cryptpad/cryptpad
Cryptpad
CryptPad is a self-hosted, zero-knowledge office suite designed for real-time collaborative editing and content management. It provides a privacy-centric infrastructure where documents, files, and notes are encrypted in the browser before transmission, ensuring that the server administrator cannot access the underlying data.
The platform implements zero-knowledge user authentication, utilizing cryptographic keys to verify identities so that plain text passwords are never stored on the server. To further isolate sensitive operations, the system employs a security architecture that separates the user interface from cryptographic processes.
The suite covers a range of administrative and operational capabilities, including user registration management, instance branding customization, and server parameter configuration. It also includes diagnostic utilities for system configuration and supports containerized deployment for consistent environment installation.
Features
- End-To-End Encryption Systems - Provides a real-time synchronization system for shared files using end-to-end encryption to keep content private from administrators.
- Private Collaboration Platforms - Provides a self-hosted environment for sharing sensitive documents and information while maintaining strict data sovereignty.
- Collaborative Content Platforms - Offers a deployable environment for shared documents and files that maintains full administrative control over data.
- Real-time Collaboration - Enables real-time simultaneous editing of shared documents and files while ensuring all content remains encrypted.
- Self-Hosted Infrastructure - Allows the deployment of a private server for document collaboration to maintain full control over user data.
- Client-Side Encryption - Uses browser-based cryptography to secure shared files before they are transmitted to the server.
- Collaborative Productivity Suites - Provides a comprehensive set of real-time document editing tools that encrypt all content in the browser.
- End-to-End Encryption - Ensures files and notes are encrypted in the browser before transmission to protect data from server-side breaches.
- Zero-Knowledge Suites - Ships a privacy-focused productivity platform where the server cannot access user data due to a zero-knowledge architecture.
- Public Key Authentication - Implements identity verification using cryptographic key pairs to eliminate the need for server-side password storage.
- Zero-Knowledge Authentication - Verifies user identities using cryptographic keys so that plain text passwords are never stored on the server.
- Administrative Privilege Management - Grants administrative access to specific users by registering their public signing keys in the configuration.
- Administrative Access Controls - Restricts access to administration and support panels by requiring a valid registered public signature key.
- UI Process Isolation - Separates the user interface from cryptographic processes using distinct domains to mitigate XSS risks.
- File Management - End-to-end encrypted collaborative office suite.
- Notes and Documentation - Collaborative, end-to-end encrypted office suite.
