PrivacyTools.io
Reviewed by Marco Wollank
CryptPad logo

CryptPad

cryptpad.fr
4.2 (5)

Plenty of features: Rich text, code, presentation, sheet, form, kanban, whiteboard and CryptDrive. Encrypted data is hosted in France but you can also self-host it or select another public instance here.

Threat level
Covered

A covered pick. Anyone can use it as a private drop-in, with no setup or know-how. Enough for most people. Threat levels

Screenshot of the CryptPad website
Share
Our take

The standout here is that encryption happens in your browser before anything reaches the server, so even the host cannot read your docs, and you get a real spread of editors plus CryptDrive. The cost is performance and polish: it can feel heavier and rougher than Google Docs, and large or complex documents show it. Choose it when confidentiality of the document matters more than slickness; for casual collaboration the friction may not be worth it.

AGPL-3.0 chainpadcollaborationcollaborative-editingcryptpade2eeend-to-end-encryptionjavascriptreal-time
Stars
8,044
+15 this week
Forks
874
82 watching
Last commit
today
healthy
Latest release
2026.10.0
13d ago, 100+ total
Star history
Issues
80% closed
307
open
1,240
closed
+9 / -37
opened / closed, last 4 weeks
Opened vs closed, last 12 weeks
Commits, last 26 weeks
372 commits, active 25 of 26 weeks
104 contributors since Oct 2014
Languages
  • JavaScript 79.9%
  • Fluent 10%
  • Less 4.3%
  • Other 5.8%
Updated daily from the GitHub API. Star tracking since Jun 10, 2026.
Website at a glance
cryptpad.fr
A+ score 120
Strong website security headers
Graded by Mozilla HTTP Observatory, tested today

Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.

CryptPad alternatives

CryptPad license, in plain English
AGPL-3.0
Strong copyleft · network

Free to use, even commercially. Changes must be published under the same license, and running a modified version as a network service counts as distributing it.

Permits

  • Commercial use
  • Modification
  • Distribution
  • Patent use
  • Private use

Requires

  • Disclose source
  • Network use is distribution
  • Same license
  • State changes
  • License and copyright notice

Does not provide

  • Liability cover
  • Warranty

Why it matters: The network clause is the point. Anyone who runs a modified version as a hosted service has to publish those changes, so the code handling your data stays inspectable. This is why privacy-first projects reach for AGPL.

Plain-language summary of the project's license, not legal advice. Read the full text for the exact terms.