Hey Product Hunt 👋

I'm Shyam, and I built Kura Vault: self-hosted, end-to-end encrypted storage for your personal photos and videos.

Why I built it?

Our photos and videos are some of the most personal things we own, yet most of us hand them to cloud services that can scan, analyze, or lose control of them. I wanted the convenience of a cloud gallery without giving up privacy.

So I built Kura Vault: everything is encrypted on your device before it uploads, and it runs on your own server. Not even the server, or me, can see your files. You can still share a vault or an album with family, and you never have to share a passphrase.

It's open source and self-hosted, and it's built for people who want their memories to stay theirs. 🔒

How it works?

🔐 Everything is encrypted on your device before upload (AES-256-GCM, a separate key for each file). The server only stores opaque blobs and never sees your passphrase, your keys or your files.
🗂️ Multiple vaults, each with its own passphrase. One passphrase opens only its own vaults. The others don't even show up.
🤝 Share without sharing a password. Share a vault or a single album with someone, view-only or with permission to add. Keys are sealed to their public key on your device.
⚡ Uploads go straight to S3-compatible storage, so your media never passes through the API.
👥 No public sign-up. You invite people with one-time links, and as the owner you still can't read their vaults.
📦 A bulk import CLI to move an existing library in, with resume support.

You can run it on your own server with a single install script (Docker, amd64/arm64), then use the web app or the Android app. It's open source under MIT.

To be upfront: it's early and hasn't had an independent security review yet, so please don't make it the only copy of anything important.

I'd love your feedback, especially on the self-hosting setup and the sharing flow. What would make you trust it with your photo library? 🙏

🌐 kura.greytimelabs.com

💻 github.com/greytimelabs/kura-vault