April recap from CryptPad :closed_lock_with

            :warning:️ CryptPad.fr sandbox domain flagged by Google Safe Browsing              

This month, Google Safe Browsing mistakenly flagged CryptPad’s sandbox domain as malicious. The warning popped up when users clicked external links, part of our phishing protection system that redirects through a secure domain. It was displayed in Google Chrome but also in other browsers that rely on Google Safe Browsing as a source for security advisories, such as Firefox. Despite reporting the issue several times, nothing changed. We avoided switching domains too soon, hoping to prove it was a false alarm.

But after 10 days, things got worse: Some antivirus tools started blocking our domain entirely. With users locked out, we acted fast. We changed the sandbox domain and submitted a new request via Google Search Console. This time, it worked! Our domain was cleared in under 12 hours. Everything’s back to normal, and we’re updating our redirection system to prevent this from happening again. But this incident highlights how web-app providers such as CryptPad remain vulnerable to the decisions of powerful gatekeepers.

            :house_with_garden: Hello from our new Mastodon home          

In response to recent events within the Fosstodon community, we've taken a step towards greater autonomy by moving out of Fosstodon to our own instance managed by our parent company, XWiki SAS. This move ensures that our communications remain aligned with our values and provides a dedicated space for our community.

Visit our new instance >

            :camera_with_flash: CryptPad in the spotlight          

CryptPad is gaining traction in both journalism and open-source circles. This month, we were featured in several media outlets and saw our product being used by popular names:

In a piece that appeared on FOSS Force, our CEO, Ludovic Dubost, commented on the UN’s use of CryptPad Forms, an article echoed by It's FOSS and Slashdot.
There's a new article on XDA Developers about CryptPad, this time highlighting 5 reasons to use CryptPad instead of Google Docs.
Radio CSIRT, the cyber-security podcast, mentioned our latest release in their 19th April episode.
Le Monde used once again CryptPad to share sources in their reporting.
Nick, the host of The Linux Experiment, has started using CryptPad Forms to gather feedback from his audience.

We’re proud to see our platform supporting privacy-first work around the world.

Happy using CryptPad? Share your thoughts with us >

            :hammer_and_wrench: OnlyOffice 8 almost here          

We’re knee-deep in the upgrade to OnlyOffice 8. A few bugs have slowed us down, but we’re hoping to roll out 2025.3.1 in the coming weeks. Thanks for bearing with us! :blue_heart:

Track the progress here >

            :loudspeaker: Join us at Journées du Logiciel Libre!          

Fabrice will be attending Journées du Logiciel Libre in Lyon on the 24 and 25 May. He’s giving a talk on CryptPad and data privacy on Saturday at 5PM CEST (in French). There will be no booth this year, but he'll be around all weekend if you'd like to connect and chat about the project.

          :blue_heart: How you can help          

As an open-source project, we rely on community support to keep improving for users like you, who believe in secure, private collaboration. Every contribution matters, whether it’s spreading the word, reporting bugs, improving documentation, translating, or coding.

You can also help make CryptPad financially sustainable. If you’re an individual user, you can make a donation via Open Collective or by subscribing to CryptPad.fr. Organizations can contribute through subscriptions or feature sponsorships. We’re fully transparent about our funding and publish annual updates on the CryptPad blog.