A vault disguised as a game

Your private vault, hidden inside a game. a game only you can open.

A real encrypted vault for your photos, albums, notes and contacts — disguised as a game you actually play. The keys live only on your phone.

Coming soon to theApp Store Get it onGoogle Play
Decoy
Inside the vault

Real protection, not "hide by hiding"

The disguise is a feature — and we say so, plainly.

To anyone who picks up your phone, Decoy Vault looks and plays like an ordinary game (Minesweeper by default; Sudoku and Chess included). Only you know the secret way in — a long-press on the game's title opens a passphrase screen, and your passphrase unlocks your real vault. This protects you from a snoop or a casual glance. It is not a way to deceive Apple, Google, or the authorities, and it can't defeat a determined forensic examination of your device.

Genuine encryption

Every photo, note and contact is protected with modern authenticated encryption — Argon2id key derivation, XChaCha20-Poly1305, over an encrypted SQLCipher database. Not renamed file extensions.

Pure local-only

Your keys and your vault never leave the phone. No account, no cloud servers, no sync, no vendor key escrow, no backdoor — not even for us.

A game you can really play

Three complete games — Sudoku, Chess and Minesweeper — not a dead decoy. The #1 giveaway is a cover that doesn't work; ours does.

Optional decoy passphrase

Set a second "duress" passphrase that opens a different, believable vault pre-filled with harmless content — for the moment you're asked to unlock. Off by default, entirely your choice.

Zero broad permissions

Import through the system photo picker and OS contact picker — no full photo-library permission, no broad contacts read. Bring in only what you choose.

Under the hood

Hidden in plain sight

Argon2id + XChaCha20-Poly1305

Your data sits in an encrypted SQLCipher database, protected with modern authenticated encryption. Keys are derived from your passphrase and never leave your phone.

No account, no cloud, no recovery

Decoy Vault is local-first and offline — your content is never collected or transmitted. There's no password reset and no backup: if you forget your passphrase or lose this device, the vault is gone for good.

An optional decoy passphrase

Set a separate passphrase that opens a different vault, pre-filled with harmless content you choose. It's off by default and entirely up to you.