New in version 2.0.5
Login fixed for users updating from older versions (legacy PINs migrate automatically), fingerprint unlock now works after an app restart, and updated APKs no longer show stale content on first launch. Lock screen got smoother animations.
BLACKBOX is a clean, lightweight, offline-first security hub built for developers, creators, and anyone who values digital privacy. All data is encrypted with AES-256-GCM and stored on your device — nothing ever leaves without your explicit consent.
Core Modules:
- Secrets Manager: Store API keys, passwords, and tokens in categorized, encrypted vaults. Tap-to-reveal and one-tap copy.
- Encrypted Journal: Timestamped entries with category tags, all encrypted locally with your master PIN.
- 2FA / Authenticator: TOTP code generator with live countdown and manual secret entry. No cloud sync, no accounts needed.
- Privacy Tools: Permission audit, tracker URL cleaner, browser fingerprint viewer, and malicious URL scanner.
- Settings: Master PIN change, auto-lock timer, biometric unlock, panic mode with decoy calculator, screenshot blocking.
Security Features:
- AES-256-GCM encryption via Web Crypto API
- PBKDF2-SHA256 key derivation with 150,000 iterations
- FLAG_SECURE screenshot and screen recording blocking
- Biometric unlock (fingerprint / face) via Android BiometricPrompt
- Panic mode: calculator decoy triggered by PIN prefix
- Auto-lock on inactivity or app switch
- 100% offline — no network calls, no analytics, no tracking
BLACKBOX is free, open-source, and built with Capacitor for Android. No proprietary dependencies. No cloud. No compromises.
Versions
Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.
Download F-Droid
-
This version requires Android 5.1 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Permissions
-
run foreground service
Allows the app to make use of foreground services.
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
show notifications
Allows the app to show notifications
-
This app can appear on top of other apps
This app can appear on top of other apps or other parts of the screen. This may interfere with normal app usage and change the way that other apps appear.
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
use fingerprint hardware
Allows the app to use fingerprint hardware for authentication
-
control vibration
Allows the app to control the vibrator.
-
prevent phone from sleeping
Allows the app to prevent the phone from going to sleep.
-
com.blackbox.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
1.3 MiB
PGP Signature
|
Build Log
-
This version requires Android 5.1 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Permissions
-
run foreground service
Allows the app to make use of foreground services.
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
show notifications
Allows the app to show notifications
-
This app can appear on top of other apps
This app can appear on top of other apps or other parts of the screen. This may interfere with normal app usage and change the way that other apps appear.
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
use fingerprint hardware
Allows the app to use fingerprint hardware for authentication
-
control vibration
Allows the app to control the vibrator.
-
prevent phone from sleeping
Allows the app to prevent the phone from going to sleep.
-
com.blackbox.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
1.2 MiB
PGP Signature
|
Build Log
-
This version requires Android 5.1 or newer.
It is built and signed by the original developer, and guaranteed to correspond to this source tarball.
Permissions
-
run foreground service
Allows the app to make use of foreground services.
-
have full network access
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
-
show notifications
Allows the app to show notifications
-
This app can appear on top of other apps
This app can appear on top of other apps or other parts of the screen. This may interfere with normal app usage and change the way that other apps appear.
-
use biometric hardware
Allows the app to use biometric hardware for authentication
-
use fingerprint hardware
Allows the app to use fingerprint hardware for authentication
-
control vibration
Allows the app to control the vibrator.
-
prevent phone from sleeping
Allows the app to prevent the phone from going to sleep.
-
com.blackbox.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK
1.1 MiB
PGP Signature
|
Build Log
