diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
index 274c92e..6fb963c 100644
--- a/docs/CHANGELOG.md
+++ b/docs/CHANGELOG.md
@@ -22,8 +22,15 @@ version on Proton Drive it was synced at. Nothing is rewritten, and the upgrade
   computer's backup alongside it, then offers its folders for syncing here. Both computers keep
   them in step, deletions included. Each computer now keeps its own settings backup in the
   shared backup, so they no longer overwrite each other (B252).
+- **The app remembers its window size**, and whether it was maximized, between runs.
 
 ### Fixed
+- **The app's window could not shrink to fit a small or scaled screen**, so the minimize,
+  maximize and close buttons ended up off-screen. Below about 760 pixels the sidebar and the
+  page now take turns, and every page fits in a window 480 pixels wide.
+- **The app showed the sign-in page when the system keyring was locked or not running yet**, as
+  if the sign-in had been lost. It now says that the keyring could not be read, and opens on its
+  own once the keyring answers (B253).
 - **An edit in a synced folder could replace one another computer had just saved.** The newer
   version from the other computer was left only in the version history. The edit is now kept as
   a conflict copy (B249).
diff --git a/docs/CONFIGURATION.md b/docs/CONFIGURATION.md
index f6aee91..f121275 100644
--- a/docs/CONFIGURATION.md
+++ b/docs/CONFIGURATION.md
@@ -62,6 +62,7 @@ fix it.
   "online_map": false,
   "tray_hidden": false,
   "files_view": { "list": true, "sort": "modified", "descending": true, "folders_first": true },
+  "window": { "width": 980, "height": 680, "maximized": false },
   "open_with": {
     "terminal": ["alacritty", "-e"],
     "rules": [{ "match": ["@text"], "command": ["nvim"], "terminal": true }]
@@ -87,6 +88,7 @@ fix it.
 | `online_map` | bool | `false` | General → Appearance | Street map for Places from OpenFreeMap |
 | `tray_hidden` | bool | `false` | General → Appearance | Hide the tray icon |
 | `files_view` | object | grid, by name | My files view menu | `list`, `sort` (`name`, `size`, `modified`), `descending`, `folders_first` |
+| `window` | object | 980 × 680 | Resizing the app window | `width`, `height` (the unmaximized size), `maximized` |
 | `open_with` | object | `xdg-open` | — | See [`open_with`](#open_with) |
 | `prompt` | object | built-in window | — | See [`prompt`](#prompt) |
 
diff --git a/docs/TROUBLESHOOTING.md b/docs/TROUBLESHOOTING.md
index 5a23578..b0211aa 100644
--- a/docs/TROUBLESHOOTING.md
+++ b/docs/TROUBLESHOOTING.md
@@ -97,7 +97,15 @@ this block, 5003 is a release Proton no longer accepts.
 
 **Sign-in works but is forgotten after a restart** — no Secret Service provider is running, or its
 keyring is locked. Install and unlock GNOME Keyring, KWallet or KeePassXC (with Secret Service
-enabled). `pdfs diagnose` shows `keyring session` as failing in that case.
+enabled). `pdfs diagnose` shows `keyring session` as failing in that case. When the app finds
+a saved sign-in it cannot read, it says so above the sign-in form and opens on its own once the
+keyring is unlocked. You don't have to sign in again.
+
+**Asked for the mailbox password after every reboot** — the account has a separate mailbox
+password (two-password mode). Such accounts are locked by default: the unlock lasts until you log
+out or restart. To stay unlocked, turn on **Keep unlocked on this computer** in the unlock dialog,
+or run `pdfs unlock --remember`. Either one stores the unlock in the system keyring.
+[SECURITY_MODEL.md](SECURITY_MODEL.md) explains what that trades away.
 
 ## The Proton Drive folder