Invisible, not just encrypted
Steganography means concealing data inside an ordinary-looking file. Your complete password vault lives encrypted inside a PNG carrier, with no recognisable vault file to advertise its presence.
Try it right now — free for 7 daysno e-mail, no payment
Your secrets
Lifetime licences · from $49 · Available now
BlindLock
Your secrets
stay with you.
Passwords, notes and 2FA secrets stay encrypted on your device, concealed inside an ordinary-looking PNG file. Opening the vault requires the correct carrier file, your master password and the authorised device. BlindLock never transmits vault contents to BlindLock servers.
Why BlindLock
Three independent layers protect your vault.
There is no central collection of customer vaults for attackers to capture in a single provider breach. BlindLock removes that major cloud-manager attack surface, while remaining clear about the limits of local security.
Protected today for the world of tomorrow
Encrypted data stolen today can be stored and attacked later. BlindLock does not run a central vault database — there is nothing for attackers to steal from BlindLock servers and crack later. Your resting vault file uses 256-bit authenticated encryption — under known quantum attacks on symmetric crypto, a work factor generally treated as impractical. The stack also includes the NIST post-quantum components ML-KEM-1024 and ML-DSA-87 (FIPS 203/204). Where each is deployed is documented on the Security page.
Bound to your device
The vault opens only when three things match: the carrier file, your master password and your authorised device. A copied file alone is not enough to gain access.
Features
One vault. Everything that matters.
Every BlindLock licence includes every feature — no tiers, no upsells and no premium gate on the tools you actually need.
Credentials stored fully encrypted inside your PNG carrier.
Built-in authenticator — no separate app needed.
Balances and addresses from your crypto accounts, without private keys. You prepare a transaction in BlindLock and approve it on your external hardware wallet. BlindLock itself approves nothing and holds no assets.
Files of any kind, in separate encrypted containers.
Plain text and Markdown stored inside the same encrypted carrier.
Optional fourth factor: plug in a YubiKey, Google Titan, or SoloKey (desktop).
BlindLock is not a wallet and not an exchange. It custodies no crypto assets and signs no transactions — that always stays with your own hardware wallet.
How it works
First the gate, then three keys.
First the PIN as the gate — it runs through Argon2id, a memory-hard key derivation over 256 MiB calibrated to about 10 seconds per check, and it does not open the vault. It unseals the hardware-anchored app key inside the security chip, which makes guessing pointless. After that, three things together open the vault: your file, your password, and your device. Optionally, a security key (YubiKey, Google Titan, SoloKey) adds a fourth factor.
1
Choose a carrier
Any PNG image on your device. A vacation photo works perfectly.
2
Choose a password, link your device
You set your password, and the vault is tied to your device. Optionally add a security key such as a YubiKey, Google Titan, or SoloKey.
3
Add your secrets
Passwords, TOTP secrets, notes and wallet entries go into the encrypted carrier. Larger files go into separate encrypted file-vault containers.
Lifetime licences
Lifetime licences. Limited supply.
BlindLock offers exactly 1,000 lifetime licences in three price phases at launch. Pay once and receive a licence with no expiry date or recurring subscription — buy early for the lowest price BlindLock will ever have. After that, it is subscription-only.
Pay once for a licence with no expiry date or recurring subscription. The first 100 supporters receive the lowest launch price.
Phase availability follows the licence allocation.
After licence no. 1,000, lifetime is gone for good — BlindLock then becomes subscription-only.
Lowest price in phase one
Each phase costs more: $49 → $89 → $109. With licence no. 1,000, lifetime ends for good.
Lifetime means no expiry and no subscription.
Licence entitlement is verified online when the vault is unlocked. BlindLock may enforce a minimum version for security-critical releases. Routine updates remain optional.
Platforms
Engineered for every platform. One device per licence.
BlindLock for Windows, macOS and Linux is available now — iOS, iPadOS and Android follow.
A Lifetime licence activates one desktop device at a time on your chosen platform.
iOS, iPadOS & Android are always free, for everyone.
Desktop — Lifetime licence
Mobile — always free, for everyone
iOSComing Soon
AndroidComing Soon
Security guides
Jump to the topics that matter most.
Understand local storage, cloud-free vault architecture, hardware binding and steganography — including the few connections BlindLock genuinely needs.