Updated 2026-09-28
Auto-lock
By default, after you unlock, your keys are held only in memory, never written to disk. After 15 minutes without activity, Atrium warns you and then locks, discarding the keys. Enter your master password (or use your passkey) to unlock again. Closing the tab has the same effect.
The browser extension follows the same rule: its keys live only in memory and are dropped when it locks.
Keep this browser unlocked
In Settings → Security, you can choose Keep this browser unlocked instead of the 15-minute default — for 12 hours up to 90 days, or while this browser stays signed in. Turning it on stores a device-bound key in your browser (generated so it can never be exported, even by our own code) and sends a matching encrypted envelope to our server. Together, the two reopen your vault without re-entering your master password, and the vault stays unlocked even after you close the tab.
This is a convenience/security trade-off: anyone using this signed-in, unlocked browser can open your vault, so only turn it on for a device you trust. You can turn it off, or reduce the period, at any time from Settings → Security.
Clipboard clearing
When you copy a password, Atrium clears it from the clipboard after 20 seconds, so it doesn't linger for the next paste.
Why it matters
If someone picks up your laptop while Atrium is locked, all they can reach is encrypted data. That is also why a strong master password matters.