Lifetime licences · from €59 · Coming soon
BlindLock

Your secrets
stay with you.

Passwords, notes, 2FA secrets and private keys stay encrypted on your device, concealed inside an ordinary-looking PNG file. Opening the vault requires the correct carrier file, your master password and the authorised device. BlindLock never transmits vault contents to our servers.

Join the founders list - be first when Phase 1 opens (150 lifetime licences from €59).

Launch updates only - the BlindLock app itself still stores nothing about you.

Why BlindLock

Three independent layers protect your vault.

There is no central collection of customer vaults for attackers to capture in a single provider breach. BlindLock removes that major cloud-manager attack surface, while remaining clear about the limits of local security.

Invisible, not just encrypted

Steganography means concealing data inside an ordinary-looking file. Your complete password vault lives encrypted inside a PNG carrier, with no recognisable vault file to advertise its presence.

Long-term ciphertext risk

Encrypted data stolen today can be stored and attacked later. There is no central vault database to harvest, and your resting vault file uses 256-bit authenticated encryption — under known quantum attacks on symmetric crypto, a work factor generally treated as impractical. The stack also includes the NIST post-quantum components ML-KEM-1024 and ML-DSA-87 (FIPS 203/204); where each is deployed is documented on the Security page.

Bound to your device

The vault opens only when three things match: the carrier file, your master password and your authorised device. A copied file alone is not enough to gain access.

Features

One vault. Everything that matters.

Every BlindLock licence includes every feature — no tiers, no upsells and no premium gate on the tools you actually need.

Password Manager

Credentials stored fully encrypted inside your PNG carrier.

TOTP 2FA

Built-in authenticator — no separate app needed.

Crypto Wallet Keys

Seed phrases and private keys stored in the encrypted carrier, never in our database.

Encrypted File Vault

Files of any kind, up to 1 TB, in separate disguised and encrypted containers.

Secure Notes

Plain text and Markdown stored inside the same encrypted carrier.

Security Keys

Optional fourth factor: plug in a YubiKey, Google Titan, or SoloKey (desktop).

How it works

First the gate, then three keys.

First the PIN as the gate — it runs through Argon2id, a memory-hard key derivation over 256 MiB calibrated to about 10 seconds per check, and it does not open the vault; it unseals the hardware-anchored app key inside the security chip, which makes guessing pointless. After that, three things together open the vault: your file, your password, and your device. Optionally, a security key (YubiKey, Google Titan, SoloKey) adds a fourth factor.

1

Choose a carrier

Any PNG image on your device. A vacation photo works perfectly.

2

Choose a password, link your device

You set your password, and the vault is tied to your device. Optionally add a security key such as a YubiKey, Google Titan, or SoloKey.

3

Add your secrets

Passwords, TOTP secrets, notes and wallet entries go into the encrypted carrier. Larger files go into separate disguised file-vault containers.

Lifetime licences

Lifetime licences. Limited supply.

BlindLock offers exactly 1,000 lifetime licences in three price phases at launch. Pay once and receive a licence with no expiry date or recurring subscription — buy early for the lowest price BlindLock will ever have. After that, it is subscription-only.

Phase 1 150 × Lifetime at €59

Pay once for a licence with no expiry date or recurring subscription. The first 150 supporters receive the lowest launch price.

Phases 2 & 3 350 × Lifetime at €79 · 500 × Lifetime at €99

Phase availability follows the licence allocation. After licence no. 1,000, lifetime is gone for good — BlindLock then becomes subscription-only.

Lowest price in phase one

Each phase costs more: €59 → €79 → €99. With licence no. 1,000, lifetime ends for good.

Lifetime means no expiry and no subscription.

Licence entitlement is verified online when the vault is unlocked. BlindLock may enforce a minimum version for security-critical releases; routine updates remain optional.

Platforms

Engineered for every platform. One device per licence.

BlindLock is available for Windows, macOS, Linux, iOS, iPadOS and Android.
A Lifetime licence activates one desktop device at a time on your chosen platform.
iOS, iPadOS & Android are always free, for everyone.

Desktop — Lifetime licence
Windows
macOS
Linux
Mobile — always free, for everyone
iOS
Android
Security guides

Jump to the topics that matter most.

Understand local storage, cloud-free vault architecture, hardware binding and steganography — including the few connections BlindLock genuinely needs.

Latest post

Your secrets deserve to be invisible

Why we built a vault that hides inside your photos — and why it matters more than you think. A 12-minute read on the LastPass breach, quantum harvesting, and the steganographic vault.

Read article