Hi Product Hunt! I'm David, the solo developer behind BlindLock. I built BlindLock because I was tired of centralized cloud password managers acting like giant, obvious targets for data breaches. I wanted something genuinely local, so I spent my hyperfocus building an alternative based on steganography. BlindLock hides your encrypted vault inside an ordinary PNG photo. But my real focus is the security architecture under the hood: * Hardware-Bound: The keys are tied directly to your physical hardware (TPM 2.0 / Secure Enclave). It intentionally fails in VMs. * Strict Process Isolation: The main app has absolutely zero network libraries. All mandatory update, license, and kill-switch checks route through a heavily restricted helper process. * Your Data Stays Put: Vault contents never leave your machine. There is no central vault database — nothing to breach on my end. One thing I want to be upfront about: "local" describes where your data always stays — on your machine, and nowhere else. It does not describe whether the app ever goes online. BlindLock does connect before unlocking — for the license and mandatory update check, and for the kill switch that lets you revoke a stolen device. Your vault contents are never part of that. As a solo dev with Asperger's, I want to remain 100% independent from investors so I can focus purely on the software. That's why I'm offering a limited run of 1,000 lifetime licenses to fund the development before strictly transitioning to a subscription model. I'd love to hear your thoughts on the isolation architecture, the hardware-binding, or the steganography approach. I'll be here all day to answer your questions!

BlindLock

The invisible password vault, hidden in an ordinary image

The invisible password vault, hidden in an ordinary image