LoginSign Up
← Back to all sparks
C

CryptPad

COLLAB
Velocity6.3

End-to-end encrypted collaboration suite with documents, sheets and whiteboards.

cryptpad.org ↗

CryptPad rebuilt its server and swapped its office engine; now it is patching the fallout.

self-hostingencryptionoffice-suiteserver-rewritesecurity-fixes
◆Current state
CryptPad just shipped its largest architectural change in years: a rewritten server published as a standalone npm package, and office apps moved from OnlyOffice to Euro-Office 9.3. Three weeks later a fix release followed with team-deletion, sharing and eviction-script repairs plus security fixes rated up to CVSS 7.3. The product is an end-to-end encrypted suite whose release rhythm is seasonal: one feature drop, then one or two fix releases.
◆Where it's heading
The office suite is the recurring pressure point: nearly every release since 2025 carries OnlyOffice corruption, history or pinning fixes, and the Euro-Office swap is the team taking ownership of that dependency. Splitting the server into its own package points toward easier self-hosting and embedding, which matches the openDesk integration builds and Integration API work seen earlier in the year.
◆Prediction
Expect another fix release within weeks addressing new-server and Euro-Office edge cases, then a winter feature release built on the new server. Whether the server package gets third-party adoption is not visible from these entries.

◆Recent moves

  1. 3d ago

    🍂🩹 Autumn fix release (2026.10.1)

    The expected clean-up after the server rewrite: team and account deletion, team file sharing and eviction scripts all needed repairs. It also includes security fixes up to CVSS 7.3, so self-hosters should treat it as an urgent upgrade.

    View source ↗
  2. 23d ago

    🍂 Autumn Release (2026.10.0)

    ⚡ SPARK

    This is the release the past year of office-corruption and pinning fixes was building toward: a new server and a new office engine at once. It resets CryptPad's foundation rather than adding features on top of it.

    View source ↗
  3. 3mo ago

    openDesk build stops asking for donations when embedded

    A one-line integration build that hides donation prompts when CryptPad runs inside openDesk. It is a small signal that embedded deployments are a real distribution channel.

    View source ↗
  4. 5mo ago

    🌷🩹 Spring fix release (2026.5.1)

    Another office-corruption fix plus SSO and password-change repairs, following the spring feature release. It fits the pattern of office documents being the least stable part of the suite.

    View source ↗
  5. 6mo ago

    🌷 Spring release (2026.5.0)

    The Diagram app moved to Drawio 29 with a simpler sketch-style infinite canvas by default, plus private-message notifications. It is the spring feature release in the seasonal cycle, focused on usability rather than architecture.

    View source ↗
  6. 7mo ago

    ❄️🩹🩹 Winter fix release 2 (2026.2.2)

    A single office-history fix and a version-number correction. Minor on its own, but another data point that office apps drive most of CryptPad's patch work.

    View source ↗