End-to-end encrypted photo backup with a free 10 GB plan, open source and self-hostable
Ente Photos is a photo backup and gallery app built around end-to-end encryption: your library is encrypted on your device before upload, so even Ente cannot see your pictures. Everything client-side is AGPL-3.0 open source, and the whole stack can be self-hosted if you want full control.
It covers the ground you would expect from Google Photos, minus the scanning: automatic backup from phones and desktops, albums and sharing (with end-to-end encrypted shared links), face grouping and location views computed on-device, original-quality storage, and apps for Windows, macOS, Linux, Android, and iOS. The desktop client is at version 1.7.31 (October 2026) - about 157 MB on Windows and 291 MB on macOS. The free plan includes 10 GB of encrypted storage, with paid plans above that; self-hosting removes the storage cap entirely if you run your own server.
The honest trade-offs: 10 GB fills up quickly for a phone library, so heavy users will need a paid plan or the self-hosted route; encryption means some conveniences (server-side search by image content, web-based AI features) are more limited than Google's; and sharing recipients need a link rather than a native app experience. Verdict: the strongest private replacement for Google Photos, with open code you can audit and a free tier generous enough to try properly.
Photos are encrypted on your device before upload; only you hold the keys
Phones and desktops sync originals to encrypted cloud storage
Face grouping and location organization computed locally
Share albums or links without exposing contents to the server
Yes: the apps are AGPL-3.0 open source and the hosted service includes a free 10 GB plan with no card required. Paid plans add storage, and self-hosting the server removes the cap.
No. Photos are encrypted on your device before upload and the keys stay with you; the code is open source so this can be independently verified. Face grouping and similar features run on your device.
Yes. The server and clients are AGPL-3.0; you can run the full stack on your own hardware and point the apps at it.