SPECIFICATIONS
Specifications and what's in the box.
| Vault capacity | 32 accounts |
|---|---|
| Per account | Name up to 20 characters; username or email up to 40; password up to 40 |
| Characters supported | A to Z, a to z, 0 to 9, every standard keyboard symbol, and space |
| On-board storage | 4 MB flash, with separate protected areas for the vault and for the device identity |
| Display | 1.8-inch colour TFT screen, 160 × 128 pixels |
| Controls | 3 tactile buttons (NAV, OK, BACK) |
| Processor | 32-bit secure microcontroller, 160 MHz |
| Security hardware | Dedicated cryptographic accelerators (AES, SHA-256, large-number arithmetic for RSA and elliptic curves); hardware digital-signature engine; hardware HMAC engine; one-time-programmable key storage; hardware true-random number generator |
| Encryption | AES-256-GCM vault encryption; PBKDF2-HMAC-SHA256 and HMAC-SHA256 key derivation; ECDH P-256 and HKDF-SHA256 session keys; ECDSA P-256 phone keys; RSA-3072 device identity |
| Master PIN | 6 digits, set by you; simple patterns refused |
| Attempt limits | 3 free tries, then delays of 30 s, 2 min, 10 min and 30 min per try; persists through power loss |
| Auto-lock | 30 seconds, 1, 2 or 5 minutes |
| Password generator | 8 to 40 characters; upper case, lower case, digits and symbols; hardware randomness |
| Wireless | Bluetooth Low Energy 5 with LE Secure Connections; active only while unlocked |
| Internet | None. Wi-Fi is not used |
| Paired phones | Up to 4 |
| Phone app | Android Android 9 at launch; iPhone Planned |
| Port and power | USB-C, 5 V; 1500 mAh Li-Po |
| Dimensions and weight | 72 × 90 × 68 mm, 127 g |
| Enclosure | PLA |
| Operating temperature | 0 to 40 °C |
| Certifications | Not yet certified |
| Warranty | 12 months |
What's in the box
Crypt BlackBox, USB-C cable, quick-start card (including the secret opening sequence), [[recovery card if the recovery kit ships]].
Honest limits
32 accounts per device; passwords longer than 40 characters and non-Latin characters are not supported; a phone app is needed for phone use; if you forget the PIN, the vault cannot be recovered [[change once the recovery kit is confirmed]].
Features and their status.
| Feature | What you get | Status |
|---|---|---|
| Offline encrypted vault | Up to 32 accounts (name, username or email, password) in encrypted storage | Working |
| 6-digit Master PIN | Entered on the device's buttons; weak PINs such as 123456 or 111111 refused | Working |
| Escalating lockout | Wrong PINs trigger delays from 30 seconds up to 30 minutes; survives unplugging | Working |
| Auto-lock | Locks after 30 s, 1, 2 or 5 minutes without use (user choice) | Working |
| Discreet clock mode | Locked device shows only the date and time; opened by a secret button sequence | Working |
| Invisible when locked | Bluetooth switched off for outsiders while locked | Working |
| Built-in password generator | Strong random passwords, 8 to 40 characters, from the hardware random generator, on the device or from the app | Working |
| Alphabetical list with quick jump | Accounts sorted A to Z; a long press jumps to the next letter | Working |
| Phone approval prompts | Screen names the account and action; NO is pre-selected; requests auto-deny after 30 s | Working |
| Secure phone pairing | Add a phone by scanning a one-time QR code on the device, or by comparing a 6-digit code | Working |
| Up to 4 phones | Each phone has its own key; remove any phone from the device's menu | Working |
| Encrypted, authenticated link | Every message between phone and device encrypted and signed, replay-protected | Working |
| Power-loss-safe storage | The vault survives a power cut at any moment, including during a PIN change | Working |
| Secure factory reset | Physically erases the vault and all phone pairings | Working |
| Unique device identity | 3072-bit hardware-held signing key per unit; the app verifies it on every connection | Working in prototype; hardware-sealed in shipping units |
| Genuine-device certificate | Each unit signed at the factory; the app shows "Genuine Crypt BlackBox" | Shipping units |
| Vault sealed to the device | Vault keys tied to a secret inside the device's one-time-programmable security memory | Shipping units |
| Verified boot and encrypted storage | Only signed Crypt firmware runs; stored data encrypted at chip level; debug access locked | Shipping units |
| 1.8-inch colour screen | Clear account names, prompts and QR codes | In development |
| Android app | Pair, browse, add, generate, approve-on-device | In development |
| Backup and recovery kit | Recovery phrase plus encrypted backup to restore onto a new BlackBox | Planned |
| iPhone app | iOS support | Planned |
| Signed firmware updates | Security updates you can install safely | Planned |
Working: built and tested in the current prototype. Shipping units: switched on during manufacturing, part of every unit sold. In development: being built now, promised for launch. Planned: intended, not yet promised.