Compare the controls
| Control | Purpose | Main limitation |
|---|---|---|
| Separate patterns | One disclosed pattern opens one vault | Other vaults may still be inferred outside the interface |
| Ordinary decoy content | Provides a plausible limited space | Does not destroy other vaults |
| Destructive duress | Opens one vault while invalidating other local access | Irreversible; backups and external copies remain |
| Panic wipe | Removes key material needed for future local access | Not physical erasure; can destroy your own access |
| Automatic lock | Reduces exposure after leaving the app | Does not help while legitimately unlocked |
Example: A traveler creates a plausible documents vault for routine inspections. That may reduce disclosure without triggering visible data loss. Turning the same space into a destructive duress vault changes the consequences dramatically and could be unsafe if an inspector expects other data to exist.
When NullVault may be the best fit
- one credential should not reveal a list of every vault;
- local data should be encrypted before storage;
- the user understands and accepts irreversible local invalidation;
- exported backups are separated from the device;
- the plan has been reviewed for the actual human threat, not only technical elegance.
When it is not the best fit
- accidental data loss would be catastrophic;
- another person may trigger the destructive pattern unknowingly;
- visible app behavior could escalate a dangerous encounter;
- you require Android panic-wipe behavior on an iPhone, where that feature is not offered;
- legal, workplace, border, or personal-safety obligations require qualified advice.
Critical boundaries
Duress and panic actions do not delete exported encrypted backups, recipient files, cloud metadata, system snapshots, or historical physical flash cells. They do not prove that other vaults never existed. They cannot protect content already observed on an unlocked screen.
Read decoy vault vs destructive duress vault and panic wipe explained before considering either feature.
For situations involving monitoring or coercive control, the Safety Net technology safety plan provides context for assessing changes and their possible consequences. NullVault is not a substitute for that safety planning.
Updated: 7 September 2026. This comparison does not claim independent safety testing.