Ente: A Monorepo for End-to-End Encrypted Photos, 2FA, and Document Storage
End-to-end encrypted cloud for everything. On top of this platform, we have built three apps so far: Ente Photos (an alternative to Apple and Google Photos), Ente Locker (a safe space for your most important documents and credentials), and Ente Auth (a 2FA alternative to the deprecated Authy).
At a glance
- What is it?
- Ente is an open source platform that builds three end-to-end encrypted apps on a shared server and client codebase. This review covers what it solves, how it works, and where its trade-offs lie for adopters.
- Who is it for?
- Adopt Ente if you need a self-hostable, end-to-end encrypted alternative to Google Photos, Authy, or a document vault, and you are comfortable with the AGPL-3.0 license and a Dart-based codebase. Do not adopt it if you require a permissive license for proprietary integration, or if you expect a simple single-purpose tool, because the monorepo bundles three apps and a server.
- Can I use it commercially?
- Yes, with strict conditions. AGPL-3.0 is a network copyleft licence: if people use a modified version over a network, for example as a hosted service, you must offer them its source code under the same licence.
- Is it still maintained?
- Yes. The repository last received commits 1 day ago.
- What is it written in?
- Mainly Dart, according to GitHub's language statistics.
Answers come from the project's GitHub data, last synced on September 14, 2026, and from our analysis. They are not legal advice.
DEEP OPEN-SOURCE ANALYSIS
The Problem: Trusting Cloud Providers with Your Data
Ente addresses a specific pain point: cloud storage services that can read your data. Google Photos and Apple Photos offer convenience, but they also have access to your original files. Authy, the popular 2FA app, is being deprecated, leaving users to find a replacement. Ente's answer is a platform where encryption happens on your device before anything reaches the server. The README states that you can store data "without needing to trust the service provider." This is for individuals and families who want photo backup, document storage, or 2FA codes without conceding privacy. It is also for developers who want to self-host an encrypted cloud service, since the entire monorepo is open source.
Architecture: A Shared Platform with Three Apps
The repository is a monorepo containing both client apps and the server that powers them. The primary language is Dart, which is used for the client applications across iOS, Android, F-Droid, Web, Linux, macOS, and Windows. The server is also in the same repository, though the README does not specify its language. The core idea is that all three apps, Ente Photos, Ente Auth, and Ente Locker, build on the same end-to-end encryption platform. This means the cryptographic logic for key generation, encryption, and decryption is shared. The README claims that the source code and cryptography have been externally audited by Cure53, Symbolic Software, and Fallible. That is a concrete fact from the material, but it does not tell you which version was audited or the audit scope. The architecture is a trade-off: a unified platform reduces duplication, but it also means you cannot adopt just one app without the underlying platform's complexity.
Ente Photos: The Flagship with a Free Tier
Ente Photos is the main product. It positions itself as a direct alternative to Apple and Google Photos. The feature list from the README includes 3x data replication, face detection, semantic search, private sharing, collaborative albums, family plans, easy import and export, and background uploads. All of this is end-to-end encrypted. The service is paid, but there is a 10GB free storage tier. For self-hosters, the README says you can clone the repository and self-host. This is a significant differentiator: most photo backup services do not offer a self-hosted option with the same feature set. However, the README does not provide instructions on how to self-host, so you will need to dig into the repository's documentation. The recent releases, such as photos-v1.3.61, indicate active development, but the release notes are not included in this material.
Ente Auth and Locker: Free Tools with Limits
Ente Auth is a free 2FA authenticator app, built because the team saw no open source end-to-end encrypted alternative to Authy. It is free forever, according to the README. Ente Locker is a newer app for storing documents, credentials, and notes. It is free for up to 100 items, and if you subscribe to Ente Photos, you get 1000 items. Both apps are available on iOS and Android. The limitation here is clear: Locker's free tier is capped at 100 items, which may be too small for a power user. Also, Auth is free, but the README does not mention any export or import features, which matters when migrating from Authy. The apps are separate, but they share the same underlying encrypted storage, so you get a consistent security model across them.
Getting It Running: Commands and Config
The README does not provide explicit installation commands, which is a gap. To get the apps running, you would typically clone the repository and use Flutter, since Dart is the primary language. The standard Flutter workflow would be: git clone https://github.com/ente/ente, then cd ente, then flutter pub get, and flutter run for a specific app target. However, this is inferred from the language choice, not stated in the material. For the server, you would need to look into the server directory and its own configuration, which is not described in the README. The README does link to ente.com for more details, but the actual commands are not in this material. If you plan to self-host, you must consult the repository's documentation, which is not provided here. This is a real friction point for adopters who expect quick setup.
Limitations and Wrong Use Cases
One genuine limitation is the AGPL-3.0 license. This is a strong copyleft license, which means if you modify the server and offer it as a network service, you must release your modifications under the same license. For a company that wants to build a proprietary product on top of this, that is a deal-breaker. Another limitation is the complexity of the monorepo. If you only need a 2FA app, you could use a simpler tool. Ente Auth is free, but installing the entire monorepo to get just that is overkill. Also, the README does not specify the server's system requirements or scaling behavior. For a small family, the hosted service is fine, but for a large organization, you need to test the server's performance yourself. The Locker app's 100-item free limit is a clear constraint for personal use. Finally, the README does not mention offline usage or data recovery procedures beyond the 3x replication claim, which you should verify before trusting it with irreplaceable photos.
Alternatives and How They Differ
The most direct alternative for photos is Immich, which is also open source and self-hostable. Immich uses a different approach: it is not end-to-end encrypted by default; the server can see your photos if you do not enable encryption. Ente's core difference is that encryption is built in from the start, making it a zero-trust design. For 2FA, Aegis is a popular open source authenticator for Android, but it is not end-to-end encrypted with a cloud sync; it stores codes locally. Ente Auth syncs across devices with encryption, which is a different trade-off. For document storage, Bitwarden offers encrypted vaults, but it is focused on passwords, not arbitrary documents. Ente Locker is more general. The key difference across all alternatives is the shared platform and the explicit zero-trust model that Ente promotes.
Maintenance and Upgrade Costs
The project is actively maintained, as shown by the recent releases on August 11, 2026, for photos and locker. The monorepo approach means that a single commit can affect all three apps and the server. For self-hosters, upgrading requires pulling the latest code and rebuilding, which is a standard cost. The README does not provide a migration guide for upgrades, so you must rely on the repository's release notes and changelog. The license is AGPL-3.0, which has implications if you modify the code. The README mentions external audits, but it does not state whether those audits are updated for each release. That is a maintenance concern: the security guarantee may not cover the latest version. You should verify the audit reports before deploying a new version.
Editorial conclusion
Adopt Ente if you need a self-hostable, end-to-end encrypted alternative to Google Photos, Authy, or a document vault, and you are comfortable with the AGPL-3.0 license and a Dart-based codebase. Do not adopt it if you require a permissive license for proprietary integration, or if you expect a simple single-purpose tool, because the monorepo bundles three apps and a server. Before adopting, verify the self-hosting documentation for the server component, check the current state of the Locker app's feature set, and confirm that the Cure53, Symbolic Software, and Fallible audits cover the specific version you plan to deploy. The project is actively maintained with frequent releases, but you must evaluate the operational overhead of running your own server or trust the hosted service.
Community notes