Back to Blog
team@tinypod.app

Self-Hosting Ente: End-to-End Encrypted Photo Storage

Ente provides end-to-end encrypted photo storage. Your photos are encrypted before leaving your device — even the server can't see them.

entephotosencryptionprivacy

What Is Ente?


Ente is a photo storage service with end-to-end encryption. Unlike Immich or PhotoPrism, Ente encrypts your photos before they leave your device.


Features


Encryption

  • End-to-end encryption (AES-256-GCM + XChaCha20)
  • Zero-knowledge architecture
  • Client-side encryption/decryption
  • Open-source clients (audited)

    • Photo Management

  • Auto-backup from mobile
  • Albums and sharing
  • Search by date, location
  • Trash with recovery
  • Hidden albums

    • Apps

  • iOS and Android (native)
  • Web app
  • Desktop app
  • CLI tool

    • Sharing

  • Shared albums (E2EE preserved)
  • Public links (with optional password)
  • Collaborative albums

    • Ente vs Immich vs Google Photos


  • Ente: E2EE, most private, basic features
  • Immich: Most features, not E2EE
  • Google Photos: Best AI, privacy trade-off

    • When to Choose Ente


  • Privacy is your top priority
  • You want mathematical guarantees (not just trust)
  • You don't need AI features (face recognition requires seeing photos)

    • Trade-Off


    E2EE means the server can't process your photos. No server-side face recognition, no AI search. The privacy guarantee comes with a feature trade-off.


    Deployment


    1. Deploy Ente server on TinyPod

    2. Install mobile/desktop apps

    3. Configure backup

    4. Photos are encrypted before upload


    Resources: 1 CPU, 512 MB RAM.


    Ente is for people who want mathematical privacy guarantees for their photos, not just promises.