Mac: set up App Access
- Open Settings → App Access.
- Beside App Password, choose Add and complete the password form. Change updates an existing app password.
- To use a physical key for app access, choose Security Keys → Add Key, give it a recognizable name and complete the prompts.
- If available, enable Unlock App with Touch ID as another way to unlock the interface.
- Choose Auto-Lock After Inactivity and decide whether to enable Lock Open Vaults with the App.
Lock Now → Lock locks the interface immediately. The app also locks when the Mac locks or its display sleeps. When automatic vault locking is enabled, it also attempts to lock and eject open vaults. If that fails, close files using them and choose Retry Locking Vaults.
Use Remove beside an app key to remove that app-access method. Remove App Password is available when at least one app security key remains. Turn Off App Lock requires confirmation with your Mac login.
Mac: recover app access
At the lock screen, choose Reset App Access with Mac Login, then confirm Reset with Mac Login using macOS authentication. This removes the app unlock methods so you can configure app access again.
This resets access to the interface only. It does not reset a vault password, replace a vault security key, remove additional protection or reveal a forgotten PhantomCal opening secret.
iPhone and iPad: App Lock
- Open Settings.
- Under App access, turn App Lock on or off and complete the device authentication prompt.
- Check Unlock with to see the method available on your device.
App Lock uses Face ID or Touch ID when available, with the device passcode as the system fallback. It does not create a separate app PIN. If authentication is cancelled, the private interface stays locked.
Vaults close when the iOS app enters the background. This happens even if optional App Lock is off. When PhantomCal opening mode is enabled, Lock & Return also closes vaults and goes back to the calendar.
If authentication is unavailable
Use another configured Mac app method or the Mac-login reset. On iPhone and iPad, follow the system device-authentication prompt. A disabled or unavailable biometric sensor is not permission to bypass the vault's own credentials.
Read passwords and additional protection for the separate vault requirements.