How to Use a Decoy Vault to Protect Your Real Privacy

What Is a Decoy Vault?

The steps below use Secure Folder: Privacy Vault, which runs on any iPhone with iOS 16.6 or later.

A decoy vault is a separate, password-protected area on your phone that intentionally shows benign content when unlocked with a specific PIN or password. It is designed to be indistinguishable from a normal vault, so an observer cannot tell there is a second, real vault hidden behind a different PIN.

The core idea is plausible deniability: you can comply with a demand to unlock your phone without exposing your actual private data. The decoy vault might contain a few random photos, a fake note, or an empty folder, convincing the requester that there is nothing else to find.

Why the Built-in iOS Hidden Album Is Not Enough

iOS includes a Hidden album that can be locked with Face ID (since iOS 16). However, that album syncs through iCloud and uses the same biometrics as your phone. Anyone who sees you unlock your phone can also unlock the Hidden album. It does not offer a separate, deniable area. A decoy vault app provides a distinct lock screen and the ability to maintain a completely separate set of content that only appears under duress.

How to Set Up a Decoy Vault in Secure Folder: Privacy Vault

Secure Folder: Privacy Vault is a private photo vault for iPhone with a decoy vault. Here is how to activate it.

Step 1: Create Your Real Vault

Download Secure Folder: Privacy Vault from the App Store. Open the app and set the PIN for your real vault. This is where you will store your actual private photos, videos, documents, and notes.

Step 2: Enable the Decoy Vault

Go to the app's settings and find the Decoy Vault option. You will be prompted to create a second, different PIN. This PIN will open a separate vault that shows only the content you decide to place there. The app does not display any visible switch or badge that reveals the existence of the real vault.

Step 3: Populate the Decoy Vault

Add harmless files to the decoy vault. Good candidates include:

The goal is realism. If someone forces you to unlock the app, they will see only these items and have no reason to suspect there is more.

Step 4: Test It

Lock the app, then enter your decoy PIN. Confirm that it opens the decoy vault and that your real vault stays invisible. Enter your primary PIN to return to the real vault.

Tips for Making Your Decoy Vault Convincing

• Use realistic content. Random junk may look suspicious. Add a few items that match your usual photo style.
• Leave no hints. Never store anything in the decoy vault that could point to your real vault.
• Keep the decoy vault updated. Occasionally add new content to keep it looking active.
• Combine with intruder alerts. Some apps (including Secure Folder) can silently capture a photo of anyone who enters the wrong PIN, giving you evidence of tampering. Secure Folder starts at the third wrong PIN by default, and you can set it anywhere from 1 to 10.

When a Decoy Vault Is Most Useful

• Border crossings and security checks where device searches are common.
• Shared devices in homes or workplaces where others might snoop.
• Legal or journalistic work that requires protecting sources or sensitive materials.
• Everyday privacy when lending your phone to friends or family.