Blackbar finds IPs, hostnames, API keys, JWTs, hashes and connection strings in a screenshot and destroys the pixels — not a blur you can undo, an opaque burn into a fresh bitmap with every scrap of metadata stripped. Runs entirely on your machine. No account, no telemetry, no network calls.
Consistent session pseudonyms — the same value becomes the same label ([IP-1], [HOST-1], [AWSKEY-1]) across every screenshot in a report.



The AppImage is a single self-contained file — download, mark executable, run. Nothing to install; works on any modern x86_64 distribution.
# AppImage — any distro chmod +x Blackbar_1.0.0_amd64.AppImage ./Blackbar_1.0.0_amd64.AppImage # Debian / Ubuntu 22.04+ sudo apt install ./Blackbar_1.0.0_amd64.deb
Every release ships a SHA-256 manifest and a GPG signature. Confirm your download is intact and really came from us.
# fetch the manifest, signature and key curl -O https://dl.getblackbar.com/SHASUMS256.txt curl -O https://dl.getblackbar.com/SHASUMS256.txt.asc curl -O https://dl.getblackbar.com/blackbar-signing-key.asc # check the hash, then the signature shasum -a 256 -c SHASUMS256.txt gpg --import blackbar-signing-key.asc gpg --verify SHASUMS256.txt.asc SHASUMS256.txt
Signing key fingerprint 69DF BA36 B149 7CE8 45A0 0091 4779 4781 CF58 7E79 · full details on the Security & Privacy page.