I didn't mention since it's discussed on the initial release article but basically all your keys are stored locally on your machine and encrypted by a master password. You can put an auto locker to automatically lock the wallet after x minutes of inactivity