Citadel / Controls / LockScreen

LockScreen Control

What does this control check?

The LockScreen control verifies that your computer is configured to automatically lock the screen when you step away. This ensures your device requires a password to access it after a short period of inactivity.

Important: Without automatic screen locking, anyone who approaches your unattended computer can access all your files, emails, passwords, and applications as if they were you. If they can access your email, they can reset passwords for virtually any online account (banking, social media, work systems, etc.) by using the "forgot password" feature. This creates serious security and privacy risks.

Why is this important?

🚫

Unauthorized Access

An unlocked computer allows anyone nearby to access your work, send messages as you, access confidential information, or install malicious software.

🔐

Data Protection

Screen locking protects sensitive information displayed on your screen from being viewed or photographed when you step away from your desk.

📋

Compliance

Most security policies and regulatory requirements mandate automatic screen locking to prevent unauthorized access to company systems and data.

How to fix this

Enabling Screen Lock on Windows

  1. Click the Start button and select Settings
  2. Click Personalization
  3. Click Lock screen in the left sidebar
  4. Scroll down and click Screen saver settings
  5. In the dropdown menu, select any screen saver (e.g., Blank)
  6. Set Wait to 10 minutes (or less)
  7. Check the box "On resume, display logon screen"
  8. Click Apply and then OK
Alternative method: You can also search for "Change screen saver" in the Start menu to access these settings directly.
⚠️ Important notes:
  • Set the timeout to 10 minutes or less for better security
  • The "On resume, display logon screen" option must be checked
  • You can manually lock your screen anytime by pressing Windows + L
  • Make sure you know your login password before enabling this

Enabling Screen Lock on macOS

  1. Click the Apple menu in the top-left corner
  2. Select System Settings (or System Preferences on older versions)
  3. Click Lock Screen (or Security & Privacy → General tab)
  4. Set "Require password after screen saver begins or display is off" to immediately (or the shortest time available)
  5. Optionally, set "Turn display off on battery when inactive" and "Turn display off on power adapter when inactive" to 10 minutes or less
Tip: You can set up Hot Corners to lock your screen instantly. Go to Desktop & Dock → Hot Corners and set a corner to "Lock Screen".
⚠️ Important notes:
  • Set password requirement to "immediately" for best security
  • You can manually lock your screen anytime by pressing Control + Command + Q
  • If using FileVault, you'll need your encryption password when unlocking
  • Make sure you know your login password before enabling this

Verifying the fix

After configuring screen locking, Citadel will automatically verify this control during its next check.

To verify screen lock is working:

  1. Wait for the configured timeout period without touching your computer
  2. Your screen should go blank (screen saver activates)
  3. Move your mouse or press a key
  4. You should be prompted to enter your password to unlock

Quick test: Press Windows + L to lock immediately, then verify you need to enter your password to unlock.

To verify screen lock is working:

  1. Wait for your display to turn off or screen saver to start
  2. Move your mouse or press a key to wake the display
  3. You should be prompted to enter your password immediately

Quick test: Press Control + Command + Q to lock immediately, then verify you need to enter your password to unlock.