Today's Deep-Dive: CryptPad
Ep. 61

Today's Deep-Dive: CryptPad

Episode description

The discussion focuses on CryptPad, a secure platform for collaborative document editing that emphasizes data privacy through end-to-end encryption. Unlike traditional services, CryptPad ensures that even its administrators cannot access user documents, promoting a trust-based environment. Users must be cautious about sharing links and securing their devices, as vulnerabilities can arise from external threats or user negligence. The platform does not offer password recovery, reinforcing its security stance, which places responsibility on users for their access credentials.

Importing and exporting documents is possible, but users may need to adjust formatting for complex files. CryptPad works on mobile browsers and is developing a progressive web app for a better user experience. The open-source nature of CryptPad allows community involvement, from spreading awareness to contributing code or translations. While the platform offers significant privacy benefits, it may lack some conveniences found in more popular services. Ultimately, choosing CryptPad reflects a commitment to privacy and a decentralized digital ecosystem. The conversation encourages users to explore CryptPad and consider its implications for personal data control.

https://cryptpad.fr/ https://www.safeserver.de

Download transcript (.srt)
0:00

Hey everyone, ready for another deep dive?

0:02

Today, we're exploring CryptPad.

0:04

Ooh, CryptPad.

0:06

Yeah, it's a platform for collaborating on documents

0:08

and spreadsheets and all that.

0:10

But the cool thing is, it keeps your data

0:13

super secure and private.

0:15

I like the sound of that already.

0:16

Right, and before we get too deep into it,

0:19

a quick shout out to our sponsor, Safeserver.

0:22

Those are the folks hosting this.

0:23

Yep, they're the experts in hosting software like CryptPad.

0:26

And they can help you out with your digital transformation.

0:30

You can find them at www.safeserver.de.

0:33

All right, noted.

0:34

Now, back to CryptPad.

0:36

Right, CryptPad.

0:37

So imagine a world where all your documents are truly yours.

0:40

Like no one else can peek.

0:42

Exactly, no prying eyes, not even the platform itself.

0:45

That's the promise of CryptPad.

0:47

It's collaborative, end-to-end encrypted, and open source.

0:50

Sounds impressive, but how does it actually work?

0:53

Yeah, that's the big question, right?

0:55

And are there any trade-offs?

0:56

Trade-offs are always a thing.

0:58

For sure.

0:58

So let's find out.

1:00

So first things first, end-to-end encryption.

1:03

Sounds kind of like something from a spy movie, right?

1:05

A little bit, yeah.

1:06

Can you break it down for us?

1:09

Explain it in a way that even someone

1:11

who's totally new to this whole concept can understand.

1:15

OK, imagine you're sending a postcard,

1:18

but you want to keep the message secret.

1:20

So you write in code.

1:22

Exactly.

1:23

You write in a code that only you and the person you're

1:25

sending it to can understand.

1:27

That's basically end-to-end encryption.

1:29

So like a secret language.

1:31

Yeah, pretty much.

1:32

And in CryptPad, your browser is like the code writer.

1:35

It scrambles your data before it even gets sent to the server.

1:39

So even if someone intercepts the information,

1:41

it's just gibberish to them.

1:42

Yep, exactly.

1:43

OK, so that means even the people running the CryptPad

1:46

servers can't read my stuff.

1:47

Exactly.

1:48

Now, there's this concept called honest but curious

1:51

administrator.

1:52

What's that like?

1:53

They're curious, but they won't do anything bad.

1:55

Right.

1:56

Think of it like a friend who might

1:57

be tempted to peek at your diary,

1:59

but ultimately respects your privacy.

2:01

So they could technically access the server,

2:04

but they can't actually read my documents.

2:06

Precisely, like they have keys to the building,

2:08

but not to the individual rooms.

2:10

OK, that makes sense.

2:11

But are there still any vulnerabilities?

2:13

Well, even with strong encryption,

2:15

there are some things to consider.

2:17

Like hackers trying to break in?

2:18

Well, those are external threats,

2:20

and CryptPad is pretty good at resisting those.

2:23

The vulnerabilities we're talking about are more subtle.

2:25

OK, like what?

2:26

Like if you share a document link with someone

2:29

and they leak it, or if someone hacks your device

2:32

and steals your decryption key, then the security is broken.

2:35

So trust still plays a role, even

2:38

in this super secure system.

2:40

Absolutely.

2:41

You need to be mindful of who you share your documents with

2:43

and make sure your devices are secure.

2:45

Right, makes sense.

2:47

But how can I be sure I'm using a CryptPad

2:49

instance that's properly configured and up

2:52

to date with the latest security measures?

2:54

That's a great question.

2:56

It's important to use an instance that's

2:57

actively maintained.

2:59

So like, how do I know that?

3:00

The CryptPad community is working

3:02

on creating a public directory of vetted secure servers.

3:05

Oh, that would be helpful.

3:07

Yeah, it will.

3:08

But in the meantime, always try to find the most up

3:10

to date instance you can.

3:12

That way, you'll benefit from the latest security

3:14

patches and improvements.

3:16

OK, good advice.

3:18

Now, what about passwords?

3:20

What if I forget mine?

3:22

Most platforms have a forgot password option.

3:26

But I have a feeling things work a bit differently

3:28

in the CryptPad universe.

3:30

You are absolutely right.

3:32

This is where CryptPad's commitment to security

3:34

really shines through.

3:36

So no easy way out.

3:37

Nope, because the encryption happens in your browser,

3:39

the administrators have zero access to your password.

3:42

Meaning?

3:42

They can't reset it for you, even if you beg.

3:44

Wow, so no frantic emails to customer support.

3:47

Nope, it's a trade off.

3:49

Ultimate security means you're totally responsible

3:51

for your own keys.

3:52

You're essentially creating your own digital fortress,

3:55

and you're the only one with the access code.

3:57

That's both empowering and slightly terrifying.

4:00

OK, so I'm starting to get the security side of things.

4:02

But what about importing and exporting documents?

4:05

Can I easily move my files in and out of CryptPad?

4:08

That's a question a lot of people have.

4:10

The short answer is yes.

4:11

But there are some nuances.

4:13

Nuances.

4:14

Like, copying and pasting content

4:15

is usually fine for basic stuff.

4:18

So like, if I want to quickly grab some text

4:20

from a CryptPad document and paste it into an email,

4:23

that's no problem.

4:24

Exactly.

4:25

But for more complex documents, like spreadsheets

4:28

with formulas or presentations with images and animations,

4:32

you'll want to use CryptPad's dedicated import and export

4:35

features.

4:36

So different tools for different jobs.

4:38

Exactly.

4:38

And it's worth noting that importing a file

4:41

doesn't automatically convert it into a fully functional

4:44

CryptPad document.

4:45

You might need to make some adjustments or reformat things

4:48

a bit.

4:48

OK, that makes sense.

4:50

Now, last question before we move on.

4:52

Can I use CryptPad on my phone?

4:54

I'm on my mobile device most of the time.

4:56

Absolutely.

4:56

CryptPad works great on mobile browsers.

4:58

That's good to know.

4:59

And they're even working on a progressive web app version.

5:02

Oh, cool.

5:02

Well, will that do?

5:03

That'll give it a more app-like feel.

5:05

Nice.

5:07

So no need to sacrifice privacy just because I'm on the go?

5:09

Nope.

5:10

That's great news.

5:11

All right, let's take a quick pause here

5:13

and recap what we've learned so far.

5:15

Sounds good.

5:15

All right, so we've learned that CryptPad

5:17

is super serious about data privacy

5:20

with its end-to-end encryption.

5:22

Definitely.

5:22

And even with all that security, there are still

5:25

things to be aware of.

5:26

Right, like who you share documents with and making sure

5:29

your devices are secure.

5:30

Exactly.

5:31

Now, let's dive into some more practical stuff.

5:33

We talked about importing and exporting documents.

5:36

But can you give us a bit more detail

5:38

on how that works, like step by step?

5:40

Sure.

5:41

CryptPad gives you different ways

5:42

to get your files in and out.

5:44

The easiest way is just copy and paste.

5:46

Oh, OK.

5:47

So for simple text, that works?

5:49

Yeah, even with some formatting, copy and paste works fine.

5:51

So if I wanted to grab some text from a CryptPad document

5:55

and put it in an email, no problem.

5:57

Exactly.

5:58

But for more complex documents, like spreadsheets

6:01

with formulas or presentations with images and things,

6:05

you'll want to use the specific import and export features.

6:08

So each app has its own import and export options.

6:11

Right.

6:12

And each app supports different file types, too.

6:14

Like, the rich text editor can import HTML and export to .doc.

6:19

OK, so it's like using the right tool for the job.

6:22

Exactly.

6:23

And one thing to remember is that when you import a file,

6:26

it might not be a perfect CryptPad document right away.

6:28

You might have to tweak some things.

6:30

Makes sense.

6:31

Now, one question I'm sure a lot of people are wondering is,

6:34

can I sync my CryptPad documents to my computer,

6:37

like Dropbox or Google Drive does?

6:39

Unfortunately, not right now.

6:41

Oh, bummer.

6:42

Why not?

6:42

It's because of how the encryption works.

6:45

Syncing with your computer would mean decrypting

6:47

the files on your device, which would kind of defeat

6:50

the whole purpose of end-to-end encryption.

6:52

Ah, so it's a security trade-off.

6:54

Exactly.

6:55

But a lot of people have asked for this feature,

6:57

so the developers are exploring options for the future.

7:00

Fingers crossed.

7:01

OK, speaking of other platforms, I've

7:03

seen CryptPad mentioned with OnlyOffice sometimes.

7:06

What's the connection there?

7:08

So CryptPad's spreadsheet app actually

7:10

uses OnlyOffice spreadsheets, but just on the client side,

7:14

meaning in your browser.

7:15

Why they do that?

7:16

It gives them more advanced spreadsheet

7:18

features and better compatibility with Excel files.

7:21

So they're borrowing some technology from OnlyOffice.

7:23

Yeah, that's a good way to put it.

7:25

But they're not using OnlyOffice's servers

7:27

or encryption.

7:28

They just took some of the code that runs in the browser

7:30

to make their spreadsheet app better.

7:32

Got it.

7:33

So my data is still protected by CryptPad's own encryption

7:37

system.

7:37

Absolutely.

7:38

It's all happening in your browser under Cryptad's control.

7:41

OK, that's good to know.

7:42

Now let's talk about something that seems really

7:44

central to CryptPad, open source and community involvement.

7:48

Right, so open source basically means

7:50

that the code for the software is out there for anyone

7:53

to see, change, and share.

7:56

Kind of like a recipe that anyone can try.

7:58

Exactly.

7:59

And for CryptPad, this means that anyone

8:01

can check the code to make sure it's

8:03

doing what it says it's doing, which

8:04

is really important for security and privacy, right?

8:07

Yeah, definitely.

8:08

But for someone like me who doesn't know how to code,

8:10

how can I actually get involved in the open source

8:13

side of things?

8:14

Well, one of the easiest and most helpful things you can do

8:17

is just tell people about CryptPad.

8:20

Tell your friends, your family, anyone

8:22

who might be interested in a secure platform.

8:24

So word of mouth is still important.

8:26

Absolutely, especially for open source projects, which often

8:30

don't have big advertising budgets.

8:32

You can also share your thoughts about CryptPad online.

8:35

Write about it, or even just leave good reviews.

8:37

OK, that makes sense.

8:39

What about more hands-on stuff?

8:41

Well, they always need help with translations.

8:43

They want CryptPad to be usable by people all around the world.

8:46

So translating the menus and stuff?

8:48

Yeah, the menus, the documentation, even the website.

8:51

It all needs to be translated.

8:52

That sounds like a great way to contribute.

8:54

Now, for the techie folks out there,

8:57

how can they get involved?

8:58

Well, if you're a developer, you can

9:00

contribute to the code directly.

9:02

Like fixing bugs or adding new features.

9:04

Exactly.

9:05

And even if you're not a coding expert,

9:06

you can help with the documentation or testing.

9:09

Anything helps.

9:10

So there's something for everyone to do.

9:11

Absolutely.

9:12

And that's what makes open source community so cool.

9:14

It's everyone working together because they

9:16

believe in the project.

9:18

I like that.

9:19

OK, so we've covered a lot about how

9:21

CryptPad works, how to use it safely,

9:23

and this whole open source idea.

9:26

But I think there's a bigger question here.

9:29

What does it mean to choose a platform like CryptPad?

9:33

It's clear that it gives you privacy and control.

9:36

But are there any downsides or trade-offs

9:39

we should think about?

9:40

That's a really important question.

9:42

CryptPad gives you a lot in terms of privacy and control.

9:44

But there are some trade-offs, yeah.

9:46

Like what kinds of things?

9:47

Well, like we talked about, focusing so much on security

9:50

means some things just aren't possible right now

9:53

with how it's set up like easy file syncing

9:55

or getting your password back if you forget it.

9:57

So it's like choosing security over convenience.

10:00

Yeah, you could say that.

10:01

And then there's also the fact that not as many people

10:04

use KrippPad yet.

10:05

Right, it's not as popular as Google or Microsoft.

10:07

Exactly.

10:08

Those platforms have way more users,

10:10

so they kind of feed off of each other.

10:12

The more people use them, the more useful they become.

10:15

Yeah, that makes sense.

10:17

So using KrippPad might mean it doesn't work as smoothly

10:20

with other stuff or that it won't

10:21

be compatible with everything.

10:23

That's true.

10:24

But I think as more people realize

10:25

how important data privacy is and being

10:28

in control of their own stuff, platforms like KrippPad

10:32

will become more and more appealing.

10:34

It's almost like a whole new way of thinking.

10:36

Putting control ahead of convenience.

10:38

Exactly.

10:39

And it's not just about what's good for each person.

10:42

Choosing open source platforms like KrippPad

10:44

can actually help create a fairer and more

10:46

decentralized digital world.

10:48

What do you mean by that?

10:49

Well, open source software is all about transparency

10:52

and collaboration.

10:54

Anyone can look at the code, contribute to its development,

10:57

even host their own version of it.

10:59

This spreads the power around instead

11:01

of having just a few big companies controlling

11:03

everything.

11:04

And that can make the whole digital world

11:06

more diverse and resilient.

11:08

So it's about moving away from those big companies,

11:10

having all the power over our data and our online experiences.

11:13

Exactly.

11:14

It's about giving individuals and communities the power

11:17

to take control of their own digital lives

11:19

and shape the internet in a way that reflects their values.

11:22

I like that vision.

11:23

All right, so as we wrap up our deep dive into KrippPad,

11:26

let's go back to something we discussed earlier,

11:28

community involvement.

11:29

We talked about how anyone can contribute.

11:31

But what are some concrete ways for people to get started?

11:33

One of the easiest ways is just to spread

11:35

the word about KrippPad.

11:37

Tell your friends, write a blog post,

11:39

share your experience online.

11:40

Getting the word out is super important for any open source

11:44

project.

11:44

Word of mouth is powerful.

11:46

For sure.

11:46

And if you speak multiple languages,

11:48

translating is super valuable.

11:50

The KrippPad community is always looking

11:52

for help making the platform accessible to more people.

11:55

You can find all the info on their website.

11:57

What about folks who are more tech savvy?

11:58

If you're comfortable with coding,

12:00

you can dive right into development.

12:02

They always need talented developers

12:04

to improve things, fix bugs, or even create new features.

12:08

So coding skills are in high demand.

12:10

Definitely.

12:11

But even if you're not a programmer,

12:12

you can still contribute.

12:14

You can help with documentation testing,

12:16

or even just give feedback on what

12:18

it's like to use the platform.

12:20

Every little bit counts.

12:21

It sounds like a true team effort.

12:22

It really is.

12:23

And that's one of the best things about open source

12:25

projects.

12:25

You're part of a community of people

12:27

who are passionate about the same thing

12:28

and working together towards a common goal.

12:30

I love that.

12:32

Well, that brings us to the end of our deep dive

12:34

into the fascinating world of CryptPad.

12:36

It's been a great journey.

12:38

And I feel like we've only just scratched the surface.

12:40

I agree.

12:41

There's so much more to discover about this platform.

12:43

And I encourage everyone listening

12:45

to check it out for themselves.

12:46

You might be surprised how easy it

12:48

is to switch to a more private and secure way of working

12:51

and collaborating.

12:53

And for those of you who want expert help with hosting

12:55

your own CryptPad instance or navigating

12:58

your digital transformation, don't

13:00

forget to visit our sponsor, Safeserver, at www.safeserver.de.

13:06

They're a great resource for anyone

13:07

who values security privacy and open source solutions.

13:10

Couldn't agree more.

13:11

They can help you take charge of your digital footprint

13:14

and make informed decisions about the tech you use.

13:16

Thanks for joining us today, everyone.

13:18

Keep exploring, keep learning, and keep diving deep.

13:18

Keep exploring, keep learning, and keep diving deep.