End-to-End Encryption
Encrypt your checklists with AES-256-GCM. Lock them with a master password — they auto-lock when you step away.
How Encryption Works
FireList uses AES-256-GCM encryption with PBKDF2-HMAC-SHA256 key derivation (300,000 iterations). Each encrypted checklist gets its own random 256-bit data key, wrapped with your master key — a technique called envelope encryption.
A verifier (known plaintext, encrypted and stored in encryption.json) validates your master password without ever exposing your actual data.
Enabling Encryption
Set a master password the first time you encrypt a checklist. Choose Enable Encryption from the ⋯ menu. Once a master password is set, you can encrypt additional checklists with the same password.
Session Unlock
Locked checklists show a lock screen. Enter your master password once to unlock all encrypted checklists for the session. Press ⌘L to toggle lock and unlock from the menu bar.
Auto-Lock
Configure auto-lock from Settings. Choose an idle timeout (5 to 30 minutes). Enable Lock on System Lock to automatically lock when your Mac locks, switches to the login window, or the display sleeps.
Change Password
Rotate your master password from Settings at any time. All list data keys are re-encrypted with the new password — no data is lost, no re-import needed.