## Open

Drop your vault (.keypng) or a password image (PNG)
click to browse — or paste (Ctrl/⌘+V)
Unlock
🖼 This vault also needs its key image:

## New vault

Pick a strong master passphrase — it is the real lock. If you forget it, nothing can recover your keys.

also require a key image (two-factor: passphrase + a picture you keep)
● unsaved changes
Site / label Username (optional) Password
Notes (optional) Picture (optional — becomes this key's preview, and its cover when you export a password image)
Drop or click any image — plain pictures work; we weave the secret in when you export

Site | Username | Password |
--- | --- | --- | ---

No keys yet — ＋ Add key, or 📥 import password images.

## Pick a cover image

Drop an image here or click to browse

## What this is

A pseudo password manager built from two of the shelf's tools: Key Cutter cuts strong random keys, and Hush hides secrets inside images. Each saved key can live as its own password image — an ordinary-looking PNG with the encrypted secret woven into its pixels (one image = one secret, openable in Hush too). The vault file (`.keypng`) is the dashboard: open it, enter your master passphrase (plus your key image, if you set one), and your keys appear in a grid — show, copy, add, edit, delete, save.

## Honest limits — read this once

- This is not Bitwarden. No autofill, no sync, no breach alerts. It's a careful local keyring for people who like their secrets in files they control.
- Forgotten passphrase = keys gone forever. There is no reset, no recovery, by design. Same if you lose the vault file and images — keep backups.
- Password images must travel as files. Chat apps and photo services recompress images, which destroys the hidden bits. Send them as file attachments or in a zip — never "as a photo". Lossless PNG only.
- The picture is camouflage, not the lock. Anyone can extract the encrypted bytes from the image; your passphrase is what actually protects them. Make it strong.
- A key image only counts as a second factor if it's kept apart from the vault file (different folder, different device, a photo in your camera roll).
- The vault auto-locks after 5 minutes idle. Unsaved changes prompt before you leave.

Part of K-Engine Local Tools — free, privacy-respecting utilities that run on your device. This page is served with a security policy that blocks all network access (check DevTools → Network); your keys can't leave even in principle. Beta & unlisted — tell Cody what breaks. MIT licensed · download the source.