Ente

Ente is a privacy-focused platform for end-to-end encrypted storage and two-factor authentication management. It functions as a zero-knowledge identity provider, ensuring that all cryptographic operations, key derivation, and data encryption occur locally on the user's device. By maintaining this architecture, the service provider remains unable to access or decrypt any stored personal information or authentication credentials.

The platform distinguishes itself through a combination of on-device intelligence and resilient data distribution. It utilizes a local machine learning engine to perform resource-intensive tasks such as semantic image searching and facial recognition directly on the user's hardware, ensuring that sensitive visual data never leaves the device. To guarantee high availability and data permanence, the system replicates encrypted information across multiple independent cloud providers and geographic regions, protecting against provider outages or regional failures.

Beyond its core storage and security capabilities, the project includes sophisticated resource scheduling that monitors device telemetry to manage background processing tasks efficiently. It also provides a comprehensive authentication manager that supports secure token imports and offline operation, allowing users to maintain control over their credentials with or without cloud synchronization.

Features

Identity Providers - Manages user authentication and account recovery through local key derivation and client-side decryption.
Key Management Systems - Manage account access by encrypting a master key with a password-derived key to ensure that only the user can decrypt their credentials on any authorized device.
Two-Factor Authentication - Creates two-factor authentication codes with support for end-to-end encrypted cloud backups.
On-Device Inference Engines - Perform machine learning tasks like semantic search and face recognition locally on the user device to ensure that sensitive data remains private and fully encrypted.
Client-Side Cryptography - Performs all encryption and key derivation locally on the user device to ensure sensitive data remains inaccessible to the service provider.
Encrypted Backups - Provides secure, client-side encrypted cloud backups for sensitive personal data and credentials.
Encrypted Storage - Protects user files and data using client-side encryption to ensure complete privacy from service providers.
Key Management - Protects master keys using password-derived encryption so that account access is only possible through user-held credentials.
Machine Learning Engines - Performs image recognition and semantic search tasks directly on the user device without cloud dependencies.
On-Device Models - Executes resource-intensive machine learning tasks locally on hardware to maintain user privacy.
Account Recovery - Restores account access using a recovery key to decrypt the master key and reset passwords.
Authentication Strategies - Verify API requests by confirming email ownership and decrypting an encrypted authentication token using the user private key directly on the client side.
Authentication Verification - Validates API requests by decrypting tokens with client-side private keys to confirm identity without exposing raw credentials.
Data Replication Services - Copy encrypted user data across multiple cloud providers and geographical regions to ensure high availability and protection against provider outages or large-scale regional disasters.
Semantic Search - Finds images using natural language prompts by generating and comparing visual and text embeddings locally.
Graphics Tools - Privacy-focused photo storage and sharing platform.
Image Viewers and Galleries - Encrypted photo storage and gallery app.
Media and Communication - End-to-end encrypted cloud storage for media.
Photo And Video - End-to-end encrypted cloud storage for photos.
Security And Privacy - Encrypted photo and data storage.
Distributed Storage - Synchronizes encrypted information across multiple geographical regions and providers to guarantee permanent accessibility.
Authentication Managers - Manages time-based one-time password tokens with encrypted cloud synchronization for account recovery.
Credential Vaults - Generates and synchronizes time-based tokens using encrypted backups to prevent account lockout.
Cryptographic Libraries - Perform cryptographic tasks including key generation, derivation, and symmetric or asymmetric encryption using industry-standard algorithms to secure sensitive user information.
Facial Recognition - Identifies and groups photos of specific people by detecting and embedding facial features locally.
Data Replication - Distributes encrypted data across independent cloud storage services and geographic regions to prevent data loss.
Database Backups - Maintains high-availability database clusters with automated snapshots and portable daily backups.
Resilient Data Replication - Distributes encrypted information across multiple geographic regions and providers to prevent data loss.
Task Schedulers - Schedule resource-intensive tasks by monitoring device temperature, battery levels, and user activity to ensure processing occurs only when the device is idle and connected to unmetered networks.
Media Management Tools - Organizes and searches personal photo libraries using local machine learning models to ensure privacy.
Offline Authentication - Operates entirely offline without requiring a user account to ensure local-only storage of tokens.
Resource Scheduling - Monitors system telemetry like battery and network status to defer heavy background processing tasks until the device is idle.

bitwarden/android

8,457View on GitHub

This project is an Android password manager application that provides an end-to-end encrypted vault for storing and synchronizing login credentials, secure notes, and identities. It functions as a secure storage system using zero-knowledge encryption to ensure that only the user can decrypt their stored data. The application integrates directly with the Android system to provide an autofill service that populates usernames and passwords into mobile apps and browser login fields. It also serves as a passkey management wallet for FIDO2 cryptographic passkeys and a time-based one-time password a

beemdevelopment/Aegis

12,613View on GitHub

Aegis is a mobile application designed to manage and store multi-factor authentication tokens. It functions as a local-first credential vault that generates time-based and counter-based one-time passwords to verify user identity across various online services. The application secures sensitive authentication data by employing authenticated symmetric encryption and hardware-backed key storage to protect credentials at rest. Access to the stored tokens is gated by system-level biometric authentication or password verification, ensuring that only authorized users can retrieve the generated secur

kanidm/kanidm

4,595View on GitHub

Kanidm is a centralized identity management server designed to handle authentication, authorization, and directory services across distributed infrastructure. It provides a comprehensive framework for managing human and service accounts, utilizing a schema-driven database to store identity records, group memberships, and system attributes. The platform supports a wide range of authentication methods, including passkeys, passwords, and standard protocols like OAuth2, OIDC, LDAP, and RADIUS. The system distinguishes itself through a granular access control engine that enforces security policies

awesome-selfhosted/awesome-selfhosted

299,516View on GitHub

This project is a community-curated directory of open-source software designed for deployment in private server environments and home labs. It serves as a comprehensive resource for discovering independent, self-hosted alternatives to mainstream cloud services, enabling users to maintain full data ownership and control over their digital infrastructure. The directory is structured through a hierarchical taxonomy that organizes a vast collection of applications into logical categories, ranging from media management and data analytics to private communication and team productivity tools. It dis

ente-ioente

Features