SECURITY Signal 51
BlindLock launches local-only password manager that hides encrypted vaults inside PNG image files
↗
BlindLock is a new local-only password manager and secure vault that stores encrypted data inside ordinary PNG image files, requiring the carrier file, a master password, and an authorized device to access.
By eliminating cloud storage and central vault servers, BlindLock removes the attack surface that enabled the LastPass breach. The device-binding requirement means a stolen PNG file alone cannot unlock the vault, adding a physical factor beyond encryption.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
BlindLock uses 256-bit authenticated encryption with NIST post-quantum components and binds vaults to device security chips (TPM 2.0, Secure Enclave, or StrongBox).
The application bundles a password manager, Markdown secure notes, a 2FA authenticator, an encrypted file vault with hidden volumes, and optional hardware security key support.
Early adopter pricing is tiered: the first 100 licenses cost $49, the next 350 cost $89, and the final 550 cost $109, after which BlindLock becomes subscription-only.
THE CLUSTER