# Protect access to the app

> Configure app locking without confusing it with the credentials that decrypt your vaults.

Document ID: phantom-help:phantomvault/app-access
Product: PhantomVault
Platforms: macOS and iOS
Updated: 2026-11-02
Availability: Preview-build instructions.
Tested app version: Not recorded
Tested build: Not recorded
Tested OS version: Not recorded

Source: https://llms.phantomsecure.app/phantomvault/app-access.md
Human guide: https://phantomsecure.app/help/phantomvault/app-access/
Agent guide: https://llms.phantomsecure.app/phantomvault/app-access/
Documentation index: https://phantomsecure.app/llms.txt
Full handbook: https://phantomsecure.app/llms-full.txt

## Mac: set up App Access

1. Open **Settings → App Access**.
2. Beside **App Password**, choose **Add** and complete the password form. **Change** updates an existing app password.
3. To use a physical key for app access, choose **Security Keys → Add Key**, give it a recognizable name and complete the prompts.
4. If available, enable **Unlock App with Touch ID** as another way to unlock the interface.
5. Choose **Auto-Lock After Inactivity** and decide whether to enable **Lock Open Vaults with the App**.

**Lock Now → Lock** locks the interface immediately. The app also locks when the Mac locks or its display sleeps. When automatic vault locking is enabled, it also attempts to lock and eject open vaults. If that fails, close files using them and choose **Retry Locking Vaults**.

Use **Remove** beside an app key to remove that app-access method. **Remove App Password** is available when at least one app security key remains. **Turn Off App Lock** requires confirmation with your Mac login.

## Mac: recover app access

At the lock screen, choose **Reset App Access with Mac Login**, then confirm **Reset with Mac Login** using macOS authentication. This removes the app unlock methods so you can configure app access again.

This resets access to the interface only. It does not reset a vault password, replace a vault security key, remove additional protection or reveal a forgotten PhantomCal opening secret.

## iPhone and iPad: App Lock

1. Open **Settings**.
2. Under **App access**, turn **App Lock** on or off and complete the device authentication prompt.
3. Check **Unlock with** to see the method available on your device.

App Lock uses Face ID or Touch ID when available, with the device passcode as the system fallback. It does not create a separate app PIN. If authentication is cancelled, the private interface stays locked.

Vaults close when the iOS app enters the background. This happens even if optional App Lock is off. When PhantomCal opening mode is enabled, **Lock & Return** also closes vaults and goes back to the calendar.

## If authentication is unavailable

Use another configured Mac app method or the Mac-login reset. On iPhone and iPad, follow the system device-authentication prompt. A disabled or unavailable biometric sensor is not permission to bypass the vault's own credentials.

Read [passwords and additional protection](https://phantomsecure.app/help/phantomvault/passwords-protection.txt) for the separate vault requirements.