BLACKBOX is an offline, security-first hub for developers and creators. Featuring an encrypted secrets manager, private journal, 2FA authenticator, and comprehensive privacy tools, BLACKBOX ensures 100% on-device processing and zero cloud exposure.
- Secrets Manager: Securely store API keys, tokens, and credentials with a master PIN-locked vault.
- Encrypted Journal: Maintain secure, timestamped logs with AES-256-GCM entry-level encryption.
- TOTP Authenticator: Full RFC 6238-compliant 2FA generator with Base32 decoding.
- Privacy Toolkit: Integrated URL tracker stripping, browser fingerprinting analysis, and phishing detection.
- Hardened Security: Features
FLAG_SECURE(blocks screen recording), biometric unlock, shake-to-lock, and a calculator decoy mode.
BLACKBOX is engineered for high-assurance privacy:
- Encryption: AES-256-GCM using Web Crypto API.
- Key Derivation: PBKDF2-SHA256 with 150,000 iterations.
- Storage: 100% localized in
localStorage(encrypted blobs); no network traffic or cloud sync. - Native Integration: Android-native implementation via Capacitor for biometric security and overlay protection.
# Clone the repository
git clone https://github.com/alpha-1-design/Blackbox.git
cd Blackbox
# Install dependencies
npm install
# Initialize Capacitor
npx cap init BLACKBOX com.blackbox.app --web-dir www
# Add Android platform and build
npx cap add android
npx cap sync android
cd android && ./gradlew assembleDebugBLACKBOX assumes a "Zero-Trust" posture:
- Fresh Derivation: The master key is derived directly from your PIN in memory and destroyed upon session termination.
- No Persistence of Secrets: Your PIN is never stored; only an encrypted verifier is used to validate identity.
- Tamper Detection: AES-256-GCM mode provides authenticated encryption, ensuring data has not been modified by external processes.
We are committed to building the most robust privacy toolset in the ecosystem. Please see our Contributing Guide and Code of Conduct.
Distributed under the MIT License. Built for the Alpha-1 Ecosystem.