CryptPad is a privacy-first, end-to-end encrypted collaboration suite. Documents are encrypted in the browser before being stored — the server never sees plaintext content.

Configuration

Key settings in config.yaml:

domain - Main domain for CryptPad
sandboxDomain - Sandbox subdomain for secure iframe isolation (default: cryptpad-sandbox.{your-cloud-domain})
storage - Persistent volume size (default: 2Gi)

Usage

No account is required to create documents. Just visit the app URL and start creating spreadsheets, code pads, presentations, or rich-text documents. Share the document URL with collaborators.

Admin Setup

To access the admin panel, you need to register an account and then link it to the adminKey secret:

Register an account at the app URL
Go to your user settings and copy your Public Signing Key
The adminKey in secrets.yaml should match this key — it is pre-populated with a generated value, but you must replace it with your actual account's public signing key after registering
Once set, the Admin link will appear in the user menu

Notes

Both the main domain and the sandbox domain must be accessible — CryptPad uses the sandbox domain for secure iframe isolation, and the app will not function correctly if one is missing
All encryption keys are generated client-side — if you lose your account passphrase, documents cannot be recovered
The instance can be configured to require registration before creating documents (via the admin panel)