The feature
Why it matters
A real second vault with harmless photos, opened by its own pattern, for when someone insists you unlock.
01
A fake password that opens a real vault
Many vault apps offer a "fake PIN" or "fake password" that opens one decoy collection. NullVault works differently: every pattern opens its own vault, so the decoy is simply another vault you've filled with ordinary photos.
The lock screen never shows a list or a count of vaults. Someone watching you unlock sees one normal-looking vault, with nothing that points to the others.
02
Set up a decoy in four steps
Set the decoy up before you need it, at a quiet moment when nobody is watching your screen.
- Create a new vault with a pattern you'd be comfortable drawing in front of someone.
- Fill it with ordinary photos and notes, so it looks like a vault you actually use.
- Lock NullVault and practise opening the decoy, then your real vault, so both feel natural.
- Keep your real vault's pattern different and private. Never draw it where it can be seen.
03
A real vault with an intentionally ordinary purpose
A decoy works because it is not a fake screen. It is a separate NullVault vault that you choose to fill with content you are comfortable showing, reached through a pattern assigned to that vault.
Its gallery, files, notes, and controls behave like those in another vault. NullVault does not add a conspicuous 'decoy mode' banner after it opens.
04
Decoy is not duress
Opening an ordinary decoy is non-destructive. It does not remove the other local vaults, which makes it useful when you want a separate everyday collection without triggering an irreversible response.
NullVault's duress vault is a different capability with much higher stakes. Users should understand and configure that behavior separately rather than treating every decoy pattern as destructive.
Documentation basis
Documented claims
- Android supports optional decoy onboarding and a separate pattern for innocuous content.
- iOS supports multiple independent pattern-locked vaults and a separately designated duress behavior.
Know the boundary
Important limitations
- NullVault cannot judge whether the content in a decoy will appear convincing in a particular situation.
- Knowledge of another pattern can still open the vault associated with that pattern.
- A decoy does not remove external copies, operating-system traces, or already-exported content.
Clear answers
Questions about this feature
Is a decoy vault the same as a fake password?
It does the same job, with one difference. A fake password in other apps usually opens one decoy screen. In NullVault, the decoy is a full, separate vault with its own pattern, and nobody can tell how many other vaults exist.
How many vaults can I have?
You can create several separate vaults, each with its own pattern. The free iPhone version includes up to 5 vaults; NullVault Pro on iPhone removes that limit. Android plans are shown in Google Play.
Can someone tell that my other vaults exist?
The lock screen shows no list or count of vaults. But anyone who learns or watches another pattern can open that vault, so keep your real pattern private.
Does opening a decoy delete my private vaults?
No. An ordinary decoy opens non-destructively. Only a separately designated duress vault performs the documented destructive local action.
Can a decoy contain real photos and files?
Yes. It is a normal encrypted vault that you populate with content you choose.