Lock a list or the whole app

Put a numeric PIN on a single list, or on Kairo itself, so a passing glance doesn't reveal everything.

On this page

Lock a list

  1. 1Go to Lists and find the list.
  2. 2Click Lock.
  3. 3Enter a PIN of 4โ€“8 digits, then confirm it.

Its tasks now disappear from everywhere, Today, the Calendar, the Log, search, the inbox count, even the AI's context. The list itself shows only its name and a *Locked, tap to unlock* panel.

Lock all of Kairo

  1. 1Open Settings and go to Privacy & security.
  2. 2Find App lock.
  3. 3Click Set up, then choose and confirm a PIN.

A full-screen PIN pad now guards the app. Use ๐Ÿ”’ Lock now whenever you step away, and note that keyboard shortcuts are disabled while the lock screen is up.

How unlocking lasts

  • An unlock applies to this browser until you close it, for at most 12 hours. Refreshing, navigating and new tabs keep it open.
  • Another browser, another device, or reopening the browser asks for the PIN again.
  • Hide it again now (for a list) and Lock now (for the app) close it immediately, useful before handing someone your laptop.
  • Changing a PIN closes it everywhere except the browser you changed it in.
  • Unlocks are per account: unlocking as one account never reveals anything in another, and switching away or signing out locks everything that account had opened.

Change or remove a PIN

Both locks offer Change PIN and Remove while unlocked. Each requires the current PIN, knowing the old one is always the price of changing it.

What a lock actually protects

PINs are never stored as text: only a salted hash lives on the server, and every check happens there. Locks are enforced by the server, not drawn over the screen โ€” while the app is locked, Kairo sends that browser nothing, and a locked list's tasks are never sent at all until its PIN is entered. Someone with your unlocked laptop and the developer tools open still gets nothing.

Guessing is limited: after five wrong PINs, each further try waits longer, up to fifteen minutes, no matter how many tries are sent at once. Connection keys can only be given locked lists from a browser that has already opened them.

Was this page helpful?