The master password never leaves this device. It is what
decrypts the vault; the token only opens the repository.
Unlock code
×
The code seals the copy kept on this device. It can be
digits or a full password - a longer one is harder to guess, and it is
asked for only when the vault opens. Removing it leaves the vault
readable by anyone holding the phone unlocked.