I built a hardware-bound local password vault hidden in a photo
BlindLock is a new security tool that stores encrypted passwords and 2FA secrets inside standard PNG image files using steganography. The system is designed to be hardware-bound and local-only, eliminating the need for a central cloud database.
Why it matters
By removing the central server, the tool mitigates the risk of large-scale data breaches, offering a privacy-focused alternative to traditional cloud-based password managers.
Passwords, notes and 2FA secrets stay encrypted on your device, concealed inside an ordinary-looking PNG file. Opening the vault requires the correct carrier file, your master password and the authorised device. BlindLock never transmits vault contents to BlindLock servers.
BlindLock operates no central customer-vault database. Vault contents leave your device only when you choose — for example by exporting them or saving an encrypted backup to a cloud-synchronised folder.
There is no central collection of customer vaults for attackers to capture in a single provider breach. BlindLock removes that major cloud-manager attack surface, while remaining clear about the limits of local security.
Invisible, not just encrypted Steganography means concealing data inside an ordinary-looking file. Your complete password vault lives encrypted inside a PNG carrier, with no recognisable vault file to advertise its presence.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in