When logged into HashPack the appliance retains the non-public vital in session memory... https://www.hashpack-wallet.app/