Touch ID and locking

When Carriel asks for Touch ID, what one answer covers, and what happens when your pouch locks.

When Carriel asks

What you do	Asks
Open the panel or the window, search, tuck something in	Never
Copy, show, edit a value, save a copy of a file, preview a file	Touch ID, your Apple Watch or your Mac’s password
Delete	No: it goes to Recently Deleted with Undo
Delete for good, empty Recently Deleted	Yes
Make a setting weaker, change the pouch password, make a recovery key, remove a Mac	Yes

The prompt always says what it’s for and names the thing, such as “Carriel wants to copy Stripe live secret”.

One answer covers the next 30 seconds while the panel or the window stays open. Closing the panel, switching away from the window, sleep, screen lock, switching users and the screen saver end it at once. Unlocking your Mac with Touch ID doesn’t count as an answer.

Without Touch ID

On a Mac without Touch ID, or with its lid closed, your Apple Watch answers if it’s paired, and otherwise your Mac’s password does. Nothing else changes.

When your pouch locks

Your pouch locks when your Mac sleeps or its screen locks, when you switch users, when Carriel quits, and when you choose Lock Now (⌘L in the panel).

In Settings › Security, choose how often Carriel asks:

With your Mac, the default. Your pouch locks when your Mac does and opens when your Mac does. Taking something out asks for Touch ID, and one answer covers the next 30 seconds, as above.
Every time. Every copy and every Show asks for Touch ID, however soon after the last one.

When it locks, Carriel:

forgets every answer and every key it had opened,
closes any panel that shows or edits a value,
deletes the files it made for previews,
clears its copy from the clipboard, if it’s still there.

Locked isn’t empty. The names in your pouch stay on screen, tucking in still works, and the first thing you take out asks for Touch ID. The pouch in the menu bar shows a small padlock while it’s locked.