[Feature] Private/protected images or albums #2451
Replies: 49 comments 147 replies
This comment was marked as off-topic.
This comment was marked as off-topic.
|
I would welcome this. As a bonus, it could be password protected or it has a hidden way to open. I noticed some phone galleries has that ability like swipe from specific part of edge to open this "secret stash" or vault. There is no need to enter the password, just know where tap / swipe to open it. I would love to see described feature above in phone app. I'm not sure if it would be possible on web UI as swipes on the web are not standard. Maybe using a keyboard shortcut (or keystroke pattern like in GTA San Andreas when we were typing the codes for cheats; or arrowkey pattern) to open the vault? |
|
In terms of Maschine Learning there could also be a suggestion of potentially private photos. |
|
Good point. Could @DMNh add those comments / suggestions to original post? |
|
Photoprism has exactly this, so I'm honestly shocked it hasnt been implemented. There is a config setting for block nsfw upload and hide hsfw from timeline. I prefer Immich so id like to see it implemented. |
|
I just installed immich and uploaded lots of old photos. After machine learning searched NSFW which did a great job, and I was thinking.... Why is this not the default behaviour (or at least a checkbox toggle), for immages the machine learning identifies in this way? |
|
eyup. mad props for this idea. |
|
I think this would be a good feature. These pictures should then be excluded from not only the timeline, but also the map view, face detection, and excluded in shared albums (maybe the last one should be a separate option) |
|
I feel this would be a good feature to have too. Right now, "Archive" kind of fulfill the function, but not the form. And hopefully something better than Apple "Hidden Photos" album comes up... since that is not very private at all! |
|
Bump for this I was thinking about this feature as special album that wouldn't be accessible from album tab like other albums but rather with special hidden button / mouse gesture. Or maybe swiping from side or corner? |
This comment was marked as off-topic.
This comment was marked as off-topic.
This comment was marked as off-topic.
This comment was marked as off-topic.
|
I do not think it would be necessary to have a special section for these images a la |
|
VeraCrypt, LUKS, ... is not the correct technology to implement this type of feature. There will be no plausible deniability, but this isn't something immich should implement as it's completely out-of-scope. |
|
@tomgade09 I hadn't considered this at all when making my comments. I personally use paperless-ngx to handle those kinds of documents and hadn't considered too highly how other users might make use of their image libraries. I personally only put finished images in my gallery apps and use other document management software for specific things like passports or other critical documentation. I suppose this is a question of what Immich is for and what the goal is, but @bo0tzz makes a clear point: an actual encrypted volume doesn't make sense in this project. 10 years down the line if the project is abandoned or something happens, I prefer to have my images encrypted only by my filesystem on the server I control. If your documents are very precious there are secure solutions to protecting them and I don't think an open source application with web-facing access is the way. |
|
@AngelaDMerkel You know, I quite like the look of paperless-ngx. I'm going to check it out further and probably give it a try. Thanks for the tip! Maybe I'm using Immich in a manner different that the developers intend......but I definitely am not going to expose this to the outside world. I don't trust myself to secure it properly for something like that. Just internal network use - so my wife and I can have a joint photo album. |
|
The problem with this is when you're showing your elderly mother your vacation photos and have to explain to her why there's so many blurred ones along the way. I'd much rather be able to stash them away in their own folder. I'm equally as worried about the world knowing they exist as I am about them seeing what the photo is. |
|
Give the user the option. Hide from timeline, move to private folder, blur on timeline, blur in any folder and require interaction to unblur. Options |
This comment was marked as off-topic.
This comment was marked as off-topic.
This comment was marked as off-topic.
This comment was marked as off-topic.
|
+1 this is crucial for a photos backup solution, even if its leveraging the already implemented albums function to create a nsfw album as a master "block all from timeline" group. Then to open the album just use fingerprint or screen lock in the app, pin/immich password as a fallback and for web. |
This comment was marked as off-topic.
This comment was marked as off-topic.
|
this is one of the most important reason for me to choose self-hosted solution |
|
+1 |
|
+1. This feature is the only reason I haven't completely switched from google photos. |
|
You said "just excluding photos from the timeline would be a good start". Well, you can already do that, so it sounds like we have a good start. |
|
@jrasm91 I've edited my comment. I wanted to show support this feature request, and added that bit as a potential starting point. I wasn't aware this feature was already in progress. |
|
That's fine, I don't see any problem with informing you that archive functionality exists today, so not sure why you commented back with "sure, if you only want one folder with no organization." I think it is clear we will get other options in the future, and archive isn't planned on being the only one. |
|
Recently my wife gave birth and I took a bunch of photos. Then about 2 weeks later I was telling a friend how great Immich was. He wanted to see it...and I realized I couldn't show him because close to the top of the timeline were all those photos. I'd love to have the ability to have photos I mark to not show up on the timeline by default, and with some kind of authentication be able to view a timeline of just those photos, and the option to temporarily include them in the main timeline. |
|
You can archive a photo while still having it in an album, or multiple. (Maybe this is a newer feature?) |
I'm not sure if a simple password protection to limit access through the UI is enough, if you want to protect it by 100% it would include the admin as well or whoever has access to the underlaying filesystem If you go down this road you either use PostgreSQL: Documentation: 16: 19.8. Encryption Options or E2EE (what is discussed in #450 but it may took the wrong direction and exculde external file location if E2EE is used. What if you do Tokenization of the images (fingerprint) and metadata, that should still allow to produce automated albums etc. which are only encrypted if the user is loggined and viewing them. If you want to avoid that AI is using all pictures you could do Federated learning, which, to my knowledge, it has outgrown academic research (it would quite an interesting student project for e.g. Google Summer of Code) |
|
I am ok with a password to prevent a curious auntie or uncle from viewing what they ought not. I don't think the scope of this should really be actual security or real encryption |
|
The whole original purpose of this thread has nothing to do with encryption. This has come up as sort of a byproduct. The original issue/feature request is basically about hiding images from the default views based on certain criteria like marking them as NSFW (literally mentioned in the initial post). Requiring a password to access them would be a useful enhancement, but for the most basic implementation of this feature, I (!) think it's not necessary. I think the core feature requested here is reliably hiding NSFW images from the eyes of bystanders when browsing one's own galleries. |
|
I agree. I am really only seeking more granular segregation between images which are basically omniana like screenshots and those images which are desirable, but only for a limited audience. A password seems basically like a UI function to me though, and probably doesn't add much dev time |
|
I appreciate that I haven't contributed anything to this discussion since opening the issue (mainly because the feature was technically originally suggest by someone else), but I would say that I never envisioned it to have anything to do with encryption - only hiding specific photos from the timeline view and potentially requiring re-authentication to view those photos. If you're running your own server and want your photos encrypted, it's very easy to just encrypt everything on the underlying filesystem to protect your data at rest. Far easier than having Immich handle selectively encrypting and decrypting specific photos. If you're not running the server yourself and you don't trust the admin not to view sensitive photos then you should not be uploading those photos to that server. The server must be able to access the photos, unencrypted, in order to be able to do anything with them and provide any functionality. |
|
And, to put a cap on that topic: Encryption in Immich is not going to happen, as has been covered in a few other requests already. |
|
Was about to create a new feature request for this, but then saw there was this thread already created. I would really like to see this feature added. Like many people, I have private photos I don't want to just be combined into my timeline with other photos, or even easily accessible and open to anyone that may be using my devices. Even if they're not encrypted that's fine, but just having an album or folder that can be password protected either with your user account password to reauthenticate or just a simple passcode, ideally integrated biometrics from your device such as Face ID or fingerprint verification from the device itself, if that's too complicated I'd be fine with a simple 4 or 6 digit passcode to be prompted with to access the album. Google Photos and many other cloud providers offer this, iOS even offers this built into the photos app to add photos to the "Hidden" folder that requires FaceID to unlock. Very popular feature among other platforms. Would be really nice to see this added. |
|
This ! So I'd like to see either a detailed user permission on folders / periods (because I don't mind having 2 users - like one for the pictures compatible with my wife and one for everything) or being able to add password protected folders (with a "display hidden pictures switch" which would ask for a password). |
|
I am here to further express support of this feature. I think most people will be surprised to find that there isn't a way to hide a portion of their photos. I like a lot of the concepts brought up in this thread, but I don't think any that complicated needs to be implemented (I post without looking at the codebase). I think at bare minimum an album that will make any photo in it not appear with the rest of your photos should exist. Something so that you can scroll through photos with other people, and not have to worry about showing something that you don't want. I think being able to make albums that you can mark as hidden would be ideal for organizing your photos, but that is added functionality. I personally think having the ability to remove certain photos from being easily viewed is vital in 2024. |
|
Hey are we able to close this thread? It's literally on the roadmap already, you don't need to come out in support of the feature and explain to everyone that you don't want your wife to see your ex-girlfriend's nudes. Continuously circlejerking this topic while it's already been slated for development is just insane. Please close it to replies. |
|
It's at the top of the roadmap. |
The thread we're in right now #2451 (reply in thread) |
I thought that means it's coming last, after stable. |
|
It means that it's the latest thing planned and is coming after immich becomes stable. But it does mean it's planned. I don't really see the issue here🤔. |
No issue, just wanted to clarify. |
This comment has been hidden.
This comment has been hidden.
|
Curse that one single guy for reading a thread and trying to reply the same way everyone else there was. He and he alone should have known better. Lets all make an example out of him. For the record, I didn't see anywhere here that it was on a roadmap. Maybe there was somewhere else I could have read that information, but I didn't know. I've been trying to become more active in open source projects, and thought joining conversations like these was a good low stakes way to dip in a toe. |
|
I'm sorry I came off that way, your comment simply told your use case without any new suggestions. The point of this discussion is to suggest new ideas and contribute. |
|
Just want to chime in here. I'm playing around with putting 'hidden' photos/videos in the Archive section - I think this solves the part of those pictures/videos showing up in the main library, but haven't tested that out much. I think these features would be well received and are things that I am hoping for;
Better yet: Hidden files - Hidden behind a password, completely invisible from library/archive unless user goes there on purpose, with access. Albums to be able to separate out different hidden files. I really hope these features get on the radar - thanks Immich, the software is AWESOME - but right now I can't let other people into my library... I've also thought about creating another user for 'hidden' files and just migrating those completely out of the main library. Would team Immich chime in on how the dev team sees handling these types of 'wanted to be hidden' files? Another user; how do ya'll see it??? |
|
Archiving has downsides, hasn't it? Aside from the fact that it is alienating a feature with a totally different purpose... Hidden files would be great. Especially when they are locked behind a password or only accessible through ones own profile. Tagging and the ability to set filters to what is shown on the main page and everywhere where pictures are shown would also work. I could tag certain albums and pictures NSFW and set the filter to hide albums and pictures with the NSFW tag from every public display, while only being able to reach them through my own profile. |
|
This is very very clunky, but the way I do it for now, is that I just have 2 accounts. It's how I used to do it with google photos as well. Unforutnatley, uploading from phone on immich is kind of sad right now, you can't select a few individual photos to upload those specifically, and selecting an album to auto-backup retains that setting across accounts, so that's kind of unusable for this purpose (and is maybe a security issue depending on who you ask). There's also no easy switch between multiple logged in accounts, unlike in GPhotos where you can just swipe your pfp. But nevertheless, if you have 2 accounts, you can login and upload your safe photos to one, and then login and upload your not-safe photos to the other. Then you have a clean and a dirty timeline and albums you can share. Probably fine to duplicate some photos if you want a particular mixed album until this feature actually comes out. If you have "containers" in your browser where you can be logged in on both accounts in 2 differnt tabs, and you have your photos synced with your pc/network drive or something, then it a bit less of a hassle to do that. |
oh bless, thank you for mentioning |
|
Thanks for the hint! but did you manage to have it work? I'm on 117 both server & app but I can't see "all local assets" as mentionned in the release note. |
|
@etique57 I edited my message (only a minute after I sent it) with a note about that feature being reverted. You can read about it in: 1.107.1 |
|
thanks I totally missed the .1! |
|
Ok it took me a hot second to figure out, so I'll write the comment You have to disable the auto backup on your phone, and then select e.g. you Recent Images DCIM folder as a backup album No auto-clean up like GPhotos, but you can select images and then hit "delete from device" No multi account support on mobile so you also have to re-log, but still, works nice enough |
|
I think this FR was unintentionally closed; I've reopened it and locked it instead, since there's not much more to add to the discussion. |
|
This is now implemented. |
|
@j21w91 ah interesting! Can you help open a GitHub issue so we can track and resolve it? |
@bo0tzz @NicholasFlamy Thanks for the reply. And I'm curious, so this server-side processing needs access to the raw data inside an image file in order for users to access the image? If you need image metadata in order to internally track the existence of a file, you could just not encrypt the metadata. And this would still allow things like geotagging/showing up in chronological timelines/etc, although the contents of these images would be hidden unless you provide the encryption key when retrieving images from the server. |
You're basically describing that a separate processing flow would need to be created for e2ee images. Take for example machine learning. If you keep this metadata public you can infer from the metadata what the image is about. Ok so don't include machine learning metadata. What about person recognition? Probably should not include that. Geo data? Well, if someone wants to hide photos behind e2ee, why would they want the location data about that photo to be accessible without the decryption key? Maybe you don't want the server admin to know you were in that location. Metadata about photos is almost immediately and directly content. It must be included if you're using e2ee. |
|
@rouke-broersma I understand what you're saying, but this is not true in all cases, since it entirely depends on how you define your threat model. In any real-world case where immich is deployed, I doubt people care about CIA agents on their network trying to track political dissidents. Immich can afford a significantly more lax threat model: maybe users don't care about whether server admins know when and where a photo was taken, they just want to keep its contents confidential. You're right that leaking facial recognition and ML metadata would likely be too much. So clearly those can be encrypted, and like I suggested in my first comment, those features would be unavailable for encrypted photos. It's very much not an all-or-nothing thing. |
|
Which, if you don't actually care that much, you can now do with the locked folder. E2ee is not necessary for your scenario. The inverse is simply not true. If you're so worried about the server owner having access, or someone else gaining access to your photos that you want e2ee, then you absolutely should care that the metadata is encrypted as well. Any scenario that doesn't require metadata encryption also does not realistically require photo encryption. Look I would also like more advanced privacy features. I would like multiple locked albums, encrypted albums etc. But it's not simple, so it'll take time. You can't handwave away the complexity. |
|
Check out #18470 if you're like me and really want organization for private photos. |
|
This is only a single hidden album, with even less possibilities than the archive. I have some pics I don't want to show my family, but I need to share them with a doctor. I have made an album that I shared with her, and after upgrading I put these pics out of the archive, then in this private area : they all disappeared from the album where she expects to see the latest photos of my surgery. I had to get them all out of the private area, back in the unprotected archive (so that at least they do not appear in my home page)... And in the private area, I can't sort pics and show only some of them to some selected people, it's all or nothing. Clearly, this feature is below expectations... |
Using an archive feature for sharing feels counter intuitive tbh. I associate archiving with not needing the content anymore while also not having decided that you actually want the content deleted. A step before recycling. I had never thought that you can share from the archive if I hadn't read this. |
Exactly what I was saying. The implemented feature is below mine 🙂 |
Agreed, never would have found this feature if not for this thread. Would be great if there was a "Hide from Timeline" option as opposed to having to archive all the pictures in an album, and having a second copy of the picture in Archive as well as the Album. I have a lot of pictures of VIN's, Serial numbers, asset ID's, etc that I don't care to see in the timeline, but are important to have. I never would have thought to archive the photos in an album, as that is counter-intuitive to what an album is. |
Unfortunately, this means that my cool party photos that I am actively interested in (e.g. not "archiving") but definitely want to hide from the timeline in the presence of others, and my old bills, would be mixed together. If simpler, I would appreciate the feature of having multiple user-made "archives", i.e. sections that hide images from the timeline. That way I can at least categories e.g. bills, medical photos, nsfw photos, etc. and still browse/album/share them. |
|
This is the single biggest missing piece IMO for my catalog of photos. Instead of creating a locked folder or having an archive, the best way I have seen to handle this is using custom views https://manual.mylio.com/24.3/en/topic/browse-by-category-with-spaces as I discuss in my comment on 18645. |
|
Just to connect people subscribed here: #18645 is a feature request to let private photos optionally/temporarily be part of the rest of the immich feature set. So by default private photos aren't shown anywhere but there is an option to temporarily have them show up in the timeline, in search, in albums, on the map, etc. |
|
Hey, you might want to reply to whoever suggested training an AI model to do this (my assumption of what you were replying to) because your comment is just a comment, and it looks like you are replying to the main post which doesn't connect with what you are saying. |
|
i'd like it if the "Partner sharing" option would include an option to immediately exclude certain albums or perhaps better: Albums with a specific tag. Personally I would then select some albums I wouldn't want my partner to accidentally show her family, and would also include the album that contains all pictures from mobile, preferring to order them before sharing. |
and others
Uh oh!
There was an error while loading. Please reload this page.
The feature
The discussion at #1638 mentions this, but was closed with the addition of archival functionality.
I think that as a separate feature to archival, it would be good to be able to mark individual images and/or albums as private/protected. These images would not show up in the timeline and would require entering the account password or a fingerprint scan to view them.
The rationale behind this feature request is that many people have photos which are NSFW or contain private information and would not want these photos to be viewed accidentally when showing timeline photos to others. This is distinct from archived images, which are hidden from the timeline but are easy enough to view.
In the UI, private/protected images could be accessed from the library tab alongside favourites and archived images. If it were also possible to mark albums in this way, they could be shown with other albums but without a thumbnail image.
Platform
All reactions