diff --git a/src/app_security.cpp b/src/app_security.cpp
index 4c109dd..825b6bb 100644
--- a/src/app_security.cpp
+++ b/src/app_security.cpp
@@ -612,7 +612,12 @@ void App::checkAutoLock() {
     float elapsed = std::chrono::duration<float>(now - last_interaction_).count();
 
     if (elapsed >= (float)timeout) {
-        lockWallet();
+        // Lite has no daemon `walletlock` — App::lockWallet() early-returns without rpc_, so route
+        // lite through lockLiteWallet() (locks the backend + tears down the chat session so no
+        // decrypted store / unlocked DB key survives the idle lock). In full-node builds
+        // lite_wallet_ is always null, so this branch is a no-op and behaviour is unchanged.
+        if (lite_wallet_) lockLiteWallet();
+        else              lockWallet();
         DEBUG_LOGF("[App] Auto-locked wallet after %d seconds idle\n", timeout);
     }
 }