Steganographic Vault App Conceals Credentials Inside Ordinary Image Files
BlindLock is a local-only security tool that stores passwords, notes, and two-factor authentication data inside a seemingly normal PNG image, using steganography and 256-bit authenticated encryption with post-quantum components. The application binds the vault to the user's device via TPM 2.0, Secure Enclave, or StrongBox, and requires the correct image file, master password, and authorized hardware to unlock. Its developer created the app after the 2022 LastPass vault breach, and it is currently offered as a lifetime license for $49 with no cloud storage or central server involved.
BlindLock's developer, David Domingo, built the tool specifically in response to the December 2022 LastPass breach, where attackers exfiltrated encrypted customer vault backups. He argues that any cloud-hosted password manager inherits risks from employee access, infrastructure flaws, and legal demands, making centralized vaults far more attractive targets than individual devices. The app's design reflects that philosophy by eliminating any server-side database entirely.
The software seals its vault key to platform security hardware—TPM 2.0 on Windows, Secure Enclave on Apple devices, and StrongBox on Android. Beyond passwords, it handles Markdown notes, a 2FA authenticator, and arbitrary file storage, with larger files placed in separate Argon2id-hardened containers similar to VeraCrypt's hidden volumes. Users can optionally add a hardware security key as a fourth authentication factor.
This tool could shift how privacy-conscious individuals think about credential storage, offering a model where no third party holds the keys to sensitive data. Those who have already experienced cloud vault compromises may find the local-only, steganographic approach appealing, though it places greater responsibility on users to manage backups and recovery phrases. The $49 lifetime pricing and hardware binding could also influence how competing password managers position their own security and pricing strategies.