Unlocking and auto-lock

When MorphGate starts, or after it locks, it asks you to unlock the vault. You can type your master password, or let the system keychain unlock it. You choose how long MorphGate waits before it locks by itself. These settings belong to each device and don't sync.

All of them are in Security (the shield at the top of the sidebar), under This device.

Lock when idle

Pick Never, or after 5, 15 or 30 minutes, 1 hour or 4 hours. If you don't use the keyboard or mouse in MorphGate for that long, the vault locks.

Locking closes terminals, file browsers, tunnels and VPNs. To lock by hand, choose the lock icon at the top of the sidebar.

Unlock with the system keychain

Instead of typing the master password each time, MorphGate can keep a key for this vault in your system's keychain, which your login unlocks: Keychain on macOS, Credential Manager on Windows, and the Secret Service on Linux (GNOME Keyring or KWallet must be running).

  1. Enter your master password under Master password (to confirm).
  2. Choose Unlock with system keychain.

When MorphGate starts, it then unlocks by itself. After it locks, the unlock screen offers Unlock with system keychain as a button; it doesn't unlock again without a click.

Keep in mind:

  • Anyone who can use your logged-in account on this computer can then open MorphGate.
  • The master password keeps working, and other devices still need it.
  • The keychain key never syncs, and keeps working after you change your master password or use your recovery key.
  • To stop, choose Turn off next to Unlocks with the system keychain on this device.

Ask for Touch ID, Windows Hello or your fingerprint first

With keychain unlock on, you can make MorphGate ask the system to confirm it's you before it uses the key. Tick Ask for … before unlocking:

macOS
Touch ID, or your Mac's password.
Windows
Windows Hello: your face, fingerprint or PIN.
Linux
System authentication through polkit: your fingerprint where the system is set up for it, otherwise your login password. The .deb and .rpm packages include the polkit rule. With other installs, MorphGate offers Set up, which asks for an administrator password once.

This check is made by the app. It keeps out someone at your unlocked computer, not programs running as you. If the system can't do the check, MorphGate says so; unlock with the master password until it works again.

The unlock screen

  • The unlock screen says how long MorphGate waits before it locks.
  • Forgot password? Use your recovery key sets a new master password. See Master password and recovery key.