Security
Protect PrimeTask with a PIN so your tasks, projects, and notes stay private when you step away from your device.
PrimeTask can lock itself behind a PIN code and re-lock automatically after a period of inactivity. A guided wizard walks you through every setup, change, and removal - you don't need to remember exact steps or worry about getting the details right. It just asks you what you want and handles the rest.
If you don't use a PIN, PrimeTask still gives you a privacy cover screen on startup, when you step away, and when you press Lock, and you can choose to skip that cover at startup so you go straight into the app.
Save your recovery codes
When you create or change a PIN, PrimeTask gives you a set of recovery codes that are only shown once. Save them somewhere safe - they're the only way back in if you forget your PIN.
What you can do
From the Security settings you can:
- Set up a PIN for the first time
- Change your PIN if you want a new one
- Remove PIN protection if you no longer need it
- Adjust auto-lock - how long PrimeTask waits before locking itself when you're not using it
- Choose whether to see the welcome screen at startup when no PIN is set
- Use auto-lock without a PIN so PrimeTask covers the screen after a quiet period even when no PIN is set
Each action opens a short wizard that guides you step by step. If you've already set a PIN and only want to change the auto-lock timing, there's a shortcut that skips straight to that setting - no need to re-enter your PIN just to change a timer.
How to open Security settings
- Sidebar (default): Click Settings in the sidebar, then expand the Security card.
- Settings search: Open Settings and type security, PIN, or lock.
- Command palette: Press ⌘+K (or Ctrl+K on Windows), type security, and pick the entry.
For the broader Settings navigation, see Settings Overview.
Things worth knowing
Your PIN lives on this device only
Setting a PIN on one computer doesn't set one on your other computers. Each install has its own independent PIN - your PIN is a local access gate, not an account credential, and it never travels with your data.
If you want PrimeTask locked on every computer you use it on, set up a PIN on each one.
Per-device, not per-account
Your PIN is tied to this install of PrimeTask. It's not stored in the cloud, not synced, and not recoverable from another device. Think of it like a device password, not like an email login.
Save your recovery codes
When you create or change a PIN, PrimeTask gives you a set of one-time recovery codes. These are your way back in if you ever forget your PIN. The moment you move past that step, the codes won't be shown again, so copy or download them while you have the chance.
You see the codes once
PrimeTask will not show your recovery codes again after you leave the step where they're generated. There is no way to retrieve them later. Copy or download them before you move past that screen.
Good places to keep recovery codes:
- A password manager entry (best)
- A printed copy in a drawer
- A file on a separate device you trust
Bad places:
- The same device PrimeTask runs on, in an obvious folder
- A sticky note under your keyboard
- Anywhere you won't remember a year from now when you actually need them
Each recovery code works exactly once. If you use them all up, just change your PIN - that generates a fresh set and retires the old ones.
A password manager is the cleanest spot
Most password managers have a "secure note" or "one-time codes" field that's designed for exactly this. It keeps the codes recoverable from another device if you ever lose access to the one PrimeTask is installed on.
PIN protection is not disk encryption
The PIN is an access gate for PrimeTask's interface. It's not a cryptographic lock on your files at rest. Someone with physical access to your disk and the right tools could still read your data files around PrimeTask.
For real disk-level protection, enable your operating system's encryption:
- macOS - turn on FileVault in System Settings
- Windows - turn on BitLocker in Settings
Use both together: FileVault/BitLocker for the disk, PrimeTask's PIN for the app.
PIN ≠ encryption
PrimeTask's PIN protects the app you see on screen. It does not encrypt your tasks, notes, or CRM records on disk. For true at-rest protection, you need your operating system's disk encryption (FileVault on macOS, BitLocker on Windows). The two solve different problems - use both.
Auto-lock vs manual lock
Auto-lock handles the "I walked away from my desk" case automatically. Manual lock handles the "I'm stepping away right now and I want the screen locked this second" case, and you'll find a Lock button on the Profile card.
You can use either, both, or neither. Auto-lock never runs your operating system's lock screen, it only locks PrimeTask.
If you have a PIN set, both auto-lock and manual lock take you to the PIN screen. If you don't have a PIN, both take you to the welcome privacy cover instead.
Using PrimeTask without a PIN
If you'd rather not set a PIN, you still have privacy options. From the Security settings you can:
- Pick whether the welcome screen shows on startup, or skip it and open straight into your workspace.
- Set an auto-lock timer so PrimeTask covers itself with the welcome screen after a period of inactivity.
The welcome screen still appears in three cases regardless of the startup setting:
- When you press the Lock button to lock manually.
- When auto-lock kicks in after the quiet period you chose.
- When PrimeTask first opens after a restart, if you've kept the startup setting on.
Without a PIN, the welcome screen is a privacy cover, not a security gate. Anyone at your computer can press Continue to enter PrimeTask. If you want a real lock that requires a code, set up a PIN.
Quick privacy without a PIN
Turn the welcome screen toggle on and pick a short auto-lock timer. PrimeTask hides itself when you walk away from your desk, and you tap Continue when you come back. Quick, no PIN to remember, and the cover is there when you want it.
Common questions
"I just set up a PIN. What should I do with my recovery codes?"
Save them somewhere you'll actually find them again, and somewhere separate from PrimeTask itself. A password manager is the cleanest option. The goal is: if you ever forget your PIN, you can get to those codes without needing the device the PIN was set on.
"I forgot my PIN. How do I get back in?"
On the PIN screen, enter one of your recovery codes instead of a PIN. Once PrimeTask opens, go to Security settings and change your PIN - a fresh set of recovery codes will be generated as part of that flow.
"I want to change the auto-lock duration without going through the whole PIN flow."
Open the Security settings, click the auto-lock option directly, and pick a new duration. You won't be asked for your PIN - changing the auto-lock timing is treated as a preference change, not a security-critical action.
"Can I skip the welcome screen each time PrimeTask opens?"
Yes, when you don't use a PIN. Open Security and turn off "Show privacy screen on startup" and PrimeTask will go straight to your workspace the next time you launch it. The welcome screen still shows when you press Lock or when auto-lock kicks in, so your privacy cover is still there on demand.
"Can I use auto-lock without setting up a PIN?"
Yes. Open Security and pick a duration for auto-lock just like a PIN user would. PrimeTask will cover itself with the welcome screen after that period of inactivity. Note that without a PIN this is a privacy cover, not a real lock, so anyone at your computer can press Continue to come back in. For a true lock, set a PIN.
"I mistyped my PIN a few times and now it won't let me in."
That's the cooldown kicking in. Wait a moment and try again. If you genuinely can't remember your PIN, use a recovery code on the PIN screen instead - recovery codes aren't affected by the cooldown.
"I want to remove PIN protection entirely."
Open Security and choose to disable your PIN. You'll need your current PIN (or a recovery code), then PrimeTask will confirm before removing the lock. Your tasks, projects, and other data aren't touched - only the PIN itself is removed.
"I changed my PIN and my old recovery codes stopped working."
That's intentional. Changing the PIN generates a fresh set of recovery codes and retires all of the previous ones. Save the new codes as soon as they're shown - if you lose them and forget the new PIN, your only path back in is to reset PrimeTask's local data on this device.
"I'm moving to a new computer. Do I need to transfer my PIN?"
No. Your PIN stays on the old computer; the new one starts without a PIN. If you want the new computer protected too, set up a fresh PIN there. Your data moves through sync or backup and restore - your PIN does not.
"If I lose both my PIN and my recovery codes, can you help me recover?"
No, and that's deliberate. PrimeTask has no way to reach into your device to unlock it - that would defeat the point of having a PIN in the first place. The recovery codes are the recovery path. If they're lost along with the PIN, the only option is to reset PrimeTask's local data on that device and start over. Data that was synced elsewhere will come back; data that lived only on that device will be gone.
Where to go next
| If you want to… | Read this |
|---|---|
| Set up the manual lock button | Profile Settings |
| Change the theme and appearance | Appearance Settings |
| Configure alerts and reminders | Notification Settings |
| Back up or restore your data | Data Management |
| Browse all settings cards | Settings Overview |