Security & App Lock
Pro feature — requires an active Pro or Early Access license. Get Early Access free →
App Lock
App Lock protects your Zentro session with a PIN when you're away from your workstation. After a configurable idle timeout, the app locks automatically and requires the PIN to resume.
Setting Up App Lock
- Go to Settings → Security → App Lock
- Enable App Lock
- Set a PIN (minimum 4 digits)
- Configure the idle timeout (default: 5 minutes; range: 30 seconds to 1 hour)
📸 Screenshot needed: App Lock settings panel with the PIN setup fields and idle timeout control.
Locked State
When the app locks, all content is hidden behind a PIN entry screen. Open connections and editor state are preserved — entering the correct PIN resumes exactly where you left off.
📸 Screenshot needed: The locked app state (PIN entry screen).
OS Credential Fallback
After 3 incorrect PIN attempts, Zentro offers a fallback: verify your Windows user account password to unlock the app.
OS credential fallback is available on Windows only in this release. The option does not appear on macOS or Linux.
PII Detection & Column Blur
Zentro automatically scans result columns for personally identifiable information and blurs them in the data grid.
Detected Patterns
| Type | Example |
|---|---|
| Email address | user@example.com |
| Phone number | +1-555-867-5309 |
| JWT token | eyJhbGci... |
| Credit card number | 13–19 digit sequences (Luhn-validated) |
How It Works
When a query result loads, Zentro runs pattern detection on the values in each column. Columns where a significant portion of values match a PII pattern are automatically blurred — cell values are replaced with •••••• in the grid.
📸 Screenshot needed: Data grid with PII columns blurred (e.g. an email and phone column showing
••••••). The blur toggle button in the result panel toolbar should be visible.
Manual Overrides
- Blur a column: right-click column header → Blur column
- Unblur a column: right-click column header → Show column
- Toggle all blurred columns: use the blur icon in the result panel toolbar
Blurring is display-only — the underlying data is not affected. Exports and clipboard copies include the real values unless the column is still blurred at export time.
Secret Vault
The Secret Vault stores named credentials in an encrypted local store backed by the OS keychain.
Use the Vault when you want to:
- Keep a credential accessible across multiple connection profiles without re-entering it
- Separate secret storage from connection configuration
Configure in Settings → Security → Vault.
Connection passwords entered in connection profiles are already stored in the OS keychain. The Secret Vault is a separate, named credential store for cases where you manage secrets explicitly.