Unutma Blog Peace of mind
Padlock and laptop on a wooden desk, security and privacy mood

The Unutma Vault: Passwords, PINs, and Calm Behind Face ID

~4 min read
On this page

The worst password manager is the one you stopped using because it felt like another job — so you went back to reusing three passwords and hoping for the best. Unutma’s Vault is designed for a narrower promise: sensitive items live in one place, gated by Face ID, Touch ID, or your device PIN, with categories that match real life — not a spreadsheet fantasy.

This guide covers what belongs in Vault, how to avoid dumping everything on day one, how Vault fits Unutma’s offline-first privacy story, and what Vault is not (it is not a replacement for a dedicated team enterprise password system — it is your pocket vault). For the full app overview, read the complete feature guide.

What the Vault is for

Think in categories, not “everything sensitive ever”:

  • Banking and money portals — fewer “which login was this?” moments.
  • Government IDs and reference numbers — the things you panic-search in PDFs at midnight.
  • Internet accounts that truly matter — primary email, password manager recovery, cloud storage.

Nice-to-have, not day-one: old loyalty numbers you use once a year — add when the pain appears, not before.

Biometrics: friction in the right direction

Biometric gating is not theater — it is context switching. When Vault requires Face ID, you are less likely to casually show a screen full of secrets to a friend who asked to see a photo. It also reduces shoulder surfing risk in cafes and airports.

If biometrics fail (injury, gloves, sensor issues), your device PIN remains the backstop — keep that PIN strong and private, not your birthday.

Field hygiene: copy, hide, rotate

Copy fields when you need to paste into a browser — but clear clipboard afterward on shared devices.

Hide values on screen when someone might glance — paranoia is proportional to context.

Rotate passwords when a service tells you there was a breach — Unutma does not replace good security hygiene; it makes hygiene easier to execute.

How much to store (without hoarding)

A vault with 500 entries sounds impressive — until none of them are maintained. Better:

  • Phase 1 (week one): 5–10 critical entries you touch monthly.
  • Phase 2: Add entries when you struggle to find them elsewhere.
  • Phase 3: Quarterly delete duplicates and dead accounts.

If you migrate from another manager, do not import blindly — treat migration as spring cleaning.

Vault + Economy: keep mental models separate

Vault holds credentials. Economy holds money flows. They relate — you log into banking through Vault, you categorize spending in Economy — but do not store card PINs in plain text in shopping lists out of convenience. If you must note a PIN temporarily, Vault is the right room.

Vault + Lists: never mix “buy milk” with “bank token”

Keep Shopping lists human and boring. Keep Vault for secrets. The cognitive cost of mixing them is not just security — it is attention bleed every time you open Lists in a store.

Threat model (honest)

Unutma’s pitch is on-device storage and no mandatory cloud login for your private content in ordinary use — aligned with what we discuss in privacy-first productivity apps. That does not mean your phone is invincible:

  • Physical theft matters — use device encryption + strong PIN + remote wipe options from the OS.
  • Malware on a compromised device can still scrape screens — Vault raises the bar; it does not repeal physics.

Backup without surrendering philosophy

When you export or back up, you choose the destination — external drive, encrypted archive, your own cloud — instead of silently mirroring everything to a vendor by default. Read your app’s current backup screens carefully; policies evolve, and you should know where a file lands.

When Vault is the wrong tool

If you need team sharing, role-based access, or enterprise audit logs, you may still use a dedicated team vault for work — and keep Unutma for personal secrets. That is not failure; it is appropriate scope.

Checklist: Vault sanity (10 minutes)

  1. Delete three entries you no longer recognize.
  2. Confirm biometric lock still works after an OS update.
  3. Add one entry you have been looking up in screenshots — stop the screenshot habit.

Bottom line: the Vault works when it is small, current, and respected — a door you actually close, not a warehouse you fear opening.