# Signing in and unlocking

> Google or email to sign in, your password or Face ID to unlock, and how long it stays open.

Source: https://ravenwallet.pro/docs/unlock

## Two different things

| | What it does | With |
|---|---|---|
| Signing in | Finds your account and its locked vault | Google, or your email and password |
| Unlocking | Opens the vault in your browser | Your password, 12 words or passkey |

When you sign in with a password, your browser sends a proof stretched from it, salted with your email, never the password itself.

## Unlock with Face ID or Windows Hello

On a phone or a laptop with a passkey, Raven can unlock with Face ID, a fingerprint or Windows Hello instead of your password.

- Face ID (you look) → Your device (releases a secret) → PRF → Your browser (makes a key) → opens → Lock 3 (the inner key)

The secret is released only on Raven’s own address, and only after Face ID. It never leaves your browser.

Each device gets its own lock. Your 12 words stay the way back.

## Staying unlocked

| Setting | What it does |
|---|---|
| Stay unlocked on this computer | Off by default. When on, a refresh or a closed tab opens straight back in, until you lock or the time runs out. |
| Lock after | Locks when nothing has been done for 5, 15 or 30 minutes, 1 hour, or never. A new account starts at 15 minutes. |
| Lock | Locks now, on this device |

## Under the hood

- **The sign-in proof**: The proof is stretched with PBKDF2 and salted with your email, so the server can check it is you without ever learning your password.
- **Why Google cannot open it**: Signing in with Google finds your account. It cannot unlock the vault: only your password, 12 words or passkey can.
- **Staying unlocked**: The vault’s inner key is sealed with a key your browser makes and will not export. Lock, Lock after and Log out all end it.