Capture a region with Ctrl+Shift+2 — or paste a screenshot — and Blackbar finds IPs, hostnames, API keys, JWTs, hashes and connection strings and destroys the pixels: not a blur you can undo, an opaque burn into a fresh bitmap with every scrap of metadata stripped. Runs entirely on your machine. No account, no telemetry, no network calls.
Consistent session pseudonyms — the same value becomes the same label ([IP-1], [HOST-1], [AWSKEY-1]) across every screenshot in a report.



The AppImage is a single self-contained file — download, mark executable, run. Nothing to install; works on any modern distribution, x86_64 or ARM64.
# AppImage — any distro chmod +x Blackbar_1.1.0_amd64.AppImage ./Blackbar_1.1.0_amd64.AppImage # Debian / Ubuntu 22.04+ sudo apt install ./Blackbar_1.1.0_amd64.deb # ARM64 chmod +x Blackbar_1.1.0_aarch64.AppImage sudo apt install ./Blackbar_1.1.0_arm64.deb
Every release ships a SHA-256 manifest and a GPG signature. Confirm your download is intact and really came from us.
# fetch the manifest, signature and key curl -O https://dl.getblackbar.com/SHASUMS256.txt curl -O https://dl.getblackbar.com/SHASUMS256.txt.asc curl -O https://dl.getblackbar.com/blackbar-signing-key.asc # check the hash, then the signature shasum -a 256 -c SHASUMS256.txt gpg --import blackbar-signing-key.asc gpg --verify SHASUMS256.txt.asc SHASUMS256.txt
Signing key fingerprint 7ABA D5C3 DC9D A715 8635 459C EDAA EF2F C716 4A46 · full details on the Security & Privacy page.