Immich

immich.app
Awesome Privacy➔ Media➔ Photo Management➔ Immich
Immich

Self-hosted photo and video backup and management server, with automatic mobile upload, timeline view, albums, search and facial recognition. Needs to be self-hosted, but gives you full ownership + control over your photos.

Avoid

  • google photos
  • windows photo viewer
  • adobe lightroom
  • apple photos
  • irfanview

Also Consider

Open Source

Immich Source Code

Author

immich-app

Description

High performance self-hosted photo and video management solution.

#backup-tool#flutter#google-photos#google-photos-alternative#javascript#mobile-app#nestjs#nodejs#photo-gallery#photos#photos-management#self-hosted#svelte#sveltekit#typescript#videos

Homepage

https://immich.app

Repository

  • LicenseAGPL-3.0
  • Created03 Feb 22
  • Primary languageTypeScript
  • Size315,736 KB
  • Stars115,965
  • Forks7,177
  • Watchers115,965

Language Usage

Language Usage

Project Health

  • Last commit3 days ago
  • Open issues705
  • Latest releasev3.3.1

Top Contributors

Recent Commits

  • bo0tzz(10 Oct 26)

    chore: set ml revision in default compose (#32289)

  • Ștefan Muraru(09 Oct 26)

    fix(ml): Round OCR max resolution up to a multiple of 32 (#32263) fix(ml): round ocr max resolution up to a multiple of 32

  • Brandon Richardson(09 Oct 26)

    fix(logging): avoid multiline logging of feature flags in server service (#32275) When logging feature flags at startup, avoid stringifying the features in pretty format. Multiline log messages clutter logs and make it harder to ingest and parse in log aggregation systems like loki, graylog or logz.io.

  • Santo Shakil(09 Oct 26)

    fix(mobile): show the memories date in every app language (#32259)

  • Weblate (bot)(08 Oct 26)

    chore(web): update translations (#32029) Translate-URL: https://hosted.weblate.org/projects/immich/immich/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/be/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/bg/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/bn/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/ca/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/cs/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/da/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/de/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/el/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/eo/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/es/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/et/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/fi/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/fr/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/ga/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/he/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/hu/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/id/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/it/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/ja/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/ka/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/lv/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/nb/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/nl/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/pl/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/pt/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/pt_BR/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/ro/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/ru/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/sk/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/sl/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/sv/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/tr/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/vi/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/yue_Hant/ Translate-URL: https://hosted.weblate.org/projects/immich/immich/zh_Hans/ Translation: Immich/immich Co-authored-by: Adam Havránek <[email protected]> Co-authored-by: Aidar Nizamov <[email protected]> Co-authored-by: Aindriú Mac Giolla Eoin <[email protected]> Co-authored-by: Alessandro Mandelli <[email protected]> Co-authored-by: Andrei “Talkerbox” Audzei <[email protected]> Co-authored-by: Arif Budiman <[email protected]> Co-authored-by: Azharul Haque <[email protected]> Co-authored-by: BenWen <[email protected]> Co-authored-by: Céleste C. <[email protected]> Co-authored-by: DevServs <[email protected]> Co-authored-by: Eduard Ereza Martínez <[email protected]> Co-authored-by: Gabriel <[email protected]> Co-authored-by: Gonçalo Guedes <[email protected]> Co-authored-by: Hans Cats <[email protected]> Co-authored-by: Happy <[email protected]> Co-authored-by: Haru Ijima <[email protected]> Co-authored-by: Hurricane_32 <[email protected]> Co-authored-by: Hồ Nhất Duy <[email protected]> Co-authored-by: Idan <[email protected]> Co-authored-by: Indrek Haav <[email protected]> Co-authored-by: Ivan Dimitrov <[email protected]> Co-authored-by: Jozef Gaal <[email protected]> Co-authored-by: KecskeTech <[email protected]> Co-authored-by: Lars Winkelmann <[email protected]> Co-authored-by: Levan Makaradze <[email protected]> Co-authored-by: Luis Fernando Illapa <[email protected]> Co-authored-by: MarcSerraPeralta <[email protected]> Co-authored-by: Matjaž T. <[email protected]> Co-authored-by: Mees Frensel <[email protected]> Co-authored-by: Mārtiņš Bruņenieks <[email protected]> Co-authored-by: Nagy Krisztián <[email protected]> Co-authored-by: Nicola Bortoletto <[email protected]> Co-authored-by: Oğuz Ersen <[email protected]> Co-authored-by: Rika <[email protected]> Co-authored-by: Spiros Vlachos <[email protected]> Co-authored-by: Sylvain Pichon <[email protected]> Co-authored-by: Tamás <[email protected]> Co-authored-by: Tim Morley <[email protected]> Co-authored-by: Télio R <[email protected]> Co-authored-by: User 123456789 <[email protected]> Co-authored-by: Yoshi <[email protected]> Co-authored-by: aws <[email protected]> Co-authored-by: bittin1ddc447d824349b2 <[email protected]> Co-authored-by: heizelnut <[email protected]> Co-authored-by: pyccl <[email protected]> Co-authored-by: ruflas <[email protected]> Co-authored-by: waclaw66 <[email protected]>

  • Alex(08 Oct 26)

    fix: show date on memories page (#32206) * fix: show date on memories page * Clean up API * Drop imports --------- Co-authored-by: Adam Gastineau <[email protected]>

  • infocus13(08 Oct 26)

    fix: run workflow steps in their configured order (#32240) Co-authored-by: Claude Fable 5.1 <[email protected]> Co-authored-by: Daniel Dietzler <[email protected]>

  • Jason Rasmussen(08 Oct 26)

    fix: include unamed people in otherPeople (#32237)

  • Daniel Dietzler(08 Oct 26)

    feat: shared person indicator (#32223) * feat: shared person indicator * fix: styles --------- Co-authored-by: Jason Rasmussen <[email protected]>

  • Adam Gastineau(08 Oct 26)

    fix(mobile): prevent rapid toggling and rerendering of cells (#32200) * fix(mobile): prevent rapid toggling and rerendering of cells * Apply Shakil's fix

  • Santo Shakil(08 Oct 26)

    chore(mobile): rename the native core crates and package (#31986)

  • Santo Shakil(08 Oct 26)

    fix(mobile): stop long images squishing on android (#32213)

  • Shaquille_Oatmeal(08 Oct 26)

    docs: Add MACHINE_LEARNING_MODEL_REVISION variable to docs (#32221) Co-authored-by: Copilot Autofix powered by AI <[email protected]> Co-authored-by: Daniel Dietzler <[email protected]>

  • Jason Rasmussen(08 Oct 26)

    fix: clarify people sharing does not share assets (#32231)

  • Daniel Dietzler(08 Oct 26)

    chore: mark people users endpoints as beta (#32232)

  • Mees Frensel(08 Oct 26)

    fix(i18n): remove unused translation (#32184)

  • yuhuan417(08 Oct 26)

    docs: document persistent QNAP database storage (#32222)

  • bo0tzz(08 Oct 26)

    fix(ml): move logging config to code (#32220) This lets it be applied earlier on, so the initializing [version] log line actually works.

  • Daniel Dietzler(08 Oct 26)

    fix: include partner shared assets for people even without showInTimeline (#32219)

  • Lee, Hyo jun(08 Oct 26)

    fix(mobile): format year filter chip without thousands separator (#32159)

  • Peter Ombodi(08 Oct 26)

    fix(mobile): prevent timeline bucket selection provider leak (#32100) Co-authored-by: Peter Ombodi <[email protected]>

  • Santo Shakil(08 Oct 26)

    chore(mobile): one thumbhash decoder in the native core (#31367) * chore(mobile): rust native core * chore(mobile): move the android byte buffer into the native core * chore(mobile): move the raw photo rotation into the native core * move the rotation into immich_core, the jni side only wraps it * use the pointer loop in rotate again, the bounds checked writes were slower on a pixel 5 * chore(mobile): move the 10 bit conversion into the native core * move the 10 bit conversion into immich_core, neon for 32 bit arm * chore(mobile): one thumbhash decoder in the native core * decode the thumbhash straight into the returned buffer, its jni entry sits next to the c export * chore(mobile): move the 10 bit conversion into the native core * move the 10 bit conversion into immich_core, neon for 32 bit arm

  • Santo Shakil(07 Oct 26)

    chore(mobile): move the 10 bit conversion into the native core (#31363) * chore(mobile): move the 10 bit conversion into the native core * move the 10 bit conversion into immich_core, neon for 32 bit arm * move the android rust flags into native/.cargo/config.toml

  • Santo Shakil(07 Oct 26)

    chore(mobile): move the raw photo rotation into the native core (#31362) * chore(mobile): move the raw photo rotation into the native core * move the rotation into immich_core, the jni side only wraps it * use the pointer loop in rotate again, the bounds checked writes were slower on a pixel 5

  • Santo Shakil(07 Oct 26)

    chore(mobile): move the android byte buffer into the native core (#31361)

  • Santo Shakil(07 Oct 26)

    chore(mobile): rust native core (#31254)

  • Daniel Dietzler(07 Oct 26)

    refactor: migrate to native set operations (#32186)

  • Jason Rasmussen(07 Oct 26)

    feat: custom release notes (#32172)

  • Santo Shakil(07 Oct 26)

    fix(mobile): start the session when a link opens the app (#32181)

  • Peter Ombodi(07 Oct 26)

    fix(mobile): decouple delete action messages from context (#31093) * fix(mobile): decouple delete action messages from context * fix(mobile): finish local cleanup after action disposal * fix(mobile): revert redundant changes * fix(mobile): revert rest of redundant changes --------- Co-authored-by: Peter Ombodi <[email protected]>

Immich Security

Security Advisories (14)

  • highPatched

    CVE-2026-105764Authenticated SVG upload reaches ImageMagick coders and enables RCE

  • lowPatched

    GHSA-h5w4-vjv4-9r5qIncorrect sanitization of continue URL on the /maintenance endpoint

  • mediumPatchedCVSS 4.3

    CVE-2026-104867Broken access control: GET /api/admin/users/{id}/calendar-heatmap is reachable by any authenticated non-admin user (cross-user activity/asset-count disclosure, includes archived and locked assets)

  • mediumPatchedCVSS 6.1

    GHSA-qp2h-w794-2vhfIncomplete fix for login continue redirect allows slash-backslash open redirect

  • criticalPatchedCVSS 9.6

    CVE-2026-53662One-click account takeover via XSS in login page continue redirect

  • mediumPatchedCVSS 4.7

    GHSA-hfvf-5c8x-8rc4OIDC discovery/token/userinfo/JWKS fetches run with TLS certificate verification unconditionally disabled via allowInsecureRequests (CWE-295)

  • mediumPatched

    CVE-2026-40096Open Redirect via Shared Album name

  • lowPatchedCVSS 2.8

    GHSA-jrp5-g662-hq92Unsafe ZIP Entry Names (Zip Slip Class) in Archive Download Endpoint

  • highPatchedCVSS 7.3

    CVE-2026-35455Stored XSS via OCR Text in 360° Panorama Viewer

  • mediumPatchedCVSS 4.1

    GHSA-hq46-gw2v-q86pSSRF via OAuth Profile Picture URL (CWE-918)

  • highPatchedCVSS 7.2

    CVE-2026-23896API Key Privilege Escalation

  • mediumPatched

    GHSA-hvq7-hq9r-8gjr[DCODX-AI] Shared-link authentication allows adding owner's assets to shared links (AssetShare authorization bypass)

  • mediumPatched

    CVE-2026-25118Insecure transmission of shared link password

  • highPatched

    CVE-2025-43856Account hijacking through oauth2

Immich Website

Website

Immich

Self-hosted photo and video management solution. Easily back up, organize, and manage your photos on your own server. Immich helps you browse, search and organize your photos and videos with ease, without sacrificing your privacy.

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address172.67.129.142
  • LocationSan Francisco,California,United States of America,NA
  • ISPCloudFlare Inc.
  • ASNAS13335

Associated Countries

  • USUS

Safety Score

Website marked as safe

100%

Trackers

Loads 1 third-party tracker

  • cloudflareinsights.comCloudflare, Inc.

Blacklist Check

immich.app was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview
View full report atweb-check.xyz

Immich Android App

APK Info

De-Googled Compatibility

Native4.00/ 422 ratings
microG4.00/ 49 ratings
  • GrapheneOSNative4.0 / 4(17)
  • crDroidmicroG4.0 / 4(4)
  • LineageOSNative4.0 / 4(3)
  • Evolution XNative4.0 / 4(2)
  • LineageOSmicroG4.0 / 4(2)
  • CalyxOSmicroG4.0 / 4(2)

Tested on Android 13–17 · Updated 09 Oct 26 · View on Plexus →

Trackers

No trackers found

    Permissions

    • Access Fine Location
    • Access Media Location
    • Access Network State
    • Internet
    • Read External Storage
    • Write External Storage

    Immich iOS App

    App Info

    Immich

    This is a client app for Immich Server and you will need to run/manage the server on your own in order to use the app. Website: https://immich.app GitHub: https://github.com/immich-app/immich

    Rating

    Rated 4.79 out of 5 stars by 779 users

    Version Info

    • Current Versionv3.3.1
    • Last Updated09 Oct 26
    • First Released12 Mar 22
    • Minimum iOS Version15.0
    • Device Models Supported130

    App Details

    • IPA Size75.48 Mb
    • PriceFree (USD)
    • Age Advisory4+
    • Supported Languages1
    • DeveloperFUTO Holdings, Inc.
    • Bundle IDapp.alextran.immich

    Screenshots

    • App screenshot
    • App screenshot
    • App screenshot
    • App screenshot
    • App screenshot

    Immich Docker

    Container Info

    immich

    Immich is a high performance self-hosted photo and video backup solution.

    #Photos#AI

    Run Command

    docker run -d \

    Compose File

    version: 3.8

    Immich Socials

    Immich Reviews

    More Photo Management

    • Ente Photos

      Ente Photos

      ente.com

      Provides an open source, audited end-to-end encrypted platform to store photos in the cloud without needing to trust the service provider. With apps for desktop, web and mobile, album sharing, public links, semantic search and facial recognition. Self-hosted or 10GB free.

      Open Source ente-io/ente
      View Ente Photos Report
    View More...

    About the Data: Immich

    Change History

    Edit Immich Data

    You can edit Immich's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
    Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

    Origin Data

    Modify Data

    Delete Immich Submit Edit to Immich Add alternative

    API

    You can access Immich's data programmatically via our API. Simply make a GET request to:

    https://api.awesome-privacy.xyz/v1/services/immich

    The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

    Share Immich

    Help your friends compare Photo Management, and pick privacy-respecting software and services.
    Share Immich and Awesome Privacy with your network!

    View Photo Management (2)
    Next →

    Ente Photos