PangoLock
Star on GitHub
Native macOS · Free forever · MIT
PangoLock hides and AES‑256 encrypts any folder on your Mac behind a master password that is never stored. Like a pangolin rolling into an armored ball.
One click to hide. One more to encrypt. Your folder disappears from Finder and every other app.
Two levels of armor
Removes the item from Finder, strips all POSIX permissions (chmod 000) and drops a Spotlight skip marker, so video players, media scanners and search can't reach it. Show restores everything.
Strong against ordinary apps. Not encryption.
Archives the folder, encrypts it with AES‑256‑GCM into a managed .plock blob, decrypts and verifies the result, and only then removes the plaintext. Nothing can find or read it until you unlock.
The real defense. Use it for anything sensitive.
Every feature, no paywall
Unlimited folders with AES‑256‑GCM and an optional per‑folder password.
Gone from Finder, permissions stripped, skipped by Spotlight. One click brings it back.
Master password never stored (PBKDF2, 210k rounds), Touch ID unlock, idle auto‑lock.
Verify‑before‑delete, atomic writes and journaled moves. An interrupted operation never loses data.
Recovery key for a forgotten password, encrypted backups, and export‑everything so data is never stranded.
Logins, cards, notes and licenses, with a strong‑password generator built in.
USB lockers (.pangolocker) and encrypted sharing (.pangoshare) with a password hint.
Opt‑in intruder snapshot after failed unlocks, Dock‑hiding stealth mode, and a panic lock‑and‑hide.
Multi‑pass secure shredder, trace cleaner, and warnings for iCloud, Dropbox, Drive and OneDrive paths.
Security is the product
Typed, used, wiped from memory with memset_s. Never written anywhere.
210,000 iterations over a random 16‑byte salt derive the master key.
Each folder gets its own independent key, or one from its own folder password.
nonce ‖ ciphertext ‖ tag, fresh nonce every time. Tampering fails to open.
The blob is decrypted and checked before the plaintext is ever removed.
Honest positioning: PangoLock protects your data at rest on your Mac. It is not a defense against a fully compromised or root‑owned machine. The full threat model, including what it does not defend against, lives in SECURITY.md.
Apple‑native, end to end
MVVM with CryptoKit, LocalAuthentication, the Keychain, AVFoundation and AppKit. No third‑party dependencies.
Requirements: macOS 13+ · Xcode 16+ · Swift 5.9+
Universal binary for Apple Silicon and Intel.
git clone https://github.com/suriya4code/PangoLock.git
cd PangoLock
xcodebuild build -project PangoLock.xcodeproj -scheme PangoLock \
-configuration Debug -destination 'platform=macOS' \
CODE_SIGNING_ALLOWED=NO -derivedDataPath build
open build/Build/Products/Debug/PangoLock.appxcodebuild test -project PangoLock.xcodeproj -scheme PangoLock \
-destination 'platform=macOS' CODE_SIGNING_ALLOWED=NO -derivedDataPath buildSigning, notarization and release DMGs: docs/RELEASING.md.
No premium tier, no account, no paywall. If PangoLock protects something you care about, a star or a sponsorship keeps it going.