Features

Everything you need. Nothing you don't.

Passwords, notes and two-factor codes live fully encrypted inside your chosen image. Larger files use separate encrypted file-vault containers. Every licence includes every feature, with no premium tier.

Password Manager

Store passwords and logins encrypted inside your image file. They are decrypted only while the vault is open and are never sent to BlindLock servers.

  • Quickly find entries by text and organise them with tags
  • Favourites and sorting by recently created or changed
  • Password generator with configurable policy
  • Copy via the clipboard, which clears itself after 30 seconds
  • Breach-strength indicator that runs locally

Two-factor codes

Built in. No separate app, no QR code juggling between devices, no cloud sync to worry about.

  • Works with standard sign-in codes (TOTP)
  • QR-code import and manual entry
  • One-click copy with auto-clear
  • Seeds encrypted alongside the rest of the vault

Encrypted File Vault

Any file type. Tax returns, passport scans and large archives live in separate encrypted containers. You choose how large a container is when you create it. It stays clearly separate from the password vault in the PNG.

  • Encrypted before a single byte reaches the disk
  • Preview for common formats (image, text, PDF)
  • Chunked storage for large payloads
  • Files never written to disk unencrypted

Secure Notes

Store sensitive notes as plain text. BlindLock encrypts and hides them inside your image file, visible only after you unlock the vault.

  • Plain text without formatting
  • Title, folder and last-modified date per note
  • Full-text search across all notes
  • Same encryption envelope as passwords

Hardware Keys (optional)

Optionally, BlindLock also asks for a plug-in hardware key when unlocking. The key to your login image depends on your device's security chip and a release from the BlindLock licence server. To sign you in, BlindLock also asks for your PIN and your master password.

  • Compatible with YubiKey, Google Titan and SoloKey (FIDO2)
  • Optionally required to open the vault
  • Multiple keys can be registered
  • Emergency access via the twelve words
  • Desktop at launch (Windows, macOS, Linux) — iOS, iPadOS and Android follow

Recovery Phrase

For device loss or migration, create an encrypted BlindLock backup and keep its twelve words separately. BlindLock cannot recover either for you.

  • 12 words, drawn offline on your machine
  • Generated offline, can be shown again after sign-in
  • Opens your backup on a new computer, independently of the old machine’s chip
  • Made to be written on paper and kept off every device

Only one part may reach the network

BlindLock itself never talks to the internet. Everything that has to go out runs through a separated part that cannot see your vault and receives nothing from it.

  • The main program that holds your secrets has no way out
  • The separated part knows only the addresses it is allowed to reach
  • It ships together with the program and has to match it

No cloud vault. No vault telemetry.

BlindLock never transmits vault contents to BlindLock servers. It needs brief encrypted connections for activation, licence entitlement and version checks. None of these connections includes passwords, notes, two-factor codes or files.

  • No BlindLock cloud account is required to store your vault
  • No central customer-vault database or automatic vault sync
  • Licence checks exchange technical licence, device, platform and version data only
  • Every update is required, the vault opens only with the current version
Guides

Go deeper on the vault model.

Cloudless storage, privacy, hardware binding and steganography — then compare honestly.

Cloudless vault Why your vault lives only on your computer. Privacy Why BlindLock learns nothing about your vault. Hardware binding How the security chip binds your vault to your device. Steganography How your vault hides inside an ordinary image. Compare How BlindLock differs from LastPass, 1Password and Bitwarden. Security Which methods protect what, and which connections exist.

One Lifetime licence. Every feature. No subscription.

Pay once for a licence with no expiry date or recurring fee. Entitlement is verified online when you unlock the vault. Every update is required.

Try free for 7 daysDownload · full feature set Buy a Lifetime licenceLifetime from $49 · pay once