Skip to main content

Security and encryption

Big Picture Money stores your financial data in a local encrypted database on your computer. Only you hold the passphrase that unlocks it — Big Picture Money cannot reset or recover it for you.

Your passphrase​

  • Choose a passphrase when you first set up your data file
  • The passphrase must be at least 12 characters long
  • Big Picture Money does not store your passphrase in plain text
  • If you forget the passphrase, your data cannot be recovered — there is no cloud reset

Lock and unlock​

  • After you unlock the app, your session stays open until you Lock the app or quit
  • Lock (title bar) requires your passphrase again before you can view or change data
  • Wrong passphrase on unlock shows an error; your database is not damaged

Remember on this device​

Storing a wrapped key in your operating system keychain so you can skip typing the passphrase is planned for a future release. For now, you enter your passphrase each time you open the app after lock or restart.

OS credential store (API keys, bank sync, license)​

Optional secrets that are not part of your encrypted data file — for example AI API keys, bank sync access tokens, and license activation material — live in your operating system’s secure credential store (Keychain on macOS, Credential Manager on Windows, and the platform equivalent on Linux).

On macOS, the first time Big Picture Money reads one of those items, the system may ask for your login password. Choose Always Allow so the signed app can use that item without asking again. Choosing only Allow authorizes a single use and the prompt can return. Big Picture Money does not require Touch ID or repeated confirmation for these background secrets.

What is encrypted​

The entire database file is encrypted at rest. A copy of bigpicture.db — for example a manual backup on an external drive or in cloud storage — stays encrypted and is not readable without your passphrase.

That file is your data. You can open a copy with compatible tools and your passphrase — see Your data file and Open your data file outside of Big Picture. Big Picture Money does not use a proprietary format that only this app can read.

You can also export your data as plaintext CSV from Settings → Export. CSV files are not encrypted — store them securely. See Export all your data and Back up your data file.

Merchant recognition catalog​

Separately, Big Picture Money ships an offline merchant recognition catalog used to improve payee names and default categories. That catalog is protected as part of the app. It is not unlocked with your passphrase, and it is not your financial ledger — see Merchant recognition and Your data file.

Optional anonymous usage sharing​

You may turn on anonymous usage sharing so Big Picture Money can learn how the app is used — never the contents of your finances. Sharing is off by default, respects the lock boundary (nothing is sent while the database is locked), and can be changed under Settings → General. See Telemetry privacy and Manage telemetry and privacy.