Vault Management

Control access to your encrypted data.

Understanding the Vault

The vault is Docket's encryption container. When encrypted mode is enabled:

• Locked — Data is encrypted, inaccessible
• Unlocked — Data is decrypted, accessible

Unlocking the Vault

When you launch Docket with an encrypted vault, you'll see the unlock screen:

On App Launch

1. Launch Docket from your USB
2. Enter your vault password
3. Click Unlock
4. Access your data

Password Entry

• Passwords are never stored
• Only the derived key is kept in memory
• Wrong password shows an error

Locking the Vault

Manual Lock

Lock your Docket anytime from the side menu by clicking the Lock button:

Automatic Lock

The vault locks automatically when:

Event	Action
USB disconnected	Immediate lock (within 2 seconds)
App closed	Lock on exit
Lock button clicked	Immediate lock

What Happens on Lock

1. Keys wiped — Encryption keys zeroed from memory
2. UI cleared — All decrypted content removed from display
3. Sessions invalidated — All media tokens expire

Changing Your Password

1. Go to Settings
2. Find Security section
3. Click Change Password
4. Enter current password
5. Enter new password (twice)
6. Click Save

The database is re-encrypted with your new password. Files remain encrypted with their individual keys.

Forgot Password?

No Recovery

There is no way to recover a forgotten password. Your encrypted data will be permanently inaccessible.

If you forgot your password:

1. Go to Settings
2. Click Reset Vault
3. Confirm you want to delete all data
4. All encrypted data is wiped
5. Create a new vault

Force Reset

If you cannot unlock your vault:

1. Go to Settings (accessible without unlocking)
2. Click Force Reset Vault
3. Confirm deletion
4. All encrypted data is permanently deleted
5. Start fresh with a new vault

Best Practices

Password Strength

• Use at least 12 characters
• Mix letters, numbers, and symbols
• Don't reuse passwords from other services
• Consider a passphrase (multiple words)

Backup Considerations

• Export important files before they're needed
• Consider keeping copies of critical data elsewhere
• Remember: exports are unencrypted

USB Safety

• Don't leave USB unattended while unlocked
• Disconnect USB when stepping away
• Lock manually if you can't remove the USB

Switching Encryption Modes

Enable Encryption

1. Go to Settings
2. Find Encryption toggle
3. Click to enable
4. Enter a password
5. Wait for migration to complete

Disable Encryption

1. Go to Settings
2. Find Encryption toggle
3. Click to disable
4. Enter current password to confirm
5. Wait for migration to complete

warning

Disabling encryption makes all data readable without a password.

Vault States

State	Description
No Vault	First run, needs setup
Encrypted + Locked	Data protected, needs password
Encrypted + Unlocked	Data accessible
Unencrypted	No password, always accessible