ente-io/ente

Features

• Identity Providers - Manages user authentication and account recovery through local key derivation and client-side decryption.
• Key Management Systems - Manage account access by encrypting a master key with a password-derived key to ensure that only the user can decrypt their credentials on any authorized device.
• Two-Factor Authentication - Creates two-factor authentication codes with support for end-to-end encrypted cloud backups.
• On-Device Inference Engines - Perform machine learning tasks like semantic search and face recognition locally on the user device to ensure that sensitive data remains private and fully encrypted.
• Client-Side Cryptography - Performs all encryption and key derivation locally on the user device to ensure sensitive data remains inaccessible to the service provider.
• Encrypted Backups - Provides secure, client-side encrypted cloud backups for sensitive personal data and credentials.
• Encrypted Storage - Protects user files and data using client-side encryption to ensure complete privacy from service providers.
• Key Management - Protects master keys using password-derived encryption so that account access is only possible through user-held credentials.
• Machine Learning Engines - Performs image recognition and semantic search tasks directly on the user device without cloud dependencies.
• On-Device Models - Executes resource-intensive machine learning tasks locally on hardware to maintain user privacy.
• Account Recovery - Restores account access using a recovery key to decrypt the master key and reset passwords.
• Authentication Strategies - Verify API requests by confirming email ownership and decrypting an encrypted authentication token using the user private key directly on the client side.
• Authentication Verification - Validates API requests by decrypting tokens with client-side private keys to confirm identity without exposing raw credentials.
• Data Replication Services - Copy encrypted user data across multiple cloud providers and geographical regions to ensure high availability and protection against provider outages or large-scale regional disasters.
• Semantic Search - Finds images using natural language prompts by generating and comparing visual and text embeddings locally.
• Graphics Tools - Privacy-focused photo storage and sharing platform.
• Image Viewers and Galleries - Encrypted photo storage and gallery app.
• Media and Communication - End-to-end encrypted cloud storage for media.
• Photo And Video - End-to-end encrypted cloud storage for photos.
• Security And Privacy - Encrypted photo and data storage.
• Distributed Storage - Synchronizes encrypted information across multiple geographical regions and providers to guarantee permanent accessibility.
• Authentication Managers - Manages time-based one-time password tokens with encrypted cloud synchronization for account recovery.
• Credential Vaults - Generates and synchronizes time-based tokens using encrypted backups to prevent account lockout.
• Cryptographic Libraries - Perform cryptographic tasks including key generation, derivation, and symmetric or asymmetric encryption using industry-standard algorithms to secure sensitive user information.
• Facial Recognition - Identifies and groups photos of specific people by detecting and embedding facial features locally.
• Data Replication - Distributes encrypted data across independent cloud storage services and geographic regions to prevent data loss.
• Database Backups - Maintains high-availability database clusters with automated snapshots and portable daily backups.
• Resilient Data Replication - Distributes encrypted information across multiple geographic regions and providers to prevent data loss.
• Task Schedulers - Schedule resource-intensive tasks by monitoring device temperature, battery levels, and user activity to ensure processing occurs only when the device is idle and connected to unmetered networks.
• Media Management Tools - Organizes and searches personal photo libraries using local machine learning models to ensure privacy.
• Offline Authentication - Operates entirely offline without requiring a user account to ensure local-only storage of tokens.
• Resource Scheduling - Monitors system telemetry like battery and network status to defer heavy background processing tasks until the device is idle.

Star history