1 changed files with 2 additions and 1 deletions
@@ -99,7 +99,8 @@ contradicts either, the originals govern.

 - [ ] Public data (xpubs, addresses, balances) stored unencrypted
 - [ ] Private data (recovery phrases, private keys) encrypted at rest
- [ ] Password only required for signing operations
+- [ ] Password required for signing, deleting a wallet, and showing a recovery
+      phrase or private key
 - [ ] No secrets in `.env`, credentials, or API keys committed to repo
 - [ ] `git add -A` / `git add .` never used