Currently, after successfully logging in to PPass, setting up a pin to secure the vault is not required by default. This is a major security flaw, especially for inexperienced users. After logging in to a new device, I was wondering why my vault was accessible without logging in. I think, setting up a pin should really be enforced upon setup.