---
title: "Duress Password and Decoy Vaults on iPhone: How They Work"
description: "A duress password is a second code that opens a decoy instead of your real data. Here's how it works, whether iPhone has one built in, and where it falls short."
url: https://www.vaultforyou.app/blog/decoy-vault-iphone
lang: en
published: 2026-10-02
updated: 2026-10-29
author: "VaultForYou Editorial Team"
publisher: VaultForYou
---

# What is a duress password? How decoy vaults work on iPhone

> A duress password gives you something believable to open when someone pressures you to unlock. Here's how duress codes and decoy vaults work, what iPhone does and doesn't offer, and how to make a decoy convincing.

Published 2026-10-02 - Updated 2026-10-29 - By VaultForYou Editorial Team

## Quick answer

A duress password is a second code you use only under pressure: instead of unlocking normally, it opens a decoy, wipes data or sends an alert. Apple doesn't document a duress passcode for iPhone. In VaultForYou, a duress pattern opens an ordinary-looking decoy vault and can optionally wipe your real vaults, which is off by default.

- **What is it?:** A second code that opens a decoy, wipes data or alerts someone, instead of unlocking normally.
- **Built into iPhone?:** Apple doesn't document a duress passcode. A vault app has to provide one.
- **What do others see?:** Only the decoy's files. No names, counts or activity from other vaults.
- **Optional wipe:** In VaultForYou the duress pattern can also wipe real vaults. Off by default.

Most privacy tools protect you from strangers: someone who finds your phone or guesses your passcode. A decoy vault is built for a different, more awkward moment, when someone you know is standing next to you and asking you to open it.

This guide explains what a duress password and a decoy vault are in plain words, whether iPhone has a duress passcode built in, when a decoy actually helps, how a duress pattern works in VaultForYou, and where its limits are. We make VaultForYou, so weigh our pick accordingly.

## What is a duress password?

A duress password is a second code you use only when someone is forcing you to unlock something. Entering it looks like a normal unlock, but instead of opening your real data, it does something else.

What that "something else" is depends on the system:

- **Open a decoy.** The person sees a believable but harmless account, profile or vault.
- **Wipe data.** The real data is erased, permanently.
- **Send a silent alert.** Home alarm systems often have a duress code that appears to disarm the alarm while quietly notifying someone.

You'll also see it called a duress code, duress PIN or panic password. In a vault app that unlocks with a drawn pattern, it's a **duress pattern**. The idea is the same every time: you appear to comply, and the person in front of you has no visible reason to think there's more.

## What is a decoy vault?

A decoy vault is a second, real vault that you are willing to show. It opens with a different unlock code than your real vault, and it holds ordinary files, so opening it in front of someone looks like you've opened the real thing.

The idea is often called **plausible deniability**. In plain words: if you're pressured to unlock your private space, you can comply without revealing what you actually wanted to protect, and the other person has no visible reason to think there is anything more.

A decoy is different from hiding. Hiding tries to make the vault invisible. A decoy accepts that the vault exists and gives the person looking at it a believable answer.

## How does a duress pattern work?

A duress pattern is the unlock code for the decoy. You draw your real pattern to open your real vault, and you draw the duress pattern when you're under pressure, which opens the decoy instead.

In VaultForYou, every vault opens with a pattern you draw by connecting 4 or more dots, and a different pattern opens a different vault. A duress pattern builds on that:

- **It opens an ordinary-looking decoy vault.** Nothing about the screen says "decoy."
- **Inside the decoy, nothing points to other vaults.** There are no vault names, counts or activity from your real vaults.
- **The lock screen gives nothing away.** It shows no vault names, counts or previews, so without a pattern there is no sign of how many vaults exist.
- **It can optionally wipe your real vaults.** This is **off by default**. You decide whether to turn it on.

VaultForYou never sees your patterns and has no copy of your keys, so the company can't open any of your vaults, real or decoy.

## Does iPhone have a built-in duress passcode?

Not that Apple documents. Apple's instructions for setting an iPhone passcode describe a single passcode, with no option for a second one that opens a different view or erases the phone.

Two built-in features come up in the same conversation, and neither is a duress code:

- **Erase Data.** In **Settings -> Face ID & Passcode** (Touch ID & Passcode on some models), turning on Erase Data erases all information, media and personal settings after 10 consecutive failed passcode attempts. It's triggered by wrong guesses, not by a special code, and you'd need a backup to restore anything.
- **Passcode after Emergency SOS.** Apple says your iPhone requires your passcode, rather than Face ID or Touch ID, after an attempt to use Emergency SOS is initiated. Emergency SOS is built to call emergency services, so treat it as exactly that, not as a privacy shortcut.

Neither opens a decoy. If you want a duress code for private photos and documents, it has to come from the app that holds them, which is what a duress pattern in a vault app is for.

## When does a decoy vault actually help?

A decoy helps when someone has the power or the leverage to make you unlock your phone in front of them, but won't dig much further once they see something ordinary.

Common situations:

- **Partner or family pressure.** A controlling partner, a parent checking a teenager's phone, or a relative who "just wants to see." Saying no can make things worse; opening a decoy can end the conversation.
- **Shared or borrowed phones.** A friend asks to scroll through your photos, or a phone gets passed around at a gathering.
- **Workplace or school checks.** Someone asks to look at your device and you have personal material you'd rather keep personal.
- **Travel and border checks.** Some travelers worry about device inspections at airports or borders. A decoy may reduce casual exposure, but it is **not a legal protection**. Rules on device searches vary by country, misleading officials can be an offense in some places, and deleting data during an official inspection can have legal consequences. This isn't legal advice; check the rules where you're traveling, and when in doubt, carry less on the phone.

> **Note:** If you're in an abusive situation, a decoy is a short-term safety tool, not a plan. Consider reaching out to a local support organization you trust.

## How to set up a decoy vault in VaultForYou

Setting one up takes a few minutes: choose a duress pattern, open the decoy it creates, fill it with believable files, and decide whether you want the optional wipe.

1. **Pick a duress pattern that's clearly different from your real one.** Use a different starting dot and shape so you won't draw the wrong one by muscle memory.
2. **Set it as your duress pattern in VaultForYou.** Drawing it will now open an ordinary-looking decoy vault.
3. **Open the decoy and fill it** with everyday photos and documents (see the next section).
4. **Decide on the wipe option.** Leave it off unless losing your real vaults is truly better for you than having them seen. If you turn it on, export anything you can't afford to lose first.
5. **Practice both patterns** a few times so you can draw either one calmly under pressure.

> **A decoy vault that looks ordinary.** Set a duress pattern in VaultForYou. No account needed. [Download on the App Store](https://apps.apple.com/app/vaultforyou/id0000000000)

## How do you make a decoy believable?

A decoy works only if it looks like something you'd genuinely keep private. An empty vault, or one with three random photos, invites the question "where's the rest?"

Fill it with things that are mildly personal but harmless:

- **Everyday photos:** pets, food, screenshots of recipes, receipts, a few selfies, photos of a car or apartment.
- **Mild "private" content:** gift ideas, a birthday-present receipt, photos of a surprise you're planning, a document such as a lease or a warranty.
- **Volume and variety:** dozens of items, not five. A mix of photos, a video or two and a document looks lived-in.
- **Ongoing use:** add something every so often. A decoy that clearly hasn't changed in a year can look staged.

Keep your story simple. "That's where I keep stuff I don't want in my camera roll" is true of most people and needs no further explanation.

## What a decoy vault can't do

A decoy reduces pressure in the moment. It doesn't make you invisible, and it can't control what other people believe or do.

- **It can't stop someone who knows decoys exist.** Some people know that vault apps can have more than one vault. A decoy gives them nothing to point at, but it can't make them stop suspecting.
- **It can't protect files you left elsewhere.** If the same photos are still in Photos, in Recently Deleted or in a chat thread, the decoy doesn't help. When you move a photo into a vault, VaultForYou creates a copy, so delete the original from Photos and empty Recently Deleted afterward.
- **It isn't legal or forensic protection.** VaultForYou doesn't claim to protect against forensic tools, and a decoy doesn't change your legal obligations anywhere.
- **The wipe is permanent.** If the optional wipe is on and you draw the duress pattern, your real vaults are gone. A forgotten pattern also means that vault can't be opened by you or by VaultForYou, so keep an exported copy of anything irreplaceable somewhere safe.

## Decoy vault vs. fake calculator apps vs. Hidden album

Each option answers a different question. The Hidden album hides photos from casual scrolling, calculator-style apps try to hide that a vault exists, and a decoy vault gives you something believable to open when asked.

| | Decoy vault (duress pattern) | Calculator-style "disguised" apps | Photos Hidden album |
|---|---|---|---|
| Main idea | Show a believable vault when pressured | Look like a different app | Keep photos out of the main library view |
| What happens when someone asks you to open it | You draw the duress pattern; they see ordinary files | The disguise is already blown once they're asking | Unlocks with Face ID, Touch ID or the passcode they may already know |
| Reveals other content? | Nothing inside points to other vaults | Depends on the app | Shows everything you've hidden |
| Separate from Photos library | Yes, files live outside Photos | Depends on the app | No, it's an album inside Photos |
| Syncs with iCloud Photos | No (vault backup is separate and optional) | Depends on the app | Yes, if iCloud Photos is on |
| Best for | Pressure from someone in the room | Avoiding a quick glance at your home screen | Keeping photos off your main grid |

Apple's Hidden album is locked by default and opens with Face ID or Touch ID, and if you use iCloud Photos, photos you hide on one device are hidden on your other devices too. That's useful, but anyone who knows your passcode, or can make you use Face ID, sees the whole album. Read more in our guide on [how to hide photos on iPhone](/blog/hide-photos-on-iphone).

## Frequently asked questions

### What is a duress pattern?

A duress pattern is a second unlock pattern you draw only when someone is pressuring you. Instead of opening your real vault, it opens a decoy vault with ordinary-looking files. In VaultForYou the duress pattern is separate from your real pattern, and inside the decoy nothing points to other vaults: no names, counts or activity. You can optionally make it wipe your real vaults, but that is off by default.

### Can I set a second passcode on my iPhone that wipes it?

Not as far as Apple documents. iPhone has one passcode. The closest built-in option is Erase Data in Settings -> Face ID & Passcode, which erases the iPhone after 10 consecutive failed passcode attempts. That's triggered by wrong guesses, not a secret code, and you'd need a backup to restore anything afterward.

### Can someone tell that a decoy vault is fake?

They can't see other vaults from inside the decoy, because it shows no vault names, counts or activity, and the lock screen shows no previews. But a decoy can still look suspicious if it is empty, has only a few files or was clearly set up yesterday. Fill it with everyday photos and documents so it looks like something you actually use.

### Is a decoy vault the same as a fake calculator app?

No. A calculator-style app tries to hide that a vault exists at all by looking like a different app. A decoy vault admits there is a vault and gives you a believable one to open. Disguises tend to fail once someone opens the app and looks closely; a decoy is designed for the moment you are asked to unlock it.

### Should I turn on the wipe option for my duress pattern?

Only if losing your real vaults is better for you than having them seen. Wiping is permanent, and in an official setting such as a border or police check, deleting data can carry legal consequences in some places. That is why VaultForYou leaves the wipe off by default. If you turn it on, make sure you have an exported copy elsewhere.

### Does a decoy vault protect me at a border or airport check?

It may reduce casual exposure, but it is not a legal protection and we can't promise any outcome. Rules on device searches differ by country, and misleading officials can be an offense in some places. If you are worried, the safest approach is to travel with less on the phone and check the rules for where you're going. This is not legal advice.

## Bottom line

A duress password, in VaultForYou a duress pattern, opens a believable second vault when someone pressures you to unlock your phone. Apple doesn't document one for the iPhone itself, so it has to come from the app. It works best against people in the room who will stop looking once they see something ordinary, and it only works if the decoy is filled with real, everyday files.

It is not a legal shield or a guarantee. Keep the optional wipe off unless you've thought it through, delete originals from Photos after moving them, and keep an exported copy of anything you can't afford to lose. If you're comparing apps, see our [best photo vault apps for iPhone](/blog/best-photo-vault-apps-iphone).

## Sources

- [Apple Support: Set a passcode on iPhone](https://support.apple.com/guide/iphone/set-a-passcode-iph14a867ae/ios)
- [Apple Support: Hide photos on your iPhone, iPad, Mac, or Apple Vision Pro with the Hidden album](https://support.apple.com/en-us/104987)

## Keep reading

- [How to Hide Photos on iPhone: Hidden Album Guide (2026)](https://www.vaultforyou.app/blog/hide-photos-on-iphone): Hide photos on iPhone in seconds, find your hidden photos in the Hidden album, and see who can still open them, what syncs to iCloud and when a vault is better.
- [How to Lock Photos on iPhone: 4 Ways That Actually Work (2026)](https://www.vaultforyou.app/blog/lock-photos-on-iphone): Lock photos on iPhone with the Hidden album, a Face ID lock on the Photos app, a locked note or an encrypted vault, and see who can still open each one.
- [8 Best Photo Vault Apps for iPhone to Hide Photos (2026)](https://www.vaultforyou.app/blog/best-photo-vault-apps-iphone): We compared 8 photo vault apps that hide photos on iPhone on unlock method, decoy vaults, backup and account needs, plus what to check before you trust one.
- [How to Lock a Folder on iPhone (Secure Folder Alternatives)](https://www.vaultforyou.app/blog/lock-folder-on-iphone): iPhone can't lock a folder or match Samsung's Secure Folder. Here are 5 workarounds, from locked Notes and Face ID app lock to vaults, ranked by protection.

---

Our guides are written and fact-checked by the VaultForYou team against Apple's own documentation. We make VaultForYou, a private vault app for iPhone. Download on the App Store: https://apps.apple.com/app/vaultforyou/id0000000000