Features
Security & App Lock

Security & App Lock

Pro feature — requires an active Pro or Early Access license. Get Early Access free →

App Lock

App Lock protects your Zentro session with a PIN when you're away from your workstation. After a configurable idle timeout, the app locks automatically and requires the PIN to resume.

Setting Up App Lock

  1. Go to Settings → Security → App Lock
  2. Enable App Lock
  3. Set a PIN (minimum 4 digits)
  4. Configure the idle timeout (default: 5 minutes; range: 30 seconds to 1 hour)

📸 Screenshot needed: App Lock settings panel with the PIN setup fields and idle timeout control.

Locked State

When the app locks, all content is hidden behind a PIN entry screen. Open connections and editor state are preserved — entering the correct PIN resumes exactly where you left off.

📸 Screenshot needed: The locked app state (PIN entry screen).

OS Credential Fallback

After 3 incorrect PIN attempts, Zentro offers a fallback: verify your Windows user account password to unlock the app.

⚠️

OS credential fallback is available on Windows only in this release. The option does not appear on macOS or Linux.


PII Detection & Column Blur

Zentro automatically scans result columns for personally identifiable information and blurs them in the data grid.

Detected Patterns

TypeExample
Email addressuser@example.com
Phone number+1-555-867-5309
JWT tokeneyJhbGci...
Credit card number13–19 digit sequences (Luhn-validated)

How It Works

When a query result loads, Zentro runs pattern detection on the values in each column. Columns where a significant portion of values match a PII pattern are automatically blurred — cell values are replaced with •••••• in the grid.

📸 Screenshot needed: Data grid with PII columns blurred (e.g. an email and phone column showing ••••••). The blur toggle button in the result panel toolbar should be visible.

Manual Overrides

  • Blur a column: right-click column header → Blur column
  • Unblur a column: right-click column header → Show column
  • Toggle all blurred columns: use the blur icon in the result panel toolbar

Blurring is display-only — the underlying data is not affected. Exports and clipboard copies include the real values unless the column is still blurred at export time.


Secret Vault

The Secret Vault stores named credentials in an encrypted local store backed by the OS keychain.

Use the Vault when you want to:

  • Keep a credential accessible across multiple connection profiles without re-entering it
  • Separate secret storage from connection configuration

Configure in Settings → Security → Vault.

Connection passwords entered in connection profiles are already stored in the OS keychain. The Secret Vault is a separate, named credential store for cases where you manage secrets explicitly.