Safe with your servers and secrets.

The master password is set with the first stored secret and asked only when a connection needs it. Private keys are taken into the vault, so a database backup carries them; once the last secret is gone, rCommander offers to remove the vault.

The vault locks after an idle time (an agent's reads do not count), after a longest time unlocked and when Windows locks or sleeps. Each limit is a setting.

A known host that shows a different key is refused, not questioned. The settings list, search, remove and import trusted keys; forgetting a key is the window's alone, never an agent's.

A question shows every value in full or the call is refused; it starts on Deny and only a click allows. Secrets are never handed out over MCP.

Every call to a drive, share or server has a time limit, and Escape stops the wait. The window stays responsive while a network share hangs.

The error log keeps warnings and errors only, with secrets masked; every table that grows has row and age limits and is swept hourly.

Settings, connections, encrypted secrets and host keys are backed up while rCommander runs, from the window or with rcommander backup <target>. A restore happens at the next start, only for the file you chose, and is checked again.

Export unencrypted or with an export password; passwords and keys only on request, in clear only after a warning. Import previews first, adds nothing twice, and a wrong password or damaged file changes nothing.