Observed arrival · 2026-11-09
BoxCrypt: a local-only computer safe
BoxCrypt describes a NixOS-based system for storing encrypted files on a computer accessed over a local network, with no route to the internet.
- For
- People storing credentials and family records offline
- Worth noticing
- It recommends TPM 2.0; without one, the device cannot prove that its system has not changed.
Field notes
The design specification says the system is read-only, checks blocks with dm-verity, and stores each secret as an age file; it also describes encrypted backups on internal and USB drives, restorable on different hardware. Its security boundary is unusually explicit: the page says a TPM is recommended, no secure element or tamper detection is present, and an attacker with kernel access could alter the firewall until restart. The extracted homepage does not establish release status.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue