I built a hardware-bound local password vault hidden in a photo

BlindLock stores a complete password vault encrypted inside an ordinary PNG file, requiring the specific carrier image, the user’s master password and the authorized device to unlock; an optional security key adds a fourth factor. The vault uses 256-bit authenticated encryption plus NIST-approved post-quantum algorithms (ML-KEM-1024, ML-DSA-87) and never transmits data to BlindLock servers. Lifetime licences are limited to 1,000 copies, after which the product will shift to a subscription model.