Security

Workspace lock

Synced data is protected by the workspace master password. The app locks a master-password session when it leaves the active AppState, so returning to the app requires another unlock.

Encryption

• All data is encrypted on-device with AES-GCM before sync.
• The master password derives a wrapping key with a deliberately slow key-derivation function.
• Native builds use SecureStore for persisted encrypted keyring state and the license key.
• Cloud sync stays disabled until the workspace has recoverable master-password material.

Zero-knowledge

The sync server stores only encrypted blobs. No plaintext is ever transmitted or stored remotely, and there is no tracking or third-party analytics.

The current mobile app does not claim biometric access control. Local auto-unlock is a device-only mode and cannot open the cloud workspace on a new device.