Use this only on a personal device you trust, never on a shared device. When ticked, your identity stays unlocked in this browser profile, in every tab and after reloads, with no time limit, until you lock the device, sign out, or untick this box. After that your passkey or passphrase is needed again.

The server renews this sign-in while this tab remains unlocked and its trusted-device grant is valid. Lock or sign out before handing over your device. The longer server sign-in applies the next time you sign in.

An unlocked tab carries risk if malicious code runs in it or someone gains physical access. Browser memory and operating-system sleep or recovery are not guaranteed to remain stable. The key kept for this never leaves this device over the network, but any script that runs on the Clio site while it is kept (for example through a harmful browser extension) could copy your identity off this device, and locking would not undo that copy. Separately, malware, a harmful browser extension or a person at this computer can use it while it is kept.

On some browsers that key is stored in this browser profile's files, so anyone who can copy this computer's files or backups could use it. Turn on full-disk encryption (BitLocker or FileVault). Locking ends its use in this browser, but not copies of those files already taken.

While it is kept, reopening Clio also opens drafts autosaved on this device, which can include site coordinates, without your passkey. Creating a recovery kit, adding an unlock method, linking an account or approving another device still asks for your passkey or passphrase.

On a shared browser, leave this unchecked; its server sign-in expires after 1 hour and the signing key locks after 5 minutes of inactivity.