mirror of
https://github.com/photoprism/photoprism.git
synced 2026-03-02 22:57:18 -05:00
Security: Add Password for Access to Private Pictures #269
Labels
No labels
ai
android
api
auth
awesome
bug
bug
ci
cli
config
database
declined
deprecated
docker
docs 📚
documents
duplicate
easy
enhancement
enhancement
enhancement
epic
faces
feedback wanted
frontend
hacktoberfest
help wanted
idea
in-progress
incomplete
index
invalid
ios
labels
live
live
low-priority
macos
member-feature
metadata
mobile
nas
needs-analysis
no-coding-required
no-coding-required
observability
performance
places
please-test
plus-feature
priority
pro-feature
question
raspberry-pi
raw
released
released
released
research
resolved
security
sharing
tested
tests
third-party-issue
thumbnails
upgrade
upstream-issue
ux
vector
video
waiting
won't fix
won't fix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/photoprism#269
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @hialvaro on GitHub (May 22, 2020).
Originally assigned to: @lastzero on GitHub.
As a user I'd like PhotoPrism to let me set a password for accessing the photos that are marked as "private". Right now I can set photos as "private" but I can access them as a normal folder.
@lastzero commented on GitHub (May 22, 2020):
You are absolutely right, that makes sense. What you see now is just a first step to separate "potentially problematic" photos (like when you were drunk and/or naked) from the others, so that they don't randomly show up in the wrong moment.
@david1155 commented on GitHub (Apr 21, 2021):
Hi! Is it possible to add golden label for this feature request.
@graciousgrey commented on GitHub (Apr 22, 2021):
@uxusoft sure I just added your label :)
@XtremeOwnageDotCom commented on GitHub (Nov 5, 2021):
To note, I attempted to lock the page behind some basic authentication using my proxy.
Since- the application is a SPA using VUE, this will only prevent access to the "private" area if you attempt to navigate directly to it from an external URL. With that said, this means the page cannot be blocked externally via a proxy. So.... yea, it would be quite nice to keep this as a publicly accessible service on my local network, for ya know, sharing family photos and stuff........... without some of the um... "NSFW" photos being clickable.
Because, when somebody sees the navigation options on the left, the first thing they are going to want to do, is to click the "PRIVATE" button. Because, that sounds interesting.
As well, since the application does not have support for individual user accounts, it is not currently possible to give access to this application WITHOUT the giant "private" button appearing in the navigation menu.
So... yea, pretty important feature request here.
@graciousgrey commented on GitHub (Nov 6, 2021):
At the moment you shouldn't give someone access to your user account if they should not be able to see your private photos.
We are currently working on multi-user support. This will allow you to create a read-only users who won't have access to private photos (neither using the url nor in any search results).
@klibansky commented on GitHub (Jun 30, 2022):
Really like this feature. It would be quite unique because I haven't found this feature in any other photo album app I have found.
Don't forget to remove (or blur) the thumbnail/cache images.
Another feature I would love to have, connected to this one, is an extra layer of security, by encrypting the source files somehow. I know there will be a performance hit but better safe than sorry.
I would be kind of like having all the NSFW pics in a password protected zip file in the background.
@gyto6 commented on GitHub (Jun 30, 2022):
First, encryption is a thing that must be done by your filesystem. Especially to not suffer from performances issues. Multi-User being on its way, you can't cipher all users photos with one key. It'd wouldn't be logical and secure. BTW, it would require for "guest" user to remind about a key that encrypt their whole pictures, and you can be sure that they'll loose it.
Second, zip all NSFW pictures is not handy for photo gallery. Secured by a password btw, it does less sense. Photoprism is a website Photo Gallery, so access are governed by the SQL schema. Users can't access to data as they do not access the filesystem.
Set encryption on your filesystem, and use Nextcloud. Or use NextCloud per user encryption to give any of them a special cipher key for encryption. Contrary to NextCloud, Photoprism is a Photo Gallery / Manager (?), but not a file manager or "drive" solution. It's not supposed to edit your pictures by now, exception should be to add metadata to complete photos informations.
@XtremeOwnageDotCom commented on GitHub (Jun 30, 2022):
Y'all quit trying to add "feature creep" here. Let's get to a point where the NSFW/Private photos can at least have a password and then move on!
@JAKAMI99 commented on GitHub (Jul 6, 2023):
One year later. Still wanted :)
@lastzero commented on GitHub (Jul 6, 2023):
We know, but have been releasing a long list of other features and enhancements. So it's not like we did nothing. Please let us enjoy our vacation. We'll work on this and all the other open feature requests. Thank you very much! ❤️
@JAKAMI99 commented on GitHub (Jul 6, 2023):
No need for excuses :(
I think my comment got misunderstood.
Just wanted to tell that somebody else (me) would like this feature...
I've never told, you did nothing :/ of course I let you enjoy your vacation...
That escalated a bit :/
virtual hug
@lastzero commented on GitHub (Jul 6, 2023):
No worries. Simply give this issue a thumbs up at the bottom of the description in this case. We had many users asking for status updates in the recent days, which triggers an email notification to all contributors every time. We therefore recommend to use GitHub Discussions for questions and comments.
@ahlongxp commented on GitHub (Jul 16, 2023):
I need this feature!!
@Akxe commented on GitHub (Aug 3, 2023):
Maybe then the private photos can be searchable if you "log in" for the photos... I could imagine every user in a family having his own login for the private section...
@fl0wm0ti0n commented on GitHub (Nov 20, 2023):
hello, right now the private function is just useless (in my opinion)...
well they wont show up maybe in some sections but everyone can just click on private and see them...
so please just a password! cant be that hard :D thanks!
@Arslan-Rja commented on GitHub (Jul 12, 2024):
I would also like to express interest in this feature.
@avsamano commented on GitHub (Jul 14, 2024):
Jumping in to also request this feature and explain my use-case:
I'm not interested in this because of login sharing.
Rather, I'm interested in this for when I'm simply showing pictures to someone in-person.
Considering the potentially sensitive nature of the images, an errant click by myself or the person I'm showing pictures to could be very embarrassing.
Having that extra layer of a password on Private pictures would just provide piece of mind when scrolling through pictures with someone.
Thank you for the awesome software.
@Ranger21 commented on GitHub (Jan 25, 2025):
That would be absolutely great idea!
@superuser866 commented on GitHub (Oct 23, 2025):
I also think it would be great just asking for a numeric PIN when clicking the Private button in order to avoid opening the Private section by mistake when showing pictures or navigating the menu in presence of other people.
Thank you very much!