I Built a Windows Security Suite in Python That Locks Down Your PC, Vaults Your Passwords, and Photographs Intruders

Someone kept snooping on my laptop while I was away. So I did what any dev would do — I overengineered a solution.

Meet ATLOCK v4 — a free, open-source Windows security suite built entirely in Python. One app, five jobs: lock your screen, guard your files at the OS level, vault your passwords with real encryption, and — my favorite part — catch whoever's trying to get in.

What it actually does

ATLOCK isn't a toy screen-locker. It's five tools stitched into one dark, gold-accented desktop app:

🔒 Lockdown System-level screen lock with a countdown timer and OS-level hardening. No alt-tabbing your way out.

🛡️ File Guard This is the part I'm proudest of — it uses Windows NTFS ACL permissions to lock files, not some app-level "hide the file" trick. If ATLOCK guards a file, Windows itself refuses to let anyone read it without unlocking first.

🔑 Password Vault Encrypted storage for your emails, UPI PINs, whatever you don't want lying around in plaintext. Under the hood:

Fernet (AES-128-CBC + HMAC) encryption
PBKDF2-HMAC-SHA256 with 200,000 iterations and a random salt for the master password
No plaintext, anywhere, ever

📸 Intruder Ops Get the password wrong once, ATLOCK silently snaps a photo. Get it wrong three or four times, it records a 10-second video and sounds an alarm — all saved straight to your Pictures/Videos folder. Every failed attempt is masked before it's ever logged, so even ATLOCK itself never stores what was actually typed.

⚙️ Settings Toggle camera capture, sound alerts, and pick your gallery folder.

Why I rebuilt it (v4 changelog)

The earlier build had a password vault that was "encrypted" with XOR — cute, but not actual cryptography. v4 fixes that and more:

Vault moved from XOR to real Fernet AES + HMAC
Master password now goes through PBKDF2-HMAC-SHA256 (200k iterations, random salt) instead of a weak hash
Intruder attempt logging is masked before it touches disk
Alert credentials are encrypted with a machine-bound key
Toast notifications no longer build PowerShell strings via injection-prone concatenation

Built with customtkinter for the UI, opencv-python for the camera, and cryptography for everything that touches your secrets.
grab the packaged build straight from the site:
👉 https://akhouri-anmol-kumar.github.io/Akhouri-systems

It's free. It's open. If you've ever wanted to know exactly who's been trying to get into your laptop, this is that tool.

⭐ If this is useful, a star on the repo genuinely helps more people find it. Bug reports, feature requests, and PRs are all welcome — drop them in the comments or open an issue.

Built by Akhouri Anmol Kumar under Akhouri Systems.

"We Build What Others Forgot To Fix"