Frequently asked questions.
What happens if someone steals my BlackBox?
They see a clock. To open it they need the secret sequence and your 6-digit PIN, and wrong guesses trigger delays up to 30 minutes each, so guessing would take decades. Reading the memory chip directly doesn't help: the vault only decrypts inside the device that created it.
What if I forget my PIN?
Nobody can recover it, including us; that is what makes it safe. You can factory-reset the BlackBox and start again, which erases the vault. [[If the recovery kit ships: your recovery phrase lets you restore an encrypted backup.]]
Does it ever connect to the internet?
No. It has no Wi-Fi connection, no cloud and no account. It talks only to phones you have paired, over Bluetooth, and only while it is unlocked.
Can Crypt see my passwords?
No. There is no server holding them, no telemetry and no master key.
Is Bluetooth safe for passwords?
Crypt BlackBox uses two layers. Bluetooth's own Secure Connections pairing, confirmed with a code shown on the device, and on top of that its own encryption with fresh keys every session and a signature check on every message.
What if my phone gets hacked?
A hacked phone can only ask for a password; the BlackBox shows you the exact request and waits for your YES. With the default setting a paired phone can see your list of account names without a press; switch to "Approve all" in Security if you want a press for that too.
Can someone else pair their phone with my BlackBox?
Only if the BlackBox is unlocked in front of them and you press YES on it. New phones also need a one-time QR code from your screen or a matching 6-digit code.
Do I need the phone app?
No. You can view, add, edit and generate passwords on the device. The app makes everyday lookups faster.
Does it work with iPhone?
[[Android at launch; iPhone planned / not planned.]]
How many passwords can it hold?
32 accounts, each with a name, a username or email, and a password up to 40 characters.
Can it type passwords into my computer?
Not at launch. Use the phone app to view a password, or read it on the device screen.
What if the power fails while it's saving?
Nothing is lost. The BlackBox keeps two encrypted copies and always writes the new one before giving up the old one.
Can my family share one?
Up to four phones can pair with one BlackBox. Everyone uses the same vault and the same PIN, so share it only with people you trust.
Why a 6-digit PIN and not a long password?
You type it on three buttons, so it needs to be short. It stays strong because guesses are limited on the device and because the stored data can't be attacked anywhere else.
What is the secret button sequence for?
Discretion: anyone glancing at it sees a clock. It is not the main lock; your PIN is.
How is this different from a crypto hardware wallet?
Same idea, applied to passwords: keys and secrets stay inside a dedicated offline device, and you confirm actions physically.
Will it get updates?
Signed firmware updates are planned, so only genuine Crypt firmware can be installed.
Has it been audited?
An independent security review is planned before shipping.
When will it ship, and can I cancel?
Estimated Quarter 2 2027. You can cancel for a full refund any time before your unit ships.
What does this website collect?
Only what you enter to order or be notified, and what the payment provider needs. No advertising trackers.