Forms only you can read.
Every response is encrypted in the visitor's browser. We store ciphertext. Only you hold the key.
What our servers actually hold.
Stored
- Sealed ciphertext
- Form IDs and timestamps
- Form keys, wrapped with your account key
Never received
- Your questions and answers
- Your password and recovery code
- Your account key
- The contents of uploaded files
Everything a form builder does. Zero knowledge of what it collects.
Nine question types
Short and long text, multiple choice, checkboxes, dropdown, number, email, date, and file upload.
Files are sealed too
Attachments are encrypted in the browser before upload, exactly like answers.
Edit after sharing
Change questions without reissuing the link.
No account to respond
Anyone with the link can answer. Nothing to install.
Run it yourself
The whole stack starts with one docker compose command.
docker compose up -dThree steps, one key.
- Build your formAdd short-answer, long-answer, or multiple-choice questions.
- Share the linkAnyone can respond. No account, no app to install.
- Decrypt the answersResponses unseal in your browser, with your key, and nowhere else.
Two plans. Neither one reads your data.
Free
$0forever
- 10 open forms
- 200 MB of attachments
- 250 responses a month
Pro
$12a month, or $120 a year
- Unlimited forms and responses
- 5 GB of attachments
- Everything in Free
Every account starts on Free. Run krypta on your own server and neither plan applies: a self-hosted instance has no billing in it at all.
The questions worth asking first.
What happens if I forget my password?
You reset it with the recovery code we showed you when you signed up, plus a code we email you, plus your two-factor code if you use one. That restores access to everything you already had, because your data is never re-encrypted. Lose the recovery code as well and your responses become permanently unreadable: we hold nothing that can open them.
Can you hand over my responses?
We can only hand over ciphertext, because that is all we store. Reading it needs your key, which we have never held.
What about quantum computers?
Answers, uploaded files, and the keys we hand collaborators are sealed with a hybrid ML-KEM-768 + X25519 KEM. The first half is designed to resist quantum attack; the second is the classical scheme it is combined with, so the seal is never weaker than the one it replaced. Copying our database today and running it against a quantum computer years later is exactly the attack this is here for. The symmetric encryption underneath, and the key derived from your password, never needed changing: both were already beyond the reach of that attack.
Who sees my email address?
We do, and so does whoever delivers our mail, because verifying an address means sending something to it. They see the address and when you signed up, never your questions, answers, or files. Everything about your forms stays encrypted with a key we have never held.
Can respondents change an answer after submitting?
Yes, when you enable it. They get a private edit link once they submit, and the edit is re-encrypted the same way.