Your passphrase never leaves this device and is never stored — not in this file, not on your phone. It unlocks your record by decrypting it. If you lose it, Nexum reissues the file and cannot recover the passphrase itself. If you tick “keep me signed in”, your already-unlocked records are held on this device for 24 hours so you can reopen without typing it; your passphrase still is not. Sign out, a fund update, or 24 hours ends that.