Go to file
David Benque 1401925f5a Merge remote-tracking branch 'origin/main' 2022-12-21 14:34:17 +00:00
.github Fix broken links to forum tags 2022-10-03 16:51:39 +02:00
config clarify formatting in API server example config 2022-09-20 16:41:08 +05:30
customize.dist Bmp version number 2022-12-21 14:29:00 +00:00
docs 2nd thought on HTTP/80, not needed in the end 2022-12-07 14:04:00 +01:00
lib Allow edit/delete/multiple answers without a drive and fix race condition 2022-12-08 16:53:29 +01:00
scripts make translation linter identify mismatched substitution placeholders and markup 2022-09-16 18:37:42 +05:30
www Merge remote-tracking branch 'origin/main' 2022-12-21 14:34:17 +00:00
.bowerrc Added cryptsheet to cryptpad suite! 2015-01-29 17:55:18 +01:00
.flowconfig Fix flow, which tries reading random .json files, including test files which are invalid json :D 2017-12-08 16:37:33 +01:00
.gitignore ignore shell scripts in the project root 2021-08-04 13:25:48 +05:30
.jshintignore configure linter not to ignore the server. fix server linting issues 2022-10-06 15:34:58 +05:30
.jshintrc update jshintrc to es6 and stop polyfilling for apps 2021-10-20 12:37:25 +05:30
.lesshintrc allow 'ch' units in less files 2022-09-20 16:37:17 +05:30
CHANGELOG.md Bmp version number 2022-12-21 14:29:00 +00:00
CODE_OF_CONDUCT.md Update CODE_OF_CONDUCT.md 2019-04-17 13:14:48 +02:00
LICENSE #2 added license 2014-12-05 11:01:43 +01:00
and_so_it_begins.png Compressed images: PNG recompressed pixel identical, JPGs recompressed visually identically. Saving about 9.8%≈580kB overall, to speed up initial and repeating client connections. 2017-10-14 00:31:31 +02:00
bower.json update jszip 2022-03-25 12:02:12 +05:30
cryptofist.png Compressed images: PNG recompressed pixel identical, JPGs recompressed visually identically. Saving about 9.8%≈580kB overall, to speed up initial and repeating client connections. 2017-10-14 00:31:31 +02:00
package-lock.json Bmp version number 2022-12-21 14:29:00 +00:00
package.json Bmp version number 2022-12-21 14:29:00 +00:00
readme.md Update Readme 2022-10-03 16:13:10 +01:00
screenshot-suite.png Update Readme 2022-10-03 16:13:10 +01:00
screenshot.png Update Readme 2022-10-03 16:13:10 +01:00
server.js configure linter not to ignore the server. fix server linting issues 2022-10-06 15:34:58 +05:30

readme.md

CryptPad

CryptPad is a collaboration suite that is end-to-end-encrypted and open-source. It is built to enable collaboration, synchronizing changes to documents in real time. Because all data is encrypted, the service and its administrators have no way of seeing the content being edited and stored.

Drive screenshot

Suite screenshots

Installation

For development

Our developer guide provides instructions for setting up a local instance without HTTPS or our more advanced security features.

For production

Configuring CryptPad for production requires a little more work, but the process is described in our admin installation guide. From there you can find more information about customization and maintenance.

Current version

The most recent version and all past release notes can be found here.

Setup using Docker

See CryptPad-Docker repository for details on how to get up-and-running with CryptPad in Docker. This repository is maintained by the community and not officially supported.

Security

CryptPad offers a variety of collaborative tools that encrypt your data in your browser before it is sent to the server and your collaborators. In the event that the server is compromized the database holds encrypted data that is not of much value to attackers.

The code which performs the encryption is still loaded from the host server like any other web page, so you still need to trust the administrator to keep their server secure and to send you the right code. An expert can download code from the server and check that it isn't doing anything malicious like leaking your encryption keys, which is why this is considered an active attack.

The platform is designed to minimize what data is exposed to its operators. User registration and account access is based on a cryptographic key that is derived from your username and password so the server never needs to see either and you don't need to worry about whether they are being stored securely. It is impossible to verify whether a server's operators are logging your IP or other activity, so if you consider this information sensitive it is safest to assume it is being recorded and access your preferred instance via Tor browser.

A correctly configured instance has safeguards to prevent collaborators from doing some nasty things like injecting scripts into collaborative documents or uploads. The project is actively maintained and bugs that our safeguards don't catch tend to get fixed quickly. For this reason it is best to only use instances that are running the most recent version, which is currently on a three-week release cycle. It is difficult for a non-expert to determine whether an instance is otherwise configured correctly, so we are actively working on allowing administrators to opt in to a public directory of servers that meet our strict criteria for safety.

Translations

CryptPad can be translated with nothing more than a web browser via our Weblate instance. See the state of the translated languages:

More information about this can be found in our translation guide.

Contacting Us

The best places to reach the development team and the community are the CryptPad Forum and the Matrix chat

The team is also on social media:

Team

CryptPad is actively developed by a team at XWiki SAS, a company that has been building Open-Source software since 2004 with contributors from around the world. Between 2015 and 2019 it was funded by a research grant from the French state through BPI France. In the years since we have been funded by NLnet PET, NGI TRUST, NGI DAPSI, subscribers of CryptPad.fr, and donations to our Open-Collective campaign.

Contributing

We love Open Source and we love contribution. Learn more about contributing.

If you have any questions or comments, or if you're interested in contributing to CryptPad, come say hi in our Matrix channel.

License

AGPL logo

This software is and will always be available under the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. If you wish to use this technology in a proprietary product, please contact sales@xwiki.com.