App Lock

Captured traffic is the most sensitive thing on your device: bearer tokens, session cookies, personal payloads, all in plain text. Anyone who picks up an unlocked phone can read the lot. App Lock puts the device’s own authentication in front of it.

How it works

App Lock is part of the iPhone and iPad app. Turn it on in Settings → App Lock. HTTPGlass asks for Face ID, Touch ID, or Optic ID on launch and again when you come back to the app — immediately, or after a grace period of one or five minutes, your choice. If biometrics fail or aren’t enrolled, it falls back to the device passcode, so the lock always opens for its owner.

While locked, the screen is fully covered, not blurred; a blurred traffic list still leaks hostnames. The app switcher snapshot is covered too.

App Lock is free. It needs a device passcode to be set, which it tells you up front rather than offering a toggle that silently does nothing.