Skip to content
HN On Hacker News ↗

BlindLock — Your secrets stay with you

▲ 16 points 22 comments by BlindLock 6d ago HN discussion ↗

Pangram verdict · v3.3

We believe that this text is a mix of AI and human-written content.

77 %

AI likelihood · overall

AI
16% human-written 84% AI-generated
SEGMENTS · HUMAN 0 of 2
SEGMENTS · AI 1 of 2
WORD COUNT 836
PEAK AI % 85% · §1
Analyzed
Aug 31
backend: pangram/v3.3
Segments scanned
2 windows
avg 418 words each
Distribution
16 / 84%
human / AI fraction
Verdict
AI
Pangram v3.3

Article text · 836 words · 2 segments analyzed

Human AI-generated
§1 AI · 85%

Try it right now — free for 7 daysno e-mail, no payment Lifetime licences · from $49 · Available now BlindLock Your secretsstay with you. Passwords, notes and 2FA secrets stay encrypted on your device, concealed inside an ordinary-looking PNG file. Opening the vault requires the correct carrier file, your master password and the authorised device. BlindLock never transmits vault contents to BlindLock servers. Why BlindLock Three independent layers protect your vault. There is no central collection of customer vaults for attackers to capture in a single provider breach. BlindLock removes that major cloud-manager attack surface, while remaining clear about the limits of local security. Invisible, not just encrypted Steganography means concealing data inside an ordinary-looking file. Your complete password vault lives encrypted inside a PNG carrier, with no recognisable vault file to advertise its presence. Protected today for the world of tomorrow Encrypted data stolen today can be stored and attacked later. BlindLock does not run a central vault database — there is nothing for attackers to steal from BlindLock servers and crack later. Your resting vault file uses 256-bit authenticated encryption — under known quantum attacks on symmetric crypto, a work factor generally treated as impractical. The stack also includes the NIST post-quantum components ML-KEM-1024 and ML-DSA-87 (FIPS 203/204). Where each is deployed is documented on the Security page. Bound to your device The vault opens only when three things match: the carrier file, your master password and your authorised device. A copied file alone is not enough to gain access. Features One vault. Everything that matters. Every BlindLock licence includes every feature — no tiers, no upsells and no premium gate on the tools you actually need. Password ManagerCredentials stored fully encrypted inside your PNG carrier. TOTP 2FABuilt-in authenticator — no separate app needed. WalletLink Coming SoonBalances and addresses from your crypto accounts, without private keys. You prepare a transaction in BlindLock and approve it on your external hardware wallet. BlindLock itself approves nothing and holds no assets. Encrypted File VaultFiles of any kind, in separate encrypted containers. Secure NotesPlain text and Markdown stored inside the same encrypted carrier. Security KeysOptional fourth factor: plug in a YubiKey, Google Titan, or SoloKey (desktop). BlindLock is not a wallet and not an exchange. It custodies no crypto assets and signs no transactions — that always stays with your own hardware wallet. How it works First the gate, then three keys. First the PIN as the gate — it runs through Argon2id, a memory-hard key derivation over 256 MiB calibrated to about 10 seconds per check, and it does not open the vault. It unseals the hardware-anchored app key inside the security chip, which makes guessing pointless. After that, three things together open the vault: your file, your password, and your device. Optionally, a security key (YubiKey, Google Titan, SoloKey) adds a fourth factor. 1 Choose a carrier Any PNG image on your device. A vacation photo works perfectly. 2 Choose a password, link your device You set your password, and the vault is tied to your device. Optionally add a security key such as a YubiKey, Google Titan, or SoloKey. 3 Add your secrets Passwords, TOTP secrets, notes and wallet entries go into the encrypted carrier. Larger files go into separate encrypted file-vault containers. Lifetime licences Lifetime licences. Limited supply. BlindLock offers exactly 1,000 lifetime licences in three price phases at launch. Pay once and receive a licence with no expiry date or recurring subscription — buy early for the lowest price BlindLock will ever have. After that, it is subscription-only. Phase 1 100 × Lifetime at $49 Pay once for a licence with no expiry date or recurring subscription. The first 100 supporters receive the lowest launch price. Phase 2 350 × Lifetime at $89 Phase availability follows the licence allocation. Phase 3 550 × Lifetime at $109 After licence no. 1,000, lifetime is gone for good — BlindLock then becomes subscription-only. Lowest price in phase one Each phase costs more: $49 → $89 → $109. With licence no. 1,000, lifetime ends for good. Lifetime means no expiry and no subscription. Licence entitlement is verified online when the vault is unlocked. BlindLock may enforce a minimum version for security-critical releases. Routine updates remain optional.

§2 Mixed · 33%

Platforms Engineered for every platform. One device per licence. BlindLock for Windows, macOS and Linux is available now — iOS, iPadOS and Android follow.A Lifetime licence activates one desktop device at a time on your chosen platform.iOS, iPadOS & Android are always free, for everyone. Desktop — Lifetime licence Windows macOS Linux Mobile — always free, for everyone iOSComing Soon AndroidComing Soon Security guides Jump to the topics that matter most. Understand local storage, cloud-free vault architecture, hardware binding and steganography — including the few connections BlindLock genuinely needs. Latest postYour secrets deserve to be invisible Why I built a vault that hides inside your photos — and why it matters more than you think. A 12-minute read on the LastPass breach, quantum harvesting, and the steganographic vault. Read article