What a decoy vault actually does

Encryption protects your photos from someone who takes your phone. It does nothing about someone standing in front of you asking you to open it. That is a different problem with a different answer.

The AlterVault photo grid running on a phone

A shake vs a fake PIN

AlterVault
Fake PIN
In the moment
Nothing to type
Nothing for them to see
Works while the app is already open
Announces that something happened
No animation
A code entry
What it protects
Real library stays hidden
Separate encryption key
Usually

A disguised app icon is not the same thing: it hides that a vault exists, not what is in it.

The problem encryption does not solve

Encryption handles a stolen phone. A key you have not typed is the end of it.

It does nothing about someone standing in front of you. Then encryption only lets you refuse, and refusing confirms there is something to see.

The category calls this plausible deniability. It is mostly a domestic problem, not a spy one.

Why a gesture beats a second code

A fake PIN means typing a code while the person who asked is watching. A shake fires from a phone you are already holding.

Four ways a decoy gives itself away

Three of these are the owner's mistake, not the app's.

It is empty, or nearly
Four stock photos is not a gallery, it is an obviously staged set. A decoy needs a spread of dates, some duplicates, some screenshots, some genuinely boring pictures.
The switch is visible
Any fade or transition announces that something happened. The screen has to look like it was always showing this.
The decoy's settings betray it
If someone opens Settings inside the decoy and finds Shake gestures: On, the whole mechanism is gone in one tap.
The disk reveals the vault count
If file inspection shows three vaults exist and one has been opened, the decoy protects against a person but not an examination. One well-regarded iOS vault has publicly conceded exactly this.

How ours works

One sharp shake hides it
The decoy replaces the vault instantly. No code, no confirmation, no animation, and one hard haptic thud so you know it fired without looking.
Shake again to come back
A code pad appears. Enter your code and you are back where you were. No input for five seconds and the pad clears itself.
A cooldown stops the bounce
Motion is ignored briefly after a hide, so one hard shake cannot bounce you straight back into the real vault.
Every failure fails toward privacy
Too hard, too soft, wrong count, by accident: every outcome is either boring photos or a keypad nobody present can fill.
The decoy is a real gallery
It ships with filler so it is never empty. Pro lets you swap in your own photos, which holds up better.

The decoy hides what is in the vault, not that you have one. The app is on your home screen with its own name and icon.

A gallery of private photosThe same gallery after a shake, holding ordinary photos

What deniability is not

It protects against a person, not an expert with tooling. No vault app should claim otherwise.

It is also not a legal strategy. In some places you can be compelled to produce a passcode, and misleading an official can be a separate offence from whatever they were looking for. If your situation involves a border, a court or an investigation, the right tool is a lawyer.

Questions

One shake, and it was never there

No account. Nothing leaves your phone.