Together
One board, many hands, no waiting.
In nexcanvas everyone draws at the same time. Nobody has to wait until somebody else is done, and nobody overwrites another person's work by accident. Who may see and change what, you decide for each space.
Everyone sees everything, at once
When several people open the same board, they see every change the moment it happens. At the top right of the board are the initials of everyone who is there too.
Pointers with names
Each person has a coloured pointer with their display name, and whatever they have just selected or are editing gets a frame in the same colour. That way you know where the others are without asking.
- Two in one note: When two people type into the same note at the same time, the words of both stay.
- Undo only for you: Ctrl + Z takes back only your own steps, never someone else's.
- Briefly offline: If the connection drops, the board shows “Offline”, and your changes follow as soon as it is back.
- Saved first, then shared: The server stores every change before it passes it on to the others.
Spaces with three rights
Every board lives in a space, such as “Family”, “Club” or “House move”. Each member there has exactly one of three rights.
Read
Open boards and follow live what the others are doing. You cannot change anything, and the server checks that, not just the interface.
Write
Draw, write, upload photos, create new boards and move boards to the bin.
Manage
Invite people, give out rights, release public pages, rename the space, and look after your own shape packages and templates.
What you may not read does not exist for you
A space you are not a member of answers exactly as if it did not exist. Whoever is taken out of a space is out of its boards at once: the server re-checks open connections every 30 seconds.
Name, colour and bin
Whoever manages a space gives it a name and a colour, or moves it, with its boards, to the bin. It stays there for 30 days. If you are the last manager, nexcanvas warns you before you give up your right or leave.
Inviting, by name or by link
Whoever is already here gets a message
If someone already has an account on your nexcanvas, you invite them by name. They see the invitation as a badge on their profile picture and under “New for you” in the sidebar, and they accept or decline it.
Everyone else gets a link
For everyone else you create an invitation link with the right you want. It is valid for one, seven or thirty days, works exactly once and is only shown now. Whoever follows it creates an account or joins with the one they already have. If a mail server is set up, nexcanvas can send the link itself on request. You can withdraw open invitations at any time.
Public pages for looking
If someone without an account should see a board, you switch on the public read-only page in the “Share” window. Whoever has the link sees the board and its photos but cannot change anything. The page expires after one, seven, thirty or 365 days, or never, and it can ask for a password if you want. nexcanvas slows down wrong passwords.
You can present on the public page too, frame by frame, just like in the board.
Cora saysPublic pages are off by default. The operator switches them on under Settings, Server, Public pages. If they switch them off again, every link answers as if it had never existed.
For operators
On your nexcanvas, accounts come only by invitation or through your sign-in service. Under Settings, Server, Accounts you invite people without a space, make an account an operator or a member, give a new password, remove a lost second factor, sign an account out everywhere or delete it. Its boards stay in their spaces when you do.
As an operator you see the names and managers of all spaces, but not their content. If necessary, you reset rights there, and every member is told about it with a message. How sign-in through OpenID Connect and authentik works is described under Self-host.
Security in brief
- Passwords are stored by nexcanvas with Argon2id. Ten wrong attempts lock an account for a quarter of an hour, and a brake for each sender slows down guessing.
- With a second factor the password alone opens nothing. Recovery codes on paper help when the phone is gone.
- Other websites cannot send changes: every request that changes something needs a header that another site cannot set, and the live connection checks where it comes from.
- Photos and files arrive with a strict policy of their own, and whatever a browser does not show by itself is downloaded.
- The log never contains the words on a board, no passwords, no keys and no tokens.