Invisible, not just encrypted
Steganography means concealing data inside an ordinary-looking file. Your complete password vault lives encrypted inside a PNG carrier, with no recognisable vault file to advertise its presence.
Passwords, notes, 2FA secrets and private keys stay encrypted on your device, concealed inside an ordinary-looking PNG file. Opening the vault requires the correct carrier file, your master password and the authorised device. BlindLock never transmits vault contents to our servers.
There is no central collection of customer vaults for attackers to capture in a single provider breach. BlindLock removes that major cloud-manager attack surface, while remaining clear about the limits of local security.
Steganography means concealing data inside an ordinary-looking file. Your complete password vault lives encrypted inside a PNG carrier, with no recognisable vault file to advertise its presence.
Encrypted data stolen today can be stored and attacked later. There is no central vault database to harvest, and your resting vault file uses 256-bit authenticated encryption — under known quantum attacks on symmetric crypto, a work factor generally treated as impractical. The stack also includes the NIST post-quantum components ML-KEM-1024 and ML-DSA-87 (FIPS 203/204); where each is deployed is documented on the Security page.
The vault opens only when three things match: the carrier file, your master password and your authorised device. A copied file alone is not enough to gain access.
Every BlindLock licence includes every feature — no tiers, no upsells and no premium gate on the tools you actually need.
Credentials stored fully encrypted inside your PNG carrier.
Built-in authenticator — no separate app needed.
Seed phrases and private keys stored in the encrypted carrier, never in our database.
Files of any kind, up to 1 TB, in separate disguised and encrypted containers.
Plain text and Markdown stored inside the same encrypted carrier.
Optional fourth factor: plug in a YubiKey, Google Titan, or SoloKey (desktop).
First the PIN as the gate — it runs through Argon2id, a memory-hard key derivation over 256 MiB calibrated to about 10 seconds per check, and it does not open the vault; it unseals the hardware-anchored app key inside the security chip, which makes guessing pointless. After that, three things together open the vault: your file, your password, and your device. Optionally, a security key (YubiKey, Google Titan, SoloKey) adds a fourth factor.
Any PNG image on your device. A vacation photo works perfectly.
You set your password, and the vault is tied to your device. Optionally add a security key such as a YubiKey, Google Titan, or SoloKey.
Passwords, TOTP secrets, notes and wallet entries go into the encrypted carrier. Larger files go into separate disguised file-vault containers.
BlindLock offers exactly 1,000 lifetime licences in three price phases at launch. Pay once and receive a licence with no expiry date or recurring subscription — buy early for the lowest price BlindLock will ever have. After that, it is subscription-only.
Pay once for a licence with no expiry date or recurring subscription. The first 150 supporters receive the lowest launch price.
Phase availability follows the licence allocation. After licence no. 1,000, lifetime is gone for good — BlindLock then becomes subscription-only.
Each phase costs more: €59 → €79 → €99. With licence no. 1,000, lifetime ends for good.
Licence entitlement is verified online when the vault is unlocked. BlindLock may enforce a minimum version for security-critical releases; routine updates remain optional.
BlindLock is available for Windows, macOS, Linux, iOS, iPadOS and Android.
A Lifetime licence activates one desktop device at a time on your chosen platform.
iOS, iPadOS & Android are always free, for everyone.
Understand local storage, cloud-free vault architecture, hardware binding and steganography — including the few connections BlindLock genuinely needs.