HomeCatalog🔒 Security & PrivacyCryptPad
Screenshot of CryptPad website

// screenshot of cryptpad.org ↗

SECURITY & PRIVACY · PRO TIER

CryptPadpro

CryptPad is a privacy-first collaboration suite — documents, spreadsheets, presentations, kanban, polls, all with end-to-end encryption. The server has zero access to user content. Originally developed by XWiki SAS in France, with strong privacy guarantees.

🔒 Security & Privacy Min 1024 MB RAM Port 3000 (http) Tier pro
// What it is

A closer look.

CryptPad is a privacy-first collaboration suite — documents, spreadsheets, presentations, kanban, polls, all with end-to-end encryption. The server has zero access to user content. Originally developed by XWiki SAS in France, with strong privacy guarantees.

For privacy activists, journalists, and orgs handling highly sensitive collaborative documents, CryptPad's E2E encryption is the gold standard.

// Use cases

What it's for.

Concrete scenarios where teams pick CryptPad over the SaaS alternative.

E2E-encrypted documents

no plaintext on the server

Collaborative editing

multi-user real-time

Sensitive content

journalism, legal, healthcare, activism

Anonymous collaboration

no account required

Privacy-first apps

pads, sheets, presentations, kanban, polls

// Who it's for

Built for these teams.

If your team profile matches one of these, CryptPad is a strong fit out of the box.

Profile A

Privacy-bound orgs

handling sensitive collaborative content

Profile B

Journalists / activists

with source-protection requirements

Profile C

Legal firms

working on confidential matters

Profile D

Healthcare

under HIPAA collaborative document constraints

Profile E

Privacy researchers

demonstrating E2EE-capable collaboration

// Differentiators

Why teams pick CryptPad.

When evaluating self-hosted options for this category, here are the dimensions on which CryptPad consistently lands above the alternatives.

  • AGPLv3 — fully open
  • True E2EE — server has no access to content
  • No account required — anonymous use works
  • Document variety — text, sheets, slides, kanban, polls in one
  • Strong governance — XWiki SAS (FR) with privacy focus
  • Active development — government + EU funding
// Integrations

Connects to.

The stack you'll plug CryptPad into — services, protocols, and adjacent apps in the BluixApps catalog.

Document types
pad (Markdown), sheets, slides, kanban, polls, forms
Authentication
local + SSO via reverse proxy
Sharing
encrypted link-based with optional password
API
limited; E2EE constrains programmatic access
Storage
local filesystem (block storage)
Federation
limited cross-instance support
Export
encrypted backup of pads
// Adoption & deployment

Notable users & community

  • 6k+ GitHub stars
  • Used by privacy-focused journalists, NGOs, activists
  • Backed by XWiki SAS (FR) — European privacy company
  • EU NGI funding for development
  • Featured in privacy-tool guides

What we ship

  • Docker compose: CryptPad + persistent storage
  • Pinned cryptpad/cryptpad:v5.7 (release-tagged)
  • HTTPS via Let's Encrypt
  • Admin user via env config
  • Persistent volumes for blob storage + Postgres
  • Customizable instance branding
  • Backup hook covers blob storage (encrypted at-rest)
// Tips & operations

Run it properly.

Operational guidance from running this in production — what to do before you scale, what to lock down, what surprises people.

// PERFORMANCE
Resource sizing
collaborative apps need decent RAM (4 GB+ for multi-user)
// SECURITY
Block storage grows
encrypted blobs accumulate; size disk
// OPERATIONS
No password recovery
lost passwords = lost data (E2EE!)
// RELIABILITY
Backup is encrypted
server backup is just encrypted blobs
// DEPLOYMENT
Mind concurrent users
WebSocket connections add overhead
// SCALING
Educate users on E2EE
share key carefully; password recovery impossible
1024
// min ram (MB)
10
// min disk (GB)
3000
// access port
http
// protocol
pro
// bluixapps tier
3000:3000 · cryptpad/cryptpad:version-2026.5.0
// docker image

Project resources

Official sitecryptpad.org ↗
// Alternatives in Security & Privacy

Compare with