Face ID is tied to this address, so it is set up once on each device. A recovery phrase is kept for the day a device is lost. Kairos locks itself when you close it, and asks for the password again every 24 hours.