Decoy vault
A second PIN that tells a different story.
The decoy vault is Secure Folder: Incogni Vault's answer to the moment security apps usually ignore: someone watching over your shoulder, insisting you open the app. You set two PINs. Your real PIN opens your real vault. The decoy PIN opens a second, completely separate vault filled with whatever harmless content you put there — a few screenshots, some receipts, nothing interesting. Whoever made you unlock sees a working vault app with boring contents and moves on. Nothing on the screen hints that another vault exists, and there is no visible switch, badge, or setting that gives the real one away.
- Vaults
- Real + decoy, fully separate
- Trigger
- A second PIN you choose
- Visible difference
- None
- Included
- Free
How the decoy works
Both vaults live in the same app and open from the same lock screen — which PIN you type decides which one appears. Each vault has its own folders and its own content; nothing is shared between them. Enter the decoy PIN and the app behaves exactly as if the decoy were all there is: same interface, same features, no 'switch vault' button to discover.
Fill the decoy with plausible filler once, and it's ready whenever you need it. The convincing part isn't emptiness — it's ordinariness.
When a decoy matters
Plausible deniability is a real security property, not a gimmick. A partner who demands to see the app, a parent scrolling through your phone, a colleague who grabbed it as a joke — in all of these, refusing to unlock escalates the situation, while unlocking the real vault defeats the point of having one. The decoy gives you a third option: comply, show something, and reveal nothing. Security researchers call this coercion resistance; most photo vaults simply don't have it.
Common questions
Can someone tell that a decoy vault exists?
No. The lock screen looks and behaves identically whichever PIN you enter, and the decoy vault has the same interface as the real one. There is no visible setting, badge, or file count that reveals a second vault.
What should I put in the decoy vault?
A handful of unremarkable items — screenshots, receipts, a few ordinary photos. An empty vault looks suspicious; a boring one looks like the whole story.
What happens if I forget one of the PINs?
Each vault opens only with its own PIN. If Face ID or Touch ID is enabled you can still unlock the real vault and change your PIN in settings. There is no server-side reset — content is stored only on your device.
Try it on your own photos.
Free to download — set your PIN in under a minute.