The mission

Most security tools ask you to trust a server you've never seen, a company that may not exist in five years, and a cloud account that can be locked, breached, or subpoenaed.

PatronHubDevs builds the alternative: desktop applications where encryption happens on your machine, licenses validate offline, and your data never leaves your control — by design, not by policy.

What we build

  • Encryption tools Notes, files, PDFs, and password vaults — all AES-256 encrypted at rest, with multi-factor authentication and hardware-bound licensing.
  • Licensing infrastructure RSA-4096 offline licensing engine with HWID binding and Cython-compiled validation — the same system powering NoteArmor.
  • Developer utilities 2FA managers, secure notepads, media converters, and unit conversion tools — built for daily professional use.

Engineering principles

Offline-First

No feature requires a network connection. Activation, encryption, validation — all local.

Zero Telemetry

No analytics SDK, no crash reporter, no usage tracking. We physically cannot see what you do.

Encrypt by Default

Nothing is stored in plaintext. Ever. Keys are derived, not stored.

Compiled Core

Security-critical code is Cython-compiled to .pyd binaries before distribution.

The stack

Every product is Python 3.10+ with PySide6 for the GUI layer. The cryptographic core uses PyCA's audited OpenSSL bindings. Licensing validation is compiled to native binaries with Cython. The web backend runs Flask on Gunicorn behind nginx, hardened against OWASP Top 10.

Python 3.12 PySide6 cryptography (PyCA) Cython Flask SQLAlchemy Flask-Login RSA-4096 AES-256 TOTP / RFC 6238 PBKDF2-HMAC-SHA256 HKDF

Common questions

Is this a one-person project?

Yes — PatronHubDevs is an indie studio. That means faster decisions, no corporate bloat, and a developer who actually uses the tools they ship.

What happens if you stop maintaining a product?

You keep working software. Every product is offline-first and HWID-licensed locally. Nothing stops working when a server goes down or a company closes.

Can I trust the encryption?

The cryptographic primitives are PyCA's cryptography library — the same audited OpenSSL bindings used by major enterprises. The cipher choices (AES-256-GCM, PBKDF2-HMAC-SHA256 at 600,000 iterations, HKDF) are NIST-vetted and publicly documented.

Is the source code auditable?

Free products are open source on GitHub. Paid products ship Cython-compiled binaries for the licensing core, with the application logic reviewable. Security-critical implementation decisions are documented.

Want to verify the claims?

Read the code.

Free tools are fully open source. The cryptographic implementation, the key derivation logic, and the architecture decisions are all readable on GitHub — no black boxes.

Browse Source on GitHub

Ready to use it?

Pick a tool.

Free tools are on GitHub now. Paid tools are a one-time purchase — no account required, no cloud, no subscriptions.

See All Products & Pricing