Overview

PassedBox is a privacy-first, zero-knowledge encrypted file system that operates entirely locally. It replaces traditional cloud-based legacy systems with a secure, portable .pbx vault file that can be stored on any drive—USB, NAS, or local disk.

Built with military-grade AES-256-GCM encryption and Argon2id key derivation, PassedBox ensures that your files are completely inaccessible to anyone without the master password or the requisite cryptographic shares. It combines the familiarity of a standard file explorer with advanced cryptographic features like Shamir's Secret Sharing to eliminate single points of failure.

Core Features

  • Zero-Knowledge Architecture: No accounts, no telemetry, and no cloud sync. The software operates entirely locally, meaning PassedBox never sees your data or keys.
  • Shamir's Secret Sharing: Master keys are split into multiple cryptographic shares (e.g., any 2 of 3 shares can reconstruct the key), enabling secure backup and recovery without relying on a single password.
  • Hardware-Locked Passwords: Optionally tie a vault's decryption capability to a specific hard drive's serial number, rendering the vault useless if copied to another device.
  • Built-in Media & Document Viewers: Preview images, watch videos, listen to audio, and read PDFs directly within the encrypted vault. Decryption happens purely in memory.
  • Monaco Code Editor: Edit text files and code securely inside the vault without ever exporting them to the host os.

The Dead Man's Switch

While PassedBox is fundamentally a local encryption tool, it offers an optional, privacy-preserving "Dead Man's Switch" for digital legacy planning.

Instead of holding your files on a server, PassedBox stores only an encrypted key share remotely. This share is released to trusted contacts only if a predefined trigger is met:

  • Credit Expiration: The share is released when prepaid credits run out, encouraging active renewal to keep the share held.
  • Keep-Alive Check-In: Users must periodically confirm activity. If reminders are missed, the share is released.

Once released, beneficiaries who possess the local vault file and another necessary key share can decrypt the vault without needing the original master password.

Pricing

The core PassedBox application is free to download and use with no account required. Optional features like the Dead Man's Switch may involve separate pricing based on credits or subscription models. Visit their website for complete details.