Zero out secret bytes when locking vault.

diff --git a/src/lib/vault/vault-worker.ts b/src/lib/vault/vault-worker.ts
index e0e12249f1249045893e671023f3d9a8748da27c..ee475fa8964aa1056818c84da56f9ac8c6984b55 100644 (file)
--- a/src/lib/vault/vault-worker.ts
+++ b/src/lib/vault/vault-worker.ts
@@ -220,6 +220,8 @@ function load (type?: WalletType, id?: UUID, key?: CryptoKey, keySalt?: ArrayBuf
 }
 
 function lock (): Promise<Record<string, boolean>> {
+       new Uint8Array(_mnemonic).fill(0)
+       new Uint8Array(_seed).fill(0)
        _mnemonic = undefined
        _seed = undefined
        _locked = true