# Ente Locker – end-to-end encrypted vault with digital inheritance

**URL:** https://discuss.privacyguides.net/t/ente-locker-end-to-end-encrypted-vault-with-digital-inheritance/39657
**Category:** Project Showcase
**Created:** 2026-08-05T23:13:13Z
**Posts:** 13

## Post 1 by @lwb03dc — 2026-08-05T23:13:13Z

Hi everyone,

I’m part of the team at Ente, the people behind Ente Photos and Ente Auth. I’m excited to introduce our newest product, [Ente Locker](https://ente.com/locker/).

**What’s Ente Locker?**  
Ente Locker is an end-to-end encrypted vault for your important documents and sensitive information - IDs, financial and insurance records, medical paperwork, recovery codes, and the kind of “in case something happens to me” information a family needs but shouldn’t have to keep in plaintext on Google Drive.

**What can it do?**

- Store documents and files, plus encrypted notes, audio files, and structured fields for text-based secrets
- Sync across Android, iOS, web, and desktop, with client-side encryption everywhere, organize into collections, and share via links
- Create Legacy Kits, and designate contacts who can recover your vault in case you are incapacitated, via a time-delayed request and a Shamir Secret Share mechanism

**How does it work?**  
Everything is encrypted on your device before it reaches our servers. We store only ciphertext and an encrypted master key; the key that unlocks it is derived from your password, which never leaves your device and never reaches us. When you create a Legacy Kit, Ente generates a random secret and splits it into 3 shares using Shamir Secret Share. Any 2 shares can rebuild the secret, but one is not enough. Your designated contacts can initiate recovery, but access is granted only after a delay you set - and you can cancel any request during that window - so recovery can’t be triggered silently against you.

**Is it secure?**  
Ente is fully open source (apps and server) under AGPLv3, on our GitHub. The cryptography - libsodium, XChaCha20-Poly1305 for data, Argon2id for key derivation - is shared with Ente Photos, whose architecture was independently audited by Cure53. For the Legacy Kit feature, the server never sees the kit secret, the shares, or your decrypted recovery key.

**Who is behind the project?**  
Ente is a small, independent team building privacy-focused software. We’re bootstrapped - no VC and no institutional funding. We build products, people pay us for them, and that’s the whole model - we don’t monetize data or serve ads. Our products, Ente Photos and Ente Auth, are already recommended on Privacy Guides.

**How much does it cost?**  
Ente Locker is free up to 100 items and 1GB total storage. You can increase this limit to 1000 items and 10GB total storage with any Ente paid plan. So Locker’s paid limits are included with any Ente Photos subscription, but Locker storage is separate from Photos storage.

**How can I get started?**  
You can download Ente Locker from [our website](https://ente.com/locker/) and the [app stores](https://play.google.com/store/apps/details?id=io.ente.locker&hl=en_IN), and everything is on [our GitHub](https://github.com/ente/ente) if you’d rather read the code first.

This is a young product and we’d genuinely value the feedback of this community - on the Legacy Kit design especially. Happy to answer questions on the crypto, the recovery flow, jurisdiction etc. Thanks!

---

## Post 2 by @Expert4870 — 2026-08-06T00:38:33Z

Can you add private payments with Monero?

---

## Post 3 by @CarefulMouse — 2026-08-06T01:09:41Z

I think Ente locker has a real opportunity to serve as a way to display documents digitally.

For example, in the US it is common for drivers to store their insurance cards on their phone for display to law enforcement. It would be bad practice to hand your (now) insecure device to another person. I don’t know if technically feasible but a method that would allow display of an electronic document with the phone in a locked state would be great.

There are a few other examples of this, but felt car insurance is the most notable.

As an aside, I still think searching of the content text of a pdf with OCR is long overdue in locker.

I feel these features would allow Locker to distinguish itself beyond password managers.

---

## Post 4 by @ph00lt0 — 2026-08-06T06:16:03Z

Relevant earlier discussion: [Ente Locker - New app from Ente](https://discuss.privacyguides.net/t/ente-locker-new-app-from-ente/33048)

---

## Post 5 by @lwb03dc — 2026-08-06T06:35:00Z

This is an interesting use case (display Locker file in locked state), and one that we hadn’t actually considered to be honest. This functionality already exists within Ente Photos, so should be possible for Locker as well. We will have to assess the scale of the problem this solves. But really appreciate the suggestion!

> searching of the content text of a pdf with OCR

This is on the product roadmap :slight_smile:

---

## Post 6 by @lwb03dc — 2026-08-06T06:39:14Z

Adding crypto as a payment option is something we want to do for the Ente ecoystem as a whole. Just haven’t gotten to it yet.

---

## Post 7 by @PixelatedWizard — 2026-08-06T13:54:43Z

On Android you can “Pin” an app to lock use of the rest of the system, but it’s not the most secure way. You could have Ente Locker in a separate empty profile with nothing more than the app, but it would still allow user to inspect other content within the app.

---

## Post 8 by @CarefulMouse — 2026-08-07T00:06:41Z

> [@PixelatedWizard](#):
>
> but it would still allow user to inspect other content within the app.

Yes and having open access to an app that is intended to contain your life’s secrets is not really the intent.

---

## Post 9 by @Debaashish-gif — 2026-08-07T03:27:01Z

Great to know you. I frequently land into troubles trying to log into my ente account. The last time was from my duckduckgo privacy browser. The problem has been resolved now.

---

## Post 10 by @Debaashish-gif — 2026-08-07T03:29:49Z

So ente locker is something like the digi locker ?

---

## Post 11 by @lwb03dc — 2026-08-07T06:07:51Z

By Digi locker I assume you mean the service provided by the Indian government?

If so, the difference would be that in Digi locker your ID documents are pulled from government databases, while in Ente Locker all the files are uploaded by you. And obviously Digi locker doesn’t have end to end encyrption, because its whole point is for the content to be viewable by the government and approved partners.

All in all, I would suggest they serve completely different use cases.

---

## Post 12 by @Debaashish-gif — 2026-08-07T06:28:06Z

Thanks for being explicit about the fundamental differences. I don’t trust governments/authorities regarding the safety of my personal data. I didn’t even fill up the SIR form, and I would be very choosy when the census people visit my house.

---

## Post 13 by @approvalcartridge — 2026-08-07T06:31:26Z

Adding to this:

Besides the Android system function to pin the (whole) app, **some apps utilize a different function** , namely a function to only **overlay one screen of a single app**.

I don’t know how secure that is, but **once you tap the back button, the lock screen comes up, not the app’s previous screen, effectively ending the overlay.**

This screen also is **persistent across display power off/on until dismissed once**.

**Öffi/Oeffi** , a public transit app, pins only the screen with your transit details when you have said screen open.

Same goes for **Catima** , a (loyalty) card and codes app, it pins only the screen with the currently displayed code.

@lwb03dc

Maybe worth looking into, if general pinning was considered.
