From: Chris Duncan <chris@codecow.com>
Date: Wed, 5 Aug 2026 08:19:58 +0000 (-0700)
Subject: Zero out secret bytes when locking vault.
X-Git-Url: https://git.codecow.com/?a=commitdiff_plain;h=b7fee38b946b55ea4bc9d9a182e201df24cbe035;p=libnemo.git

Zero out secret bytes when locking vault.
---

diff --git a/src/lib/vault/vault-worker.ts b/src/lib/vault/vault-worker.ts
index e0e1224..ee475fa 100644
--- a/src/lib/vault/vault-worker.ts
+++ b/src/lib/vault/vault-worker.ts
@@ -220,6 +220,8 @@ function load (type?: WalletType, id?: UUID, key?: CryptoKey, keySalt?: ArrayBuf
 }
 
 function lock (): Promise<Record<string, boolean>> {
+	new Uint8Array(_mnemonic).fill(0)
+	new Uint8Array(_seed).fill(0)
 	_mnemonic = undefined
 	_seed = undefined
 	_locked = true