The main difference is Ente is a managed, end-to-end encrypted photo backup service that works right away, while Immich is a self-hosted photo server you run yourself. Both are privacy-focused and open source, but they solve the problem in fundamentally different ways. Ente can also be self-hosted, so you get full control over your infrastructure without giving up end-to-end encryption.
Ente encrypts your photos on your device before upload, so even Ente cannot access them. Immich keeps your photos on your server, which is private in a practical sense, but self-hosting and end-to-end encryption are not the same thing. With Immich, privacy depends on how well you secure your own server. With Ente, privacy is built into the architecture.
Ente Photos is an end-to-end encrypted photo storage service with open-source apps for iOS, Android, web, and desktop platforms. Photos are encrypted on your device before upload, and the encryption keys remain with you. The service has been independently audited by security researchers.
Immich is an open-source, self-hosted photo and video management solution. You run it on your own hardware (a NAS, home server, or VPS), and your photos live wherever you choose to store them. It aims to provide a Google Photos-like experience on infrastructure you control.
At a Glance
Choose Ente Photos if:
- You want private photo backup without running a server
- You care specifically about end-to-end encryption
- You need family sharing that doesn't require tech support
- You want to move off Google Photos without losing convenience
- You want one system for both backup and access that just works
Choose Immich if:
- You genuinely want to self-host and enjoy maintaining infrastructure
- You already have a trusted homelab or server setup
- You want maximum control over storage, deployment, and updates
- You prefer owning every layer of the stack
Table of Contents
- Quick Comparison: Pros & Cons
- Privacy & Security
- Setup & Maintenance
- Mobile Backup Reliability
- Smart Features
- Sharing & Collaboration
- Cost
- Understanding Key Differences
- Summary
- Frequently Asked Questions
- Related Resources
Quick Comparison: Pros & Cons
Ente Photos
Pros:
- End-to-end encryption by default, no configuration needed
- Fully open source (client + server), independently audited
- Apps across phone, desktop, and web
- Zero maintenance: no servers, no Docker, no disk management
- Private album sharing that anyone can use
- Can also be self-hosted with E2E encryption intact
- Human customer support team
Cons:
- You're paying for a managed service
- Less flexibility to customize the underlying stack
Immich
Pros:
- Full self-hosting control over your data and infrastructure
- Google Photos-like experience on your own server
- Active open-source community and development
- No recurring service fees (beyond your own hardware costs)
- Highly extensible and customizable
Cons:
- No end-to-end encryption; privacy depends on your server security
- Requires Docker, server maintenance, and a backup strategy
- Backup reliability tied to your server uptime and network
- Sharing requires exposing your server or setting up VPNs/reverse proxies
- You're responsible for updates, disk failures, and troubleshooting
Privacy & Security
Both are privacy-focused, but in very different ways. Ente encrypts your photos before they leave your device. Immich keeps photos on your server, which is private in a practical sense, but the server itself can access your photos.
| Ente Photos | Immich | |
|---|---|---|
| End-to-end encryption | Yes (XChaCha20, XSalsa20) | No |
| Can the service access photos? | No | N/A (you are the service) |
| Open source | Fully open source (client + server) | Fully open source |
| Security audit | Cure53 and CERN audits | No published audit |
| Trust boundary | Your device only | Your entire server environment |
| Data location | 3 copies across 3 EU countries | Wherever you host it |
| Self-hosting option | Yes (with E2E encryption) | Yes (without E2E encryption) |
Setup & Maintenance
Ente is designed to disappear into the background. Immich requires ongoing attention.
| Ente Photos | Immich | |
|---|---|---|
| Setup process | Install app, create account, enable backup | Deploy Docker containers on your server |
| Server required | No | Yes |
| Ongoing maintenance | None | Updates, backups, disk management, troubleshooting |
| Technical knowledge needed | None | Docker, networking, storage management |
| Backup responsibility | Handled by Ente (3x replication) | Entirely yours |
| Risk of data loss | Managed redundancy | Depends on your setup |
Mobile Backup Reliability
For most people, a photo app lives or dies here. The real job is quietly and reliably getting photos off your phone.
| Ente Photos | Immich | |
|---|---|---|
| Automatic mobile backup | Yes (continuous, everywhere) | Yes (depends on server availability) |
| Backup depends on | Ente's infrastructure | Your server uptime, network, storage |
Smart Features
Both products aim to make large photo libraries manageable.
| Ente Photos | Immich | |
|---|---|---|
| Face recognition | Yes (on-device, privacy-preserving) | Yes (server-side) |
| Search by description | Yes (magic search) | Yes |
| Albums | Yes | Yes |
| Memories | Yes | Yes |
| Map view | Yes | Yes |
| Desktop app | Windows, Mac, Linux | Web-based |
Sharing & Collaboration
This is where many private tools fall apart. They back up well, but sharing is awkward.
| Ente Photos | Immich | |
|---|---|---|
| Album sharing | Yes (end-to-end encrypted) | Yes (depends on server exposure) |
| Share with non-users | Yes (encrypted link, no account needed) | Yes (requires your server to be accessible) |
| Collect photos from others | Yes (no account needed, encrypted) | Limited |
| Sharing setup for recipients | None (tap a link) | May require VPN, reverse proxy, or port config |
| Works for non-technical family | Yes | Depends on your setup |
Cost
This is the part people often oversimplify.
| Ente Photos | Immich | |
|---|---|---|
| Service cost | 10 GB free plan. Paid plans starting at 50 GB. | Free (open source) |
| Infrastructure cost | Included | NAS/server, disks, electricity, offsite backup |
| Maintenance cost | None | Your time |
| Hidden costs | None | Hardware failures, time spent troubleshooting |
| Family sharing | Up to 6 people on any plan | Unlimited users on your server |
Understanding Key Differences
Self-Hosting Is Not the Same as End-to-End Encryption
This is the most common misconception.
With Immich, your photos are private because they live on hardware you control. That's genuinely better than handing everything to a mainstream cloud provider. But your server can still see, process, and serve your photos in the clear. Anyone who gains access to your server — whether through a misconfiguration, a vulnerability, or physical access — can see everything.
With Ente, photos are encrypted on your device before upload. The encryption keys never leave your devices. Even if someone compromised Ente's servers, they'd get encrypted data they can't read. This is a fundamentally stronger privacy guarantee that doesn't depend on your infrastructure skills.
You Can Also Self-Host Ente
If what you really want is self-hosting AND end-to-end encryption, you don't have to choose between the two.
Ente's server is fully open source and can be self-hosted on your own infrastructure. You get the same end-to-end encryption, the same apps, and the same experience — but running on hardware you control. Your photos are still encrypted before they leave your device, so even your own server cannot access them in the clear.
This is a meaningfully different self-hosting model from Immich. With Immich, your server sees everything. With a self-hosted Ente, your server stores encrypted data it can't read. You get the control of self-hosting with the privacy guarantees of end-to-end encryption.
The Real Cost of Self-Hosting
Immich is often framed as "free" because the software is open source. But the real costs include hardware (a NAS or server), disks and redundancy, electricity, offsite backup, your own time, and the risk of mistakes.
If you already have a well-run homelab, Immich can be very economical. If you're starting from scratch to avoid paying for a photo service, it is not automatically the cheaper option.
Family Sharing Without a Support Ticket
With Ente, sharing albums with family is straightforward. Send a link, they open it. No ports, no reverse proxies, no VPNs, no user provisioning, no explaining why the server is asleep.
With Immich, sharing depends entirely on your setup and the technical comfort of the people you're sharing with. If everyone is happy using your self-hosted environment, it works. If you're trying to share regularly with parents, grandparents, or friends who just want a link, self-hosting adds friction.
Backup You Don't Have to Think About
Ente is optimized around one job: quietly and reliably getting photos off your phone. It should disappear into the background.
With Immich, backup reliability is tied to your server's availability, your network, your storage, and your own maintenance. If your server goes down, fills up, or stalls after an update, your backup stops until you fix it.
If you're comparing based on "Which one is more likely to keep backing up my phone without me thinking about it?" — Ente has the edge.
Summary
Making Your Decision
Both Ente and Immich are excellent products built by people who care about photo privacy. The question is what you're actually optimizing for.
Ente Photos is the right choice if you want practical privacy with minimal friction. You get end-to-end encryption, reliable backup, family-friendly sharing, and polished apps across every platform — without running a server or worrying about infrastructure. If photos are your primary concern and you don't want a side project, Ente is the easier recommendation. And if you do want to self-host, Ente supports that too — with end-to-end encryption intact.
Immich is the right choice if you genuinely want to self-host and are willing to maintain the infrastructure. You get full control over your data, your storage, and your deployment. If you enjoy running your own systems and want that control badly enough to maintain it, Immich is one of the strongest options available.
Why People Choose Ente
People typically choose Ente over Immich when they:
- Want end-to-end encryption, not just self-hosting
- Don't want to maintain a server for something as important as family photos
- Need sharing that works for non-technical family members
- Want reliable mobile backup without monitoring server uptime
- Miss the convenience of Google Photos but want real privacy
- Want fully audited, open-source software without running it themselves
Ready to try a privacy-first photo experience?
Try Ente nowMigrating from Google Photos? Check out our one-click import
Frequently Asked Questions
Is Immich end-to-end encrypted?
No. Immich stores photos on your server, which means they're private in the sense that you control the hardware. But the server can access photos in the clear, and privacy depends on how well you secure your infrastructure. Ente encrypts photos on your device before upload, so even Ente's servers cannot access your photos. Learn more about how Ente's encryption works
Do I need technical skills to use Immich?
Yes. Immich requires setting up Docker containers, managing a server, configuring storage, handling backups, and troubleshooting updates. Ente requires no technical knowledge. You install the app, create an account, and turn on backup.
Can I self-host Ente?
Yes. Ente's server is fully open source and can be self-hosted on your own infrastructure. Unlike Immich, self-hosted Ente still gives you end-to-end encryption — your server stores encrypted data it cannot read. You get the control of self-hosting with the privacy guarantees of E2E encryption.
Can I share albums with family on Immich?
Yes, but it depends on your setup. Your server needs to be accessible to the people you're sharing with, which may involve configuring reverse proxies, VPNs, or exposing ports. With Ente, you share an encrypted link and the recipient taps it. No setup required on their end.
Which has better mobile backup?
Ente is optimized for reliable, background mobile backup as a managed service. Immich supports mobile backup too, but reliability depends on your server being online, your network, and your storage availability. If your server is down, backup stops.
Can I migrate from Google Photos to either service?
Yes to both. Ente offers one-click Google Takeout import that preserves metadata and album structure. Immich also supports Google Takeout imports with community tools.
Which is more private: Ente or Immich?
It depends on your definition. Immich keeps photos on hardware you control, which is better than mainstream cloud providers. But Ente provides end-to-end encryption, which means even the service itself cannot access your photos. For cryptographic privacy guarantees, Ente is stronger. For physical control over your data, Immich gives you that. If you want both, you can self-host Ente.
Does Immich have a desktop app?
Immich is primarily accessed through a web interface. Ente has native desktop apps for Windows, Mac, and Linux with watch folder support.
What happens if my Immich server fails?
If your server fails and you don't have a backup strategy in place, you could lose your photos. You're responsible for redundancy, offsite backups, and disaster recovery. Ente stores three copies of your data across three countries by default.
Is Ente open source?
Yes. Ente is fully open source, both client apps and server code. The code has been independently audited by Cure53 and CERN. Immich is also fully open source.
Related Resources
Looking for more information about encrypted photo storage?
- Getting Started with Ente - Setup guide for new users
- Self-Hosting Ente - Run Ente on your own server
- Migration Guide from Google Photos - One-click import instructions
- How Ente's Encryption Works - Technical details
- Ente Photos Pricing - Compare all storage plans
Both Ente and Immich are strong options for people who care about photo privacy. For people who want encryption, reliability, and convenience without running a server, Ente is the easier choice.