Immich
Browse and organise.
The open-source photo and video library at the heart of the experience.

VOLPAROSSA IMAGE
Building on Immich to preserve your photo library across devices.
In developmentBuilt on Immich. Extended by VOLPAROSSA.
Immich provides the familiar photo-library experience. VOLPAROSSA is developing the connection to Core for encrypted storage, recovery and use across devices.
The current integration focuses on private snapshots. Live library and mobile use are still being developed.


Browse and organise.
The open-source photo and video library at the heart of the experience.
Storage and recovery.
The shared foundation for encrypted fragments, placement and storage accounting.
Keys and permissions.
Keep control of recovery credentials and deliberate sharing choices.
Preserve the originals and the information that keeps them together.
A snapshot brings a prepared copy of the library database and media into one recoverable archive. The recovery key and trusted recovery records must be kept separately by the owner.


The original media you want to preserve.

The library data that keeps your collection in context.

Keep your key and trusted recovery records independently available.
A snapshot is a prepared copy of the library at a particular point in time.
Snapshot recovery is a development step toward a working library.

Start with a prepared, consistent copy of the library database and media. Keep the original library unchanged.

Encrypt the archive locally. Keep the recovery key and trusted recovery records separate from the stored data.

Core divides the encrypted archive into fragments and keeps redundant copies with authorised storage participants.
Encrypted fragments. Redundant copies.

Retrieve and verify the encrypted archive, then decrypt it locally with your retained key into a new recovery copy.
Retrieve & verify Decrypt locally

The current storage command retrieves ciphertext. Supplying the key and decrypting are separate operations.
A restored archive still needs a verified Immich import before it becomes a working photo library.
See the development evidenceDesigned for Android, iPhone, iPad and the web.
The goal is to browse and synchronise your library without personally maintaining a server that must stay online. Live library access and device synchronisation are being developed.
Recovery still needs your credentials and enough available storage participants.

Target experience illustrated with a fictional photo collection.
Private photos, faces and locations need explicit boundaries.
Keep an independent private copy of the key and credentials needed for recovery. Storage participants do not receive your decryption key.
The snapshot is encrypted before it reaches storage participants, including the media and library metadata inside it.
Private image analysis requires local or explicitly trusted execution. Encrypted storage alone does not make arbitrary remote processing private.
Private media and metadata are not automatically published to public cache or used for model training.
A bounded snapshot trial is demonstrated. The complete photo-library experience is still being built.
An encrypted snapshot made from synthetic test data was stored across three providers. With one provider offline, the remaining providers supplied the encrypted data for two successful local decryptions and restores by the owner.
The recorded trial also completed deletion of its stored copies and cleanup.
Read the snapshot evidence View on GitHubEnd-to-end testing of the current storage adapter, a running restored Immich library, device synchronisation, mobile integration and automatic storage maintenance.
Explore the integration work View on GitHubThe trial covers its pinned snapshot implementation, not the newer adapter or live library use.
There is no supported end-user release yet.

Contribute to recovery, mobile integration, documentation and testing. Help turn the shared storage foundation into a complete photo-library experience.
Image artwork and notices