This a blog post about ente from kuketz-blog.de (German only).
Blog post: ente: Datenschutzfreundliche Alternative zu Google und Apple Photos • Kuketz IT-Security Blog
ente: Privacy-friendly alternative to Google and Apple Photos
- cloud-based photo service
ente
At the beginning of March 2024, ente.io decided to make both the client and the server software available as open source. This step towards more transparency was the deciding factor for me to test the cloud-based service for storing, organizing and sharing photos and videos. After extensive testing, I ended up sticking with ente.io.
Ente.io encrypts all data end-to-end (E2EE) so that neither third parties nor the company itself can access the stored photos and videos. This function is particularly important for anyone who does not want to place their private and sensitive memories in the hands of tech giants such as Google or Apple. Overall, the service is designed to be intuitive, making it easy for anyone to upload, organize and share media content.
In the following, I would like to show why ente.io is an excellent choice for anyone who wants to protect their privacy and not entrust their experiences and memories (pictures) to Google or Apple.
- ente
Ente is a privacy-oriented cloud-based photo service for storing, organizing and sharing photos and videos that provides both client and server software as open source. The source code is available under the GNU Affero General Public License (AGPL) and can be viewed in full on GitHub. The following functions/features prompted me to try out the service:
Both client and server are open source
End-to-end encryption of the media
Data protection friendly
Intuitive operation/user interface via mobile app (Android and iOS), desktop application (Windows, macOS and Linux) and web browser
Android app also available on F-Droid
ente can also be self-hosted
Redundant data storage at three different locations (Amsterdam, Frankfurt and Paris)
Family use possible
Allows images/albums to be shared with external parties (even then still E2EE)
Synchronization/backup of media directly from the smartphone in the background (background sync)
Ente’s FAQ section offers extensive information for newcomers, including instructions for importing images from Google Photos or Apple Photos. There is also a comparison between Ente and Google Photos/Apple Photos.
2.1 Security
The architecture and source code of ente were subjected to an external audit by Cure53 in collaboration with Symbolic Software. The report (March 2023) is available online and, in my opinion, did not reveal any serious shortcomings - with the exception of the possibility for users to set weak passwords via the web application. Anyone interested in the details of the implementation should take a look at the architecture description. Incidentally, all cryptographic operations are performed using the libsodium library.
2.2 Self-hosting or using a service?
Whether you host ente.io yourself or use it as a service is an individual decision. Using ente.io as a service is probably the better choice, especially for less technically experienced users. Tasks such as setting up redundant data storage, installing (security) updates or server administration in general are not everyone’s cup of tea. Personally, I opted for the standard offer from ente.io, which currently costs €59.99 per year, i.e. around €5 per month, and offers 200 GB of storage space. The reason is simple: it costs me more effort, nerves and time to host it myself than to use the service. But I can also understand anyone who says that they would rather host their images/videos themselves than leave this to a service provider. However, due to the excellent architecture and especially the E2EE, I don’t see any need for this.
Note
If you have the necessary technical know-how and time, you can also host ente yourself; for everyone else, using it as a service is probably the better choice.
2.3 Alternatives to ente
The most commonly used alternatives to ente will probably be Google and Apple Photos. However, these are hardly an option for privacy-oriented users. So what other open-source alternatives are there that are comparable to ente? Here are a few alternatives:
Nextcloud: The Swiss all-purpose tool Nextcloud offers a wide range of functions, including organization and access to photos and videos via the Memories app, for example. The data/media can be accessed either via a web interface or via a client application (desktop/smartphone). In addition to the option of hosting Nextcloud yourself, there are also providers who take care of this.
PhotoPrism: PhotoPrismis an open-source photo management software that organizes albums using AI-powered image recognition, facilitates tagging and provides a user interface for easy search and management of photos and videos. Apps for iOS and Android are available. End-to-end encryption of media is not (currently) supported. The service can either be self-hosted or used as a service via PikaPods.
immich: Immich is a relatively young open-source project that has been around for two years and, like the other solutions, enables the storage, organization and sharing of photos and videos. There are apps for iOS and Android, but immich has to be self-hosted as it is not available as a service.
Currently immich does not support end-to-end encryption for media.
Seafile: With Seafile, data can be stored on a dedicated server and synchronized between devices. Similar to Nextcloud, the data can be accessed via a web interface as well as via mobile apps (Android, iOS) or desktop clients. Seafile’s source code is available for everyone to view on GitHub. Despite the option of end-to-end encryption, the service is not very intuitive and, in my experience, is least suitable for managing images and videos.
I tried all the solutions. But in the end, I liked ente the best. The overall security/data protection package and, above all, the intuitive operation/user interface via mobile app, desktop application and web browser particularly appealed to me. I haven’t found this in this form with any other provider/service.
- practical operation (to view the pictures, visit ente: Datenschutzfreundliche Alternative zu Google und Apple Photos • Kuketz IT-Security Blog)
Two of our mobile devices automatically send all photos to the Ente servers via the Android Ente app. To access the images from the desktop, I use the browser. Getting started on Android is easy: After installing the Ente Photos app from the F-Droid store, you enter your access data, consisting of your e-mail address and password. You then give the app the necessary permissions to access photos and videos. Then select the (camera) folders that are to be backed up automatically. This completes the (initial) setup and you have access to your pictures while synchronization takes place in the background (left desktop/right Android app):
Duck in browser/app
Two-factor authentication or passkeys can be activated for additional security:
Ente Security
In the settings under General → Advanced, the crash reports are activated by default, but can be adjusted if required. I always deactivate this function as I want to be asked beforehand.
- conclusion
Ente offers a coherent overall package and stands out from its competitors in the field of cloud-based photo services, particularly thanks to its focus on security and user-friendliness as well as its support for mobile applications, desktop applications and web browsers. If you are curious, you can try out the service simply by creating an account. You then have 5 GB of storage space available - if you want to use the service with more storage, you either have to host it yourself or take out a subscription.