How-to
Lock the vault
Encrypt everything on-device with a password only you know.
- 1
Settings → Device lock & backup.
- 2
Set a device password (min 8 chars) — derives the AES-GCM key for the on-device vault.
- 3
Set an auto-lock timer for idle sessions.
- 4
Generate a recovery key and store it in your password manager or HSM.
Related