Skip to main content
    SonomosSupport Center
    Main Site

    The app, screen by screen

    Settings

    Your account, your plan, and how the app behaves. No protection rules live here — those are all in Controls.

    Available toAll plans

    Six cards. The page's own subtitle says it: app and account configuration, no protection rules.

    1. Account — your name, email, and the door to password, two-factor, and device management.
    2. Plan & billing — which plan you're on and what you can do about it.
    3. Notifications — which events are worth interrupting you for.
    4. App behavior & display — theme, launch at login, where the corner dot sits.
    5. What counts as a detection — the one setting here that changes your numbers.
    6. Diagnostics & updates — log detail, version, and the update check.

    Account

    Your name and email, with your verification status shown next to the address. Edit your name inline and press Save changes.

    Everything security-related — password, two-factor authentication, passkeys, connected accounts, active devices and sessions — sits behind Manage account & security, which opens the dedicated account panel. Sign out ends the session on this device.

    Plan & billing

    What this card offers depends entirely on your plan.

    The Plan & billing card by plan
    PlanShowsActions
    FreeFree, and a note about the one basic Privacy summary report a month.Upgrade to Teams — opens your plan page in the browser. There's nothing to bill on Free.
    Teams MemberTeams member · Managed by admin.None. Your seat is billed through your organization — talk to your admin.
    Teams AdminTeams admin and the per-seat price.Manage billing — payment method, invoices, cadence, seats.

    Free stays free. The full detection catalog, custom rules and every input type are included, plus one basic Privacy summary report a month. Teams adds unlimited full reports and org-wide management, not extra protection. See Free vs Teams.

    Notifications

    Notification toggles
    NotificationFires whenDefault
    Masking alertsLocke masks something, so you know it happened.On
    Weekly report emailOnce a week, summarising what Locke caught.Off
    New surface detectedLocke spots an AI tool it isn't protecting yet.On

    App behavior & display

    Appearance and behavior settings
    SettingOptionsNotes
    ThemeSystem, Light, DarkSystem follows your operating system.
    Start on loginYes, NoLeave it on Yes. Protection that has to be started by hand is protection you'll forget.
    Overlay positionBottom-right, Top-rightWhere the corner status dot sits.

    What counts as a detection

    The most consequential setting on the page, and the one most worth understanding. It changes your numbers — never your protection.

    Only 'You typed' is counted by default. Locke still masks every source regardless.

    1. Sources. Where in a request the sensitive value sat. Toggle one on to include it in your counters and reports.
    2. Count mode. Whether repeats of the same value count once or every time.
    The six sources
    SourceWhat it isCounted by default
    You typedText you actually wrote into your message.Yes
    Injected contextWhat your AI tool quietly attaches to every message — saved notes, memory, project files.No
    System promptThe AI tool's own built-in hidden instructions.No
    Tool outputResults from files or commands the AI read, fed back in.No
    The AI's repliesText the AI generated.No
    OtherEverything else.No
    Occurrences versus distinct values
    Mode20 copies of the same email counts asUse when
    Occurrences20You want to know how much masking work happened. The default.
    Distinct values1You want to know how many unique secrets were at risk.

    Whatever you choose applies to the Dashboard counters and to generated reports, so a report always matches what you saw on screen. The Dashboard prints the active rules underneath its counters so nobody has to guess which mode produced a number.

    Diagnostics & updates

    Diagnostics settings and actions
    ControlWhat it does
    Log verbosityHow much detail Locke records: Normal, Verbose, or Debug. Leave it on Normal unless support asks otherwise.
    Check for updatesChecks now rather than waiting for the automatic check.
    Support & feedbackJumps to Support.

    The version and update state are printed at the bottom of the card — that's the line to quote when reporting a problem.

    Changes on this page are saved with Save preferences at the bottom.