ImageTome

ImageTome is an end-to-end encrypted media sharing platform built so that the service hosting your photos cannot read them.

You share inside tomes - private, invite-only spaces that hold images, videos, posts and comments. Each tome has its own AES-256-GCM key, generated in your browser. Everything is encrypted before upload: file contents, thumbnails, filenames, tome names and descriptions, post titles and bodies, and comments. What reaches the server is a blob it has no key for.

Accounts are passwordless. Registration generates an RSA-4096 keypair in your browser; the public key goes to the server, the private key never leaves your device. Logging in is a challenge-response against that key, so there is no email address, no phone number and no password database. Inviting someone wraps the tome key with their public key, so adding an eleventh member is exactly as encrypted as sharing with nobody.

What you get: encrypted images (JPEG, PNG, GIF, WebP, up to 50MB each, 25 per post); encrypted video (MP4 and WebM up to 200MB, with thumbnails generated client-side and played back decrypted in the browser); encrypted posts and comments; one-to-one encrypted messaging; owner/admin/member roles; favourites across tomes; live updates over WebSockets; private key export for backup and moving between devices; light, dark and system themes.

What it costs you, stated plainly: there is no password reset — lose your key with no backup and the account is gone. There is no search inside your media, because nothing can be indexed that cannot be read. There is no trash and no undelete. And the service cannot proactively moderate content, because it cannot read any of it; it acts on reports instead.

ImageTome is a good fit if you want family photos, personal video or private group media out of reach of face recognition, content scanning and terms of service that change. It is a poor fit if you want automatic albums, memories, provider-side search or an account you can recover by email.