Your passwords. Offline. Under your thumb.
Hackers can't reach what isn't online. Crypt BlackBox is a pocket-sized vault that never touches the internet. It keeps your passwords on a device in your hand, disguised as a desk clock.
Passwords are only as safe as the place they live.
Most passwords live on servers you don't control, in browsers that sync everywhere, or in a notebook in a drawer. Every one of those can be reached by someone who isn't you. Crypt BlackBox keeps them in one place: a sealed, offline device you hold.
A vault, not an app.
A small black box with a 1.8-inch colour screen and three buttons. It stores up to 32 accounts in encrypted memory, generates strong passwords with true hardware randomness, and works on its own or with your phone.
Locked with your PIN and the device itself.
Authenticated AES-256 encryption with keys derived from your PIN and sealed by the device's own security hardware. After 3 wrong tries the device makes you wait, and the waits grow to 30 minutes per try.
Trying every PIN would take about 57 years.
Never online. Ever.
No Wi-Fi, no cloud, no account. Your vault exists in one place: the device in your hand.
Up to 32 accounts, sorted A to Z.
Each account holds a name, a username or email and a password up to 40 characters. A long press jumps to the next letter, and the built-in generator makes strong passwords of 8 to 40 characters.
Nothing leaves without your press.
When your phone asks for a password, the BlackBox shows exactly which account is requested. NO is selected until you choose YES. Walk away and it answers no after 30 seconds. Even a compromised phone can only ask for a password; it cannot take one.
Looks like a clock. Opens like a vault.
Locked, the BlackBox shows the date and time and stays invisible over Bluetooth. Only a secret button sequence and your PIN open it, and it locks itself again when you put it down.
The password vault that never goes online.
How a password leaves the BlackBox.
Even a compromised phone can only ask for a password; it cannot take one.
Seven layers between your passwords and everyone else.
- 01
It never goes online.
No Wi-Fi, no cloud, no account to hack. Your vault lives only in the device.
No Wi-Fi and no internet connection. Bluetooth Low Energy only, and only while unlocked.
- 02
Encrypted with your PIN and the device itself.
Everything stored is encrypted. The key comes from your 6-digit PIN combined with a secret sealed inside the BlackBox's own security hardware, so a copy of its memory is useless anywhere else.
AES-256-GCM vault encryption · PBKDF2-HMAC-SHA256 from your PIN · key sealed to one-time-programmable security memory in shipping units.
- 03
Guessing your PIN takes decades.
After 3 wrong tries the device makes you wait, and the waits grow to 30 minutes per try. Unplugging it doesn't reset the count.
3 free tries, then 30 s, 2 min, 10 min, 30 min per try · counted before the PIN is checked, so cutting power can't erase a guess.
- 04
Nothing leaves without your press.
When your phone asks for a password, the BlackBox screen shows exactly which account, with NO pre-selected. You choose YES and press OK. Ignore it and it says no after 30 seconds.
Default NO · auto-deny after 30 s · a press that started before the prompt appeared is ignored.
- 05
Only your phones can connect.
Each phone you add gets its own secret key, kept in the phone's secure hardware. You add phones by scanning a one-time QR code on the BlackBox, and you can remove any of them from the device.
Own ECDSA P-256 key per phone in Android Keystore · single-use QR valid 2 minutes · up to 4 phones.
- 06
Fakes are caught.
Every BlackBox has a unique identity key that can never be read out, not even by its own software. The app checks it at every connection, so a look-alike device cannot trick your phone.
Per-unit RSA-3072 identity key used only through a hardware digital-signature engine · factory certificate in shipping units.
- 07
Invisible when locked.
A locked BlackBox shows a clock and is not visible over Bluetooth. It locks itself after a time you choose and wipes passwords from its working memory.
Bluetooth off for outsiders while locked · auto-lock after 30 s, 1, 2 or 5 min · keys wiped from working memory on lock.
What Crypt deliberately does not do: no cloud copy, no telemetry, no master key, no backdoor. The company cannot see, reset or recover your PIN or your passwords. Read the full security design →
Pair in seconds. Only your phones get in.
Scan a one-time QR code on the BlackBox, press YES, done. Each phone gets its own key, stored in the phone's secure hardware. Up to four phones; remove any of them from the device.
No camera handy? Compare a 6-digit code shown on both screens instead.
Small box. Dedicated security hardware.
Everything that protects your passwords happens inside the device, on hardware built for the job.
- DISPLAY1.8-inch colour screenShows the exact account and action before anything leaves the vault.
- CONTROLSThree tactile switchesNAV, OK and BACK. Every approval is a physical press.
- ENCLOSURELooks like a desk clockWhen locked it shows only the time, and is invisible over Bluetooth to outsiders.
- BATTERY1500 mAh Li-Po cellBuilt into the base and recharged over USB-C.
- PROCESSORSecure microcontroller32-bit, 160 MHz. Dedicated AES, SHA-256, RSA and elliptic-curve engines, a true random generator and sealed key storage.
- WIRELESSBluetooth LE 5Switched on only while unlocked. No Wi-Fi, no internet.
- MEMORYEncrypted storage4 MB with separate protected areas for the vault and the device identity.
- POWERUSB-C, 5 VCharges the battery.
- 32
- accounts
- 40
- characters per password
- 6
- digit PIN, lockouts up to 30 min
- AES-256
- vault encryption
- 4
- phones, each with its own key
- 8–40
- character generated passwords
- 30 s
- until an unanswered request says no
- 0
- internet connections
Compare it with what you use today.
Safer on 5 of 6 safety questions. A cloud password manager is easier on 2 of 5 everyday ones.
marks the stronger answer in each row. Crypt BlackBox trades some convenience for keeping the vault offline and in your hand.
See all four side by side
| Crypt BlackBox | Cloud password manager | Browser-saved passwords | Notebook or spreadsheet | |
|---|---|---|---|---|
| Where passwords live | In the device, offline | Provider's servers, synced to your devices | Browser profile, often synced to an account | Paper or an unencrypted file |
| Reachable over the internet | No | Yes | Yes, if synced | File: often yes |
| A provider breach can expose your vault | No provider holds it | Encrypted copies are exposed | Depends on account security | Not applicable |
| Physical press needed to reveal a password | Yes, every time | No | No | No |
| Malware on a phone or laptop can read the whole vault | No; it can only ask, and you see the request | Possible once unlocked | Possible | Yes |
| Encryption | AES-256-GCM, keys sealed to the device | Usually strong | Varies | None |
| Capacity | 32 accounts | Effectively unlimited | Unlimited | Unlimited |
| Autofill and sync across devices | No autofill; up to 4 phones | Yes | Yes | No |
| Works with no internet | Always | Partly (cached) | Partly | Yes |
| Lost or broken | Recovery kit planned | Recover via account | Recover via account | Gone |
| Ongoing cost | None after purchase | Subscription | Free | Free |
The vault works. Here's what's left.
1 done · 2 in progress · 2 to go
We publish progress updates to every pre-order customer.
- Working prototype, security firmware completeDone
- Android appIn progress
- Colour-screen hardwareIn progress
- Production security and manufacturingNext
- Ships Quarter 2 2027Estimated
Frequently asked questions
What happens if someone steals my BlackBox?
They see a clock. To open it they need the secret sequence and your 6-digit PIN, and wrong guesses trigger delays up to 30 minutes each, so guessing would take decades. Reading the memory chip directly doesn't help: the vault only decrypts inside the device that created it.
What if I forget my PIN?
Nobody can recover it, including us; that is what makes it safe. You can factory-reset the BlackBox and start again, which erases the vault. [[If the recovery kit ships: your recovery phrase lets you restore an encrypted backup.]]
Does it ever connect to the internet?
No. It has no Wi-Fi connection, no cloud and no account. It talks only to phones you have paired, over Bluetooth, and only while it is unlocked.
Can Crypt see my passwords?
No. There is no server holding them, no telemetry and no master key.
Is Bluetooth safe for passwords?
Crypt BlackBox uses two layers. Bluetooth's own Secure Connections pairing, confirmed with a code shown on the device, and on top of that its own encryption with fresh keys every session and a signature check on every message.
What if my phone gets hacked?
A hacked phone can only ask for a password; the BlackBox shows you the exact request and waits for your YES. With the default setting a paired phone can see your list of account names without a press; switch to "Approve all" in Security if you want a press for that too.
Keep your passwords where they belong.
- SHIPS
- Quarter 2 2027
Not ready? Get notified at launch.
- Works fully offline, no account
- Every password needs your press
- One-time price, no subscription