Locking, signing out, and device access - Tuck

These actions are intentionally different.

Close the tab or browser

On the web, an unlocked vault can remain available on that device across refreshes and browser restarts. This is what makes Tuck practical for daily capture.

Lock Tuck

Locking removes the locally stored unlocked vault key. Your encrypted data remains on the device and in sync, but Tuck needs the passphrase, Recovery Kit, or an allowed device-unlock method before it can read it again.

Sign out

Signing out ends the account session and also removes the local unlocked vault key.

iPhone and iPad

The native app can use Face ID and Secure Enclave-backed protection to make repeat unlocks faster without storing the raw vault key in UserDefaults.

⌘I