The encryption library BlindHush uses has no native Windows build, so the client runs inside WSL2 (Windows Subsystem for Linux). Windows apps reach it on localhost as usual.
1. Make sure WSL2 is installed
In PowerShell as Administrator, once:
wsl --install -d Ubuntu-24.04
Restart Windows if asked, open Ubuntu once and choose a user name.
2. Install BlindHush
In a normal PowerShell window:
irm https://blindhush.com/install.ps1 | iex
It installs the client inside WSL, configures Claude Code and Codex on Windows (and inside WSL), and adds a Task Scheduler entry, “BlindHush client”, that starts it when you log in.
Check
wsl blindhush status
If Windows apps cannot reach 127.0.0.1:8787, WSL’s localhost forwarding is off: check %UserProfile%\.wslconfig and remove localhostForwarding=false.