Two different things
| What it does | With | |
|---|---|---|
| Signing in | Finds your account and its locked vault | Google, or your email and password |
| Unlocking | Opens the vault in your browser | Your password, 12 words or passkey |
When you sign in with a password, your browser sends a proof stretched from it, salted with your email, never the password itself.
Unlock with Face ID or Windows Hello
On a phone or a laptop with a passkey, Raven can unlock with Face ID, a fingerprint or Windows Hello instead of your password.
Face IDyou look
Your devicereleases a secret
Your browsermakes a key
Lock 3the inner key
PRFopensEach device gets its own lock. Your 12 words stay the way back.
Staying unlocked
| Setting | What it does |
|---|---|
| Stay unlocked on this computer | Off by default. When on, a refresh or a closed tab opens straight back in, until you lock or the time runs out. |
| Lock after | Locks when nothing has been done for 5, 15 or 30 minutes, 1 hour, or never. A new account starts at 15 minutes. |
| Lock | Locks now, on this device |
Under the hood
- The sign-in proof
- The proof is stretched with PBKDF2 and salted with your email, so the server can check it is you without ever learning your password.
- Why Google cannot open it
- Signing in with Google finds your account. It cannot unlock the vault: only your password, 12 words or passkey can.
- Staying unlocked
- The vault’s inner key is sealed with a key your browser makes and will not export. Lock, Lock after and Log out all end it.