content: add defaults to the HardenedPass settings tables

Every setting now shows its default, read from the app's code. Corrects
the clipboard timeout to 60 seconds: the app's settings screen displays
45, but 60 is what it uses. The same timeout closes an open entry.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2 files changed, 44 insertions, 43 deletions

diff --git a/content/en/hardenedpass/reference/settings/index.md b/content/en/hardenedpass/reference/settings/index.md
index d856f93..201350a 100644
--- a/content/en/hardenedpass/reference/settings/index.md
+++ b/content/en/hardenedpass/reference/settings/index.md
@@ -11,60 +11,60 @@ screen. Settings are grouped in six sections.
 
 ## General
 
-| Setting | What it does |
-|---|---|
-| **App theme** | Light, dark or following the battery saver. |
-| **Password file organization** | How autofill names the files it saves, for example `work/example.org.gpg` or `work/example.org/alice@example.org.gpg`. |
-| **Password sort order** | Folders first, or recently used first. |
-| **Disable pull to sync action** | Stops the pull down gesture on the list from starting a sync. |
-| **Recursive filtering** | Search also looks inside the folders below the current one. |
-| **Open search on start** | Opens the search bar when the app starts. |
-| **Show all files and folders** | Lists files that are not passwords as well. |
-| **Enable biometric authentication** | Asks for your fingerprint when the app starts. See [Security]({{< relref "/hardenedpass/reference/security" >}}) for what this does and does not protect. |
+| Setting | What it does | Default |
+|---|---|---|
+| **App theme** | Light, dark, or following the system. On Android 9 and older, following the battery saver instead. | System default |
+| **Password file organization** | How autofill names the files it saves, for example `work/example.org.gpg` or `work/example.org/alice@example.org.gpg`. | `work/example.org/alice@example.org.gpg` |
+| **Password sort order** | Folders first, or recently used first. | Folders first |
+| **Disable pull to sync action** | Stops the pull down gesture on the list from starting a sync. | Off |
+| **Recursive filtering** | Search also looks inside the folders below the current one. | On |
+| **Open search on start** | Opens the search bar when the app starts. | Off |
+| **Show all files and folders** | Lists files that are not passwords as well. | Off |
+| **Enable biometric authentication** | Asks for your fingerprint when the app starts. See [Security]({{< relref "/hardenedpass/reference/security" >}}) for what this does and does not protect. | Off |
 
 ## Autofill
 
-| Setting | What it does |
-|---|---|
-| **Enable Autofill** | Makes HardenedPass the autofill service. See [Autofill]({{< relref "/hardenedpass/using/autofill" >}}). |
-| **Default username** | Used when autofill cannot find a username in the entry or its path. |
-| **Custom domains** | Domains whose subdomains autofill treats as separate sites. |
+| Setting | What it does | Default |
+|---|---|---|
+| **Enable Autofill** | Makes HardenedPass the autofill service. See [Autofill]({{< relref "/hardenedpass/using/autofill" >}}). | Off |
+| **Default username** | Used when autofill cannot find a username in the entry or its path. | Empty |
+| **Custom domains** | Domains whose subdomains autofill treats as separate sites. | Empty |
 
 ## Passwords
 
-| Setting | What it does |
-|---|---|
-| **Password generator type** | The generator that opens first: Classic (the Random tab) or Diceware. |
-| **Password copy timeout** | Seconds a copied password stays in the clipboard, 45 by default. 0 means forever. |
-| **Show the password** | Whether a decrypted password is visible right away. Copying still works when it is hidden. |
-| **Automatically copy password** | Copies the password as soon as an entry is decrypted. |
+| Setting | What it does | Default |
+|---|---|---|
+| **Password generator type** | The generator that opens first: Classic (the Random tab) or Diceware. | Diceware |
+| **Password copy timeout** | Seconds a copied password stays in the clipboard, and an open entry stays on screen. 0 means forever. | 60 seconds |
+| **Show the password** | Whether a decrypted password is visible right away. Copying still works when it is hidden. | On |
+| **Automatically copy password** | Copies the password as soon as an entry is decrypted. | Off |
 
 ## Repository
 
-| Setting | What it does |
-|---|---|
-| **Rebase on pull** | On, your local commits go on top of the server's. Off, a merge commit is made instead. On by default. |
-| **Edit Git server settings** | Changes the repository URL and how you log in. |
-| **HTTP(S) proxy settings** | Sets a proxy. Shown for HTTPS remotes only. |
-| **Local Git config & utilities** | Commit name and email, commit log, and the recovery tools described in [Sync]({{< relref "/hardenedpass/using/sync" >}}). |
-| **Import SSH key** | Reads a private SSH key from a file. |
-| **Generate SSH key pair** | Makes a new SSH key on the phone. |
-| **View generated public SSH key** | Shows the public half, to add to your server. |
-| **Delete repository** | Deletes the local copy of the store. The server's copy is not touched, and neither are local commits you did not sync: those are gone. |
+| Setting | What it does | Default |
+|---|---|---|
+| **Rebase on pull** | On, your local commits go on top of the server's. Off, a merge commit is made instead. | On |
+| **Edit Git server settings** | Changes the repository URL and how you log in. | - |
+| **HTTP(S) proxy settings** | Sets a proxy. Shown for HTTPS remotes only. | - |
+| **Local Git config & utilities** | Commit name and email, commit log, and the recovery tools described in [Sync]({{< relref "/hardenedpass/using/sync" >}}). | - |
+| **Import SSH key** | Reads a private SSH key from a file. | - |
+| **Generate SSH key pair** | Makes a new SSH key on the phone. | - |
+| **View generated public SSH key** | Shows the public half, to add to your server. | - |
+| **Delete repository** | Deletes the local copy of the store. The server's copy is not touched, and neither are local commits you did not sync: those are gone. | - |
 
 ## Misc
 
-| Setting | What it does |
-|---|---|
-| **Export passwords** | Copies the store, still encrypted, to a folder you choose. |
-| **Workaround clipboard history feature** | On phones with a clipboard history, fills it with numbers to push passwords out. |
-| **Debug logging** | Turns on debug logs, after an app restart. Release builds only. |
+| Setting | What it does | Default |
+|---|---|---|
+| **Export passwords** | Copies the store, still encrypted, to a folder you choose. | - |
+| **Workaround clipboard history feature** | On phones with a clipboard history, fills it with numbers to push passwords out. | Off |
+| **Debug logging** | Turns on debug logs, after an app restart. Release builds only. | Off |
 
 ## PGP settings
 
-| Setting | What it does |
-|---|---|
-| **Key manager** | Lists imported keys, imports new ones and deletes old ones. |
-| **Encrypt in ASCII armor mode** | Writes entries as text instead of binary. Leave it off unless you know you need it. |
-| **Enable passphrase caching** | Remembers the key's passphrase, so that entries open without asking. Experimental, and needs an active screen lock. |
-| **Automatically clear passphrase cache** | Forgets the passphrase when the screen turns off. |
+| Setting | What it does | Default |
+|---|---|---|
+| **Key manager** | Lists imported keys, imports new ones and deletes old ones. | - |
+| **Encrypt in ASCII armor mode** | Writes entries as text instead of binary. Leave it off unless you know you need it. | Off |
+| **Enable passphrase caching** | Remembers the key's passphrase, so that entries open without asking. Experimental, and needs an active screen lock. | Off |
+| **Automatically clear passphrase cache** | Forgets the passphrase when the screen turns off. | On |
diff --git a/content/en/hardenedpass/using/entries/index.md b/content/en/hardenedpass/using/entries/index.md
index 927792e..26919b9 100644
--- a/content/en/hardenedpass/using/entries/index.md
+++ b/content/en/hardenedpass/using/entries/index.md
@@ -23,7 +23,8 @@ fields. It asks every time, unless you turn on **Enable passphrase caching** in
 
 - The eye icon shows or hides the password.
 - The copy icon next to a field copies it. A copied password is cleared from the
-  clipboard after 45 seconds by default, and **Password copy timeout** changes that.
+  clipboard after 60 seconds by default, and **Password copy timeout** changes that.
+  The same timeout closes an open entry.
 - The pencil opens the editor.
 
 ## Create an entry