Unlatch

Overview

This page documents public product behavior for Unlatch, including account flow, login, logout, vault creation, and vault unlock behavior visible from frontend features. The vault creation flow currently creates a vault immediately without a vault email code step.

Core Security

AES-256 style encrypted vault workflow, cookie-based sessions, and optional biometric unlock.

Scope

Docs include login, logout, vault creation, lock and unlock behavior, shared item workflows, and how recipients access received items.

Login and Logout

1. Registration with Email Verification

New users register, then verify using a 4-digit email code to complete account verification.

2. Login

Login validates credentials and sets access plus refresh cookies. Session profile is loaded after sign-in and unlock access to user pages.

3. Account Recovery

Forgot password issues a time-limited token. Reset password updates the account when token is valid.

How to Login

  1. Open the Log In page.
  2. Enter your email and password.
  3. Submit and continue to your dashboard.

How to Logout

  1. Open the profile menu from top-right.
  2. Click Sign Out.
  3. Session cookies are cleared and you return safely.

Vault Setup and Lock

Create Vault

Vault requires name plus password and is created instantly. No vault 2FA verification step is required.

Rule: one vault per account.

Unlock Vault

Unlock with vault password to receive vault session cookie. Vault items APIs require unlocked vault session.

Lockout: 3 failed attempts trigger temporary lock for about 1 hour.

Biometric Unlock

Users with registered biometric credentials can unlock through WebAuthn challenge and verification endpoints.

How to Create a Vault

  1. Login to your account.
  2. Click Create Vault from the navbar button.
  3. Enter vault name and vault password.
  4. Submit to create vault immediately.
  5. Unlock your vault with password or biometrics.

How Lock and Unlock Works

  1. After login, open My Vault if you already created one.
  2. If the vault is locked, the app redirects you to the unlock screen.
  3. Enter your vault password to open the vault session.
  4. Vault items and shared items load only after the vault session is valid.
  5. Signing out clears the account session and ends vault access.

Shared Items and Receiving

Share from My Items

Open a vault item from My Items, then use the Share action to send that item to another registered user by email.

Receive in Shared Items

When another user shares an item with you, it appears in the Shared Items page inside the vault area.

How to Share an Item

  1. Login and unlock your vault.
  2. Open My Items from the vault sidebar.
  3. Select the item you want to share.
  4. Click Share.
  5. Enter the recipient email address.
  6. Submit to create the shared item record.

How to Receive and View It

  1. Login with the recipient account.
  2. Unlock the vault session if prompted.
  3. Open Shared Items from the vault sidebar.
  4. Choose the shared row from the list.
  5. Read username, password, website, and notes from the details panel.
  6. Use the copy buttons to copy username or password.
Where It Appears

Shared items appear in the main Shared Items table and also in the small sidebar preview cards. Newer shares appear first.

Shared by You vs Shared with You

Owners can review who received an item and revoke the share. Recipients can view and copy the shared credentials from the received item details.

Screenshots and UI References

Unlatch home hero
Landing Experience
About page hero
About Page
Contact page hero
Contact Page
Forgot password flow animation
Forgot Password Flow