Free · MIT · open source

The free text editorthat fits any website.

One <script> and one <textarea> are enough. Image uploads, tables, video, opening and saving Word files: all MIT licensed, with no paid tier.

Try it
  • No paid tier
  • WCAG 2.2 AA
  • Safe by default
Readability · FleschVery easy
Words
33
Sentences
4
Avg. sentence
8.3
Reading
1 min

Readability score: 88/100

This box is a real viveEditor. The number above is worked out again as you type.

Short sentences and common words make a text easy to read. Long sentences pull the score down.

Live demo

Every tool, right on this page.

Insert a table, open a Word file, write a formula, mention someone with @, pick an emoji with :. Type / on an empty line for the block menu.

The editor loads when you reach this section.Loading the editor…The editor could not load.

Images you add and files you open stay in your browser; nothing is sent to a server.

Install

On your page in a minute.

With one script and no build step, or with typed packages for React, Vue, Svelte and Angular.

The form posts clean HTML under the textarea's name. Always sanitize it again on the server.

<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/viveeditor@x.y.z/dist/viveeditor.css" />
<script src="https://cdn.jsdelivr.net/npm/viveeditor@x.y.z/dist/viveeditor.classic.iife.js"></script>

<form method="post">
  <label for="body">Article</label>
  <textarea id="body" name="body" data-editor required></textarea>
</form>

Always use an exact version in the CDN address; its add-ons are checked against fingerprints built into that version.

Security and privacy

Safe by default.

The browser is not a security boundary, so viveEditor applies the same rules in the editor and on the server.

  • The document schema is an allowlist

    Unknown markup never reaches the output; pasted, opened and templated content all pass the same rules.

  • Node and PHP give the same output

    @viveeditor/sanitize and viveeditor/sanitizer share one allowlist and one test corpus.

  • Players are rebuilt

    Saved HTML never keeps the address it was given; players are rebuilt from the provider and video id with a fixed sandbox.

  • Image addresses are checked

    Images need https addresses; every address and uploaded file is checked before it reaches the document.

  • Connects to nothing on its own

    The editor loads no web fonts and does no tracking. Even the AI extra talks only to your own server.

  • Accessible

    WCAG 2.2 AA in light and dark themes, full keyboard control and screen reader announcements.

Ready to start?

The docs cover every step from installing to cleaning HTML on the server, using the real API.