Updated 2026-07-11
Auto-lock
After you unlock with your master password, decryption keys are held only in memory — never written to disk, localStorage, or IndexedDB. After a period of inactivity the vault relocks and the keys are discarded; enter your master password to unlock again. Closing the tab has the same effect.
The browser extension follows the same rule: keys live only in its service worker's memory and are dropped on auto-lock.
Clipboard auto-clear
When you copy a password or TOTP code, TimeLock clears it from the clipboard after a short countdown, so a secret doesn't linger for the next paste hours later.
Why this matters
If your laptop is grabbed while the vault is locked, its owner has ciphertext and nothing else. A locked vault requires the master password — which is why choosing a strong one matters.