CryptPad

cryptpad.org
Awesome Privacy➔ Productivity➔ Cloud Productivity Suites➔ CryptPad
CryptPad

A zero knowledge cloud productivity suite. Provides Rich Text, Presentations, Spreadsheets, Kanban, Paint a code editor and file drive. All notes and user content, are encrypted by default, and can only be accessed with specific URL. The main disadvantage, is a lack of Android, iOS and desktop apps - CryptPad is entirely web-based. You can use their web service, or you can host your own instance. Price for hosted: free for 50mb or $5/ month for premium.

Avoid

  • microsoft office 365
  • google workspace
  • zoho office suite
  • libreoffice online

Also Consider

Open Source

CryptPad Privacy Policy

Privacy Policy Summary

  • Only necessary user logs are kept by the service to ensure quality
  • The service does not share user information with third parties
  • This service collects your IP address, which can be used to view your approximate location
  • The service provides details about what kinds of personal information they collect
  • This service may collect, use, and share location data
  • The service will not allow third parties to access your personal information without a legal basis
  • Users agree not to use the service for illegal purposes
  • The service provider makes no warranty regarding uninterrupted, timely, secure or error-free service
  • The service informs users that its privacy policy does not apply to third party websites
  • The service provides information about how they intend to use your personal data
  • Your personal data is used for limited purposes
  • The service is open-source
  • You are responsible for maintaining the security of your account and for the activities on your account
  • The terms for this service are translated into different languages
  • The service informs you that its privacy policy does not apply to third party websites
  • You can retrieve an archive of your data

Score

B

Documents

About the Data

This data is kindly provided by tosdr.org. Read full report at: #2584

CryptPad Source Code

Author

cryptpad

Description

Collaborative office suite, end-to-end encrypted and open-source.

#chainpad#collaboration#collaborative-editing#cryptpad#e2ee#end-to-end-encryption#javascript#real-time

Homepage

https://cryptpad.org

Repository

  • LicenseAGPL-3.0
  • Created31 Oct 14
  • Primary languageJavaScript
  • Size550,998 KB
  • Stars7,995
  • Forks862
  • Watchers7,995

Language Usage

Language Usage

Project Health

  • Last commit6 days ago
  • Open issues371
  • Latest releasev1.15.0

Top Contributors

Recent Commits

  • David Benque(07 Oct 26)

    Update changelog

  • yflory(07 Oct 26)

    chore: add helpdesk translations

  • yflory(07 Oct 26)

    fix(server): missing client path in config

  • yflory(07 Oct 26)

    Merge remote-tracking branch 'origin/form-author-link-modal-improv'

  • yflory(07 Oct 26)

    chore: rebuild shared worker

  • yflory(07 Oct 26)

    chore: update dependencies

  • yflory(07 Oct 26)

    Merge remote-tracking branch 'origin/upgrade-drawio' into 2026.9-rc

  • yflory(07 Oct 26)

    Merge remote-tracking branch 'origin/weblate' into 2026.9-rc

  • yflory(07 Oct 26)

    Merge branch 'weblate' into 2026.9-rc

  • David Benque(07 Oct 26)

    Merge pull request #2405 from cryptpad-team/weblate-cryptpad-app Translations update from CryptPad Translations

  • Weblate(07 Oct 26)

    Translated using Weblate (Chinese (Simplified Han script)) Currently translated at 100.0% (1906 of 1906 strings) Translated using Weblate (Chinese (Simplified Han script)) Currently translated at 100.0% (1900 of 1900 strings) Co-authored-by: Subtext6676 <[email protected]> Co-authored-by: Weblate <[email protected]> Translate-URL: https://weblate.cryptpad.org/projects/cryptpad/app/zh_Hans/ Translation: CryptPad/App

  • Weblate(07 Oct 26)

    Translated using Weblate (Polish) Currently translated at 100.0% (1906 of 1906 strings) Translated using Weblate (Polish) Currently translated at 100.0% (1900 of 1900 strings) Co-authored-by: Weblate <[email protected]> Co-authored-by: Zuzanna Maria <[email protected]> Translate-URL: https://weblate.cryptpad.org/projects/cryptpad/app/pl/ Translation: CryptPad/App

  • Weblate(07 Oct 26)

    Translated using Weblate (Chinese (Traditional Han script)) Currently translated at 100.0% (1906 of 1906 strings) Translated using Weblate (Chinese (Traditional Han script)) Currently translated at 100.0% (1900 of 1900 strings) Co-authored-by: Toomore Chiang <[email protected]> Co-authored-by: Weblate <[email protected]> Translate-URL: https://weblate.cryptpad.org/projects/cryptpad/app/zh_Hant/ Translation: CryptPad/App

  • Weblate(07 Oct 26)

    Translated using Weblate (German) Currently translated at 100.0% (1906 of 1906 strings) Translated using Weblate (German) Currently translated at 99.9% (1905 of 1906 strings) Co-authored-by: Jan <[email protected]> Co-authored-by: Weblate <[email protected]> Translate-URL: https://weblate.cryptpad.org/projects/cryptpad/app/de/ Translation: CryptPad/App

  • Weblate(07 Oct 26)

    Translated using Weblate (Bulgarian) Currently translated at 54.1% (1032 of 1906 strings) Co-authored-by: Weblate <[email protected]> Co-authored-by: Мария Рангелова <[email protected]> Translate-URL: https://weblate.cryptpad.org/projects/cryptpad/app/bg/ Translation: CryptPad/App

  • Weblate(07 Oct 26)

    Translated using Weblate (Russian) Currently translated at 100.0% (1906 of 1906 strings) Co-authored-by: Weblate <[email protected]> Co-authored-by: serbul (ifreedomlab.net) <[email protected]> Translate-URL: https://weblate.cryptpad.org/projects/cryptpad/app/ru/ Translation: CryptPad/App

  • Weblate(07 Oct 26)

    Translated using Weblate (English) Currently translated at 100.0% (1906 of 1906 strings) Co-authored-by: David Benqué <[email protected]> Co-authored-by: Weblate <[email protected]> Translate-URL: https://weblate.cryptpad.org/projects/cryptpad/app/en/ Translation: CryptPad/App

  • Weblate(07 Oct 26)

    Translated using Weblate (Italian) Currently translated at 98.6% (1881 of 1906 strings) Co-authored-by: Viki Halwick <[email protected]> Co-authored-by: Weblate <[email protected]> Translate-URL: https://weblate.cryptpad.org/projects/cryptpad/app/it/ Translation: CryptPad/App

  • Weblate(07 Oct 26)

    Translated using Weblate (French) Currently translated at 100.0% (1906 of 1906 strings) Translated using Weblate (French) Currently translated at 100.0% (1906 of 1906 strings) Co-authored-by: David Benqué <[email protected]> Co-authored-by: Fabrice Mouhartem <[email protected]> Co-authored-by: Weblate <[email protected]> Translate-URL: https://weblate.cryptpad.org/projects/cryptpad/app/fr/ Translation: CryptPad/App

  • yflory(06 Oct 26)

    Merge branch 'eljamm-fix-lockfile' into 2026.9-rc

  • yflory(06 Oct 26)

    feat(eviction): implement integrated eviction

  • yflory(06 Oct 26)

    Merge remote-tracking branch 'origin/eviction-scripts' into 2026.9-rc

  • yflory(06 Oct 26)

    Merge remote-tracking branch 'origin/scripts_config' into 2026.9-rc

  • yflory(06 Oct 26)

    chore: update dependencies

  • Fabrice Mouhartem(06 Oct 26)

    fix(eviction): update eviction scripts

  • yflory(05 Oct 26)

    fix(office): remove delay before unfreezing history

  • yflory(05 Oct 26)

    fix(office): add history for documents starting from checkpoint

  • yflory(05 Oct 26)

    fix(office): guard against decryption error in full history

  • yflory(05 Oct 26)

    chore: update dependencies

  • Wolfgang Ginolas(05 Oct 26)

    Merge 2026-rc into upgrade-drawio

CryptPad Security

4.3/10

Repo Security Summary

Updated 24 Aug 26

  • Code-Review0/10
  • PackagingN/A
  • Maintained4/10
  • CII-Best-Practices0/10
  • Dangerous-Workflow10/10
  • Token-Permissions0/10
  • Security-Policy10/10
  • License10/10
  • Signed-ReleasesN/A
  • Branch-ProtectionN/A
  • Binary-Artifacts10/10
  • SAST0/10
  • Pinned-Dependencies0/10
  • Fuzzing0/10

Security Advisories (3)

  • mediumPatchedCVSS 6.1

    CVE-2026-26028Sanitizer Bypass in Diffmarked.js Allows Arbitrary HTML Injection Potentially Leading to XSS

  • lowPatched

    CVE-2025-49590Dom-Based Cross-Site Scripting (XSS) Vector - Link Bouncer

  • highPatched

    CVE-2025-495912FA Bypass

CryptPad Website

Website

CryptPad.org

End-to-end encrypted collaborative office suite

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address92.222.135.200
  • Hostnameblog.cryptpad.fr
  • LocationRoubaix,Hauts-de-France,France,EU
  • ISPOVH SAS
  • ASNAS16276

Associated Countries

  • FRFR

Safety Score

Website marked as safe

100%

Trackers

No known trackers found

Blacklist Check

cryptpad.org was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview
View full report atweb-check.xyz

CryptPad Docker

Container Info

cryptpad

Collaboration suite, encrypted and open-source. Source: https://github.com/cryptpad/cryptpad

#Productivity#Cloud

Run Command

docker run -d \
  -e CPAD_MAIN_DOMAIN=${CPAD_MAIN_DOMAIN} \
  -e CPAD_SANDBOX_DOMAIN=${CPAD_SANDBOX_DOMAIN} \

Compose File

version: 3.8
services:
  cryptpad:
    environment:
      CPAD_MAIN_DOMAIN: "https://cryptpad.example.com"
      CPAD_SANDBOX_DOMAIN: "https://cryptpad-ui.example.com"

Environment Variables

  • Var NameDefault
  • CPAD_MAIN_DOMAINhttps://cryptpad.example.com
  • CPAD_SANDBOX_DOMAINhttps://cryptpad-ui.example.com

CryptPad Reviews

More Cloud Productivity Suites

  • Disroot

    Disroot

    disroot.org

    A platform providing online services based on principles of freedom, privacy, federation and decentralization. It is an implementation of NextCloud, with strong encryption configured - it is widely used by journalists, activists and whistle-blowers. It is free to use, but there have been reported reliability issues of the cloud services.

    View Disroot Report
  • NextCloud

    NextCloud

    nextcloud.com

    A complete self-hosted productivity platform, with a strong community and growing app store. NextCloud is similar to (but arguably more complete than) Google Drive, Office 365 and Dropbox. Clear UI and stable native apps across all platforms, and also supports file sync. Supports encrypted files, but you need to configure this yourself. Fully open source.

    Open Source nextcloud/server
    View NextCloud Report
  • Sandstorm

    Sandstorm

    sandstorm.io

    An open source platform for self-hosting web apps. Once you've set it up, you can install items from the Sandstorm App Market with -click, similar to NextCloud in terms of flexibility.

    Open Source sandstorm-io/sandstorm
    View Sandstorm Report
View More...

About the Data: CryptPad

Edit CryptPad Data

You can edit CryptPad's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

Origin Data

Modify Data

Delete CryptPad Submit Edit to CryptPad Add alternative

API

You can access CryptPad's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/cryptpad

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share CryptPad

Help your friends compare Cloud Productivity Suites, and pick privacy-respecting software and services.
Share CryptPad and Awesome Privacy with your network!

View Cloud Productivity Suites (4)
Next →

NextCloud