Skip to content
Change language: EN
My learningAdd to Chrome
Track progress 0%
Next

Lesson 12 4 min

Lock it with the secret vault

Add a passphrase that protects local credentials and memory. Only you can unlock them, and nobody can recover them.

Turn it on

Credentials stored in this browser are always encrypted, but by default the key sits on the same device. The vault adds a passphrase: the key is made from it and saved nowhere.

Open Settings › Preferences › Local secret protection, type a Passphrase of at least 8 characters, repeat it in Confirm passphrase and click Enable. Your local credentials are re-encrypted, and your memory is encrypted in the background.

Settings, Preferences, Local secret protection card with protection on: the explanation and the no-recovery warning, a Memory box saying conversations and facts are encrypted with the passphrase too (All memory is encrypted.), the Change passphrase and Disable protection sections, and at the bottom the status Unlocked for this session with a Lock now button.Settings, Preferences, Local secret protection card with protection on: the explanation and the no-recovery warning, a Memory box saying conversations and facts are encrypted with the passphrase too (All memory is encrypted.), the Change passphrase and Disable protection sections, and at the bottom the status Unlocked for this session with a Lock now button.
No recovery if you forget the passphrase

Locked and unlocked

The vault locks every time the app reloads. While it’s locked, credentials ask for the passphrase, memory can’t be read, searched or added to, and new local credentials can’t be saved. Type your passphrase and click Unlock for this session, or Lock now to lock early. While protection is on, titles stay readable so lists still work, and memory search looks at titles only.

What it covers

Every credential in a local workspace, local credentials when you’re signed in, and your conversations and facts. Cloud credentials are not covered: they are encrypted on the AWFlow server instead. Change passphrase and Disable protection are on the same card when it’s unlocked.

Key takeaways

  1. Settings › Preferences › Local secret protection turns it on.
  2. It covers local credentials and memory, not cloud credentials.
  3. Forget the passphrase and the protected secrets can't be decrypted by anyone.