💐 2025.3.0 Release

The CryptPad Spring 2025 release (2025.3.0) is now available on cryptpad.fr and GitHub. This version marks the start of an important refactoring of the CryptPad code to make it more modular and efficient. Users with large drives and team-drives will notice much faster loading times since we now avoid loading all of your drives and shared folders before opening a document. The bigger picture is that this approach paves the way for much bigger improvements in the future, working towards a full CryptPad API that clients other than our web app will be able to use.

The release also contains many other fixes and improvements, for example improving touch screen experience in the Kanban and Forms applications. Please see the full list in the release notes.

📹 Enterprise webinar

On March 26th, our CEO Ludovic Dubost hosted the first CryptPad webinar aimed at enterprise customers. The presentation and demo was followed by a questions and answers session adressing many concerns shared by potential CryptPad users in an enterprise context. All of this content is now available to catch up on if you missed the event.

🐈 WEBCAT

End-to-end encryption (E2EE) is a necessary step for any software protecting its users’ privacy. However, the realization of E2EE in web application such as CryptPad requires a great deal of trust from users. They indeed have to trust both the service provider not to serve malicious code, and the browser to faithfully execute the code. We are well aware of these limitations that are described in our threat model.

To mitigate this issue, the Freedom of the Press foundation proposes a framework named WEBCAT (Web-based Code Assurance and Transparency), that is part of their secure document platform for whistle-blowers SecureDrop. WEBCAT would thus block unverified (meaning unsigned) code from being executed by the browser, hence ensuring that running code has been validated by developers.

From users’ perspective, this verification is provided through a browser extension. Meanwhile, developers distribute the code signatures in a manifest file for their web application.

Keep in mind that it is still experimental! However we are happy to see that CryptPad is part of their initial test run and we really appreciate their trust in our software.

All in all, we are fully supportive of this endeavour. It would eventually help make the web a more secure place by greatly helps developers to provide certified web apps, as well as protecting the users.

📰 4 reasons CryptPad is the best privacy-focused alternative to Google Drive, Docs, and Sheets

We are delighted to be featured on XDA Developers with a write-up pitching CryptPad as an alternative to Big Tech platforms. Adam Conway makes a great case for our product, thoughtfully presenting well researched arguments. Many thanks Adam!

🇺🇳 CryptPad in use at the United Nations

We are proud to see the United Nations using CryptPad Forms to gather endorsements for their Open Source principles. We were not the only ones to rejoice as our Mastodon post about it is one of our most viral ever!

📣 CryptPad at JDLL 2025

This year, at Journées du logiciel libre, Fabrice will be present at the XWiki/CryptPad stand to discuss and give an outreach talk about data privacy and how cryptography, and CryptPad, can help us achieve it. It is a French-speaking event around free and open-source software in Lyon, France, that will take place in May 24th and 25th.

The schedule is not fixed yet, but feel free to save the date and to get in touch if you want to exchange about CryptPad!

If you miss it, don’t worry, the talk will be recorded and will be made available on our peertube channel.

🔭 Next up

• As explained in the Spring Release notes, we were not able to include the planned OnlyOffice 8 upgrade into the release. We will be working on correcting remaining bugs in the coming weeks and will release the updated apps as 2025.3.1 when they are ready.
• We are also starting on our Summer Release cycle and will share more about this roadmap in due course.