I built a hardware-bound local password vault hidden in a photo

sejje

I like this idea. What's your security/cryptography background?

aleken

AI webpage?

jqpabc123

I built something similar years ago to use for a password vault --- data hidden locally in plain sight. Instead of steganography, I simply appended the encrypted data/payload to the end of a JPG file in my photo library. The file opens and displays normally. Part of the photo/carrier file is used as salt for decryption. The part that is used changes randomly based on the last modification time/attribute of the file. The file creation time (displayed in a normal directory list) is maintained/doesn't change with payload modifications. Encryption is also tied to disk parameters so a simple file copy makes the data unreadable. The access utility can be used to move the file and re-encrypt the data on a different disk. A labeled section of the payload data/vault holds TOTP keys so the access utility can also function as a 2FA authenticator.

nik282000

Sloppy slop. A strong password and strong encryption is enough. The presence of 'blindlock' on a device is a clear indication that one of your files is a wallet. Phoning home to do a licence check is EVERY time you use it is obnoxious and defeats the purpose of having local software.

ptaffs

I recently learned Steganography, as correctly named in the article, is not the same as Stenography.

poppafuze

no source code == no security.

ubertaco

To quote a comment I saw either here on HN or on Lobsters (can't remember which): >A vibe-coded password manager? Sign me up!

mpalmer

The question is, have you done something so unique and challenging that your website itself wouldn't serve as a prompt to rebuild the whole thing? Would I spend less than $49 doing so?

pshirshov

> password vault I see "pricing" but can't spot "source code", perhaps you forgot to add a link?