Desktop documentation

Install or run portable

Download the package matching the Windows architecture.
Extract the entire ZIP before starting it. Do not run the executable from inside the ZIP viewer.
For portable use, start LockBox.exe. Keep all extracted files together.
For Explorer integration, use the installer or open Installed settings in LockBox.
Windows SmartScreen can show an unknown-publisher prompt for a newly distributed build. Verify the download source before continuing.

Portable mode is suitable for removable drives. Installed mode stores the app in the current user profile and registers only per-user HKCU integration.

Create an encrypted container

Select the source folder and an output .lbx path on a different safe location.
Enter and confirm the master password.
Choose the number of encryption layers allowed by the current edition.
Select an algorithm and a unique key for every layer. Save those keys before continuing.
Review compression, padding, splitting and destruction-password options.
Read the summary and start. Keep LockBox open until the completion message appears.

The master password and all layer keys are required in their original order. Losing any one of them makes normal recovery impossible.

Open and extract

Select the base .lbx file. For a split container, keep every numbered part beside it.
Select an empty or dedicated output folder.
Enter the master password so LockBox can read authenticated metadata.
Enter each layer key in the order shown by the metadata screen.
Start extraction and wait for the success message before using or moving the result.

An authentication failure normally means a wrong password, wrong key, wrong key order, missing split part, or modified container. LockBox does not return unauthenticated plaintext.

Container browser

Pro and Max editions can decrypt a verified temporary browsing session, display the archive tree and extract selected files or folders. Use Extract selected for a small restore and Extract all for a complete restore. Temporary browser data is removed when its session ends; do not treat it as a backup.

Scheduler

Open Scheduler and create a task using the same validated create workflow.
Choose a future start date and one of the supported repeat frequencies.
Keep source and output locations available under the same paths.
Use Save as to export scheduled tasks to an encrypted .lbxjobs package.
Review last-success, last-failure and skipped-run status regularly.

Desktop scheduled work requires the LockBox scheduler process to be running. Windows sleep, shutdown, unavailable drives and locked network shares can postpone or fail a run.

Advanced container options

Option	Purpose and warning
Compression	Reduces compressible data before encryption; already-compressed media may not shrink.
Cryptographic padding	Adds random encrypted bytes to obscure the exact content size; it increases output size.
Split container	Creates transport-sized parts. Every part is required for restore.
Delete source	Deletes the selected source only after a successful output copy. Verify backups before enabling it.
Destruction password	Entering this special password during open intentionally destroys authenticated container material. It is irreversible.

Offline activation

Open the license dialog and copy the displayed device ID.
Obtain a signed Pro or Max license generated for that exact ID.
Paste the complete key and select Activate.
Confirm that the expected edition is shown after restart.

Activation is verified locally with a public signature key. A license copied from another device is rejected. Reinstalling Windows or materially changing the device identity can require a newly issued license.

Recovery and safety checklist

Keep at least one tested copy of the original data until a restore has succeeded.
Store passwords and layer keys separately from the container.
Do not edit, concatenate or rename only some split-container parts.
Do not interrupt power or remove the destination drive during final output copying.
Use a new destination for recovery when the existing folder contains valuable files.
Never test a destruction password against the only copy of a container.

Update and uninstall

For portable mode, close LockBox, extract the new package to a new folder and retain the old folder until the new build opens a test container. For installed mode, run the new installer. Use Uninstall integration to remove file associations, context-menu commands and shortcuts. Existing .lbx containers are user data and are not deleted by the uninstaller.

Troubleshooting

Double-click does not open .lbx

Run the installer again or re-enable Installed settings, then restart Explorer if its association cache has not refreshed.

The output drive runs out of space

Allow space for staging, padding and the final container. Compression savings are not guaranteed.

A scheduled run is skipped

Check whether an earlier instance is still running and whether both source and destination are available.

Extraction reports authentication failure

Verify the master password, every layer key, key order and all split parts against a known-good backup.