How to auto-lock sensitive data on macOS apps

Auto-lock happens at two levels: the whole Mac (screen lock / sleep) and individual apps (vault timeout, re-auth). You want both — a locked vault on an unlocked desktop still leaks via screen sharing and shoulder surfing.

1. System: require password after sleep or screen saver

Apple Support: Set how long until a password is required

Recommendation: aggressive defaults on laptops that leave home — immediately or 5 seconds after screen saver.

Hot Corner to start screen saver:
System Settings → Desktop & Dock → Hot Corners

2. Keyboard: lock screen fast

  • Control + Command + Q — Lock Screen (common shortcut; confirm on your macOS version in Keyboard settings).

Muscle memory beats “I will lock in a minute.”

3. FileVault

Encrypts disk at rest when powered off. Not a substitute for session lock — FileVault.

4. Clipboard and Universal Clipboard

After copying secrets:

  • Paste where needed once.
  • Consider clearing clipboard history if your manager retains entries — clipboard hygiene.

Universal Clipboard can sync to iPad/iPhone — be mindful.

5. App-level: PassStore and vault discipline

Use auto-lock / timeout features in your vault app if available. PassStore’s model is summarized under Security — combine app protections with OS screen lock.

6. Screen sharing / calls

  • Pause screen share before opening vault or .env.
  • Use window share instead of full screen when possible.

Related