryptPad and Awesome Privacy with your network!

View Cloud Productivity Suites (5)
Next →

NextCloud