Create as many vaults as you like
Each vault is fully separate, with its own PIN, pattern or passphrase and its own contents. There is no main vault that knows about the others.
Deniability
Hand over your phone. Reveal nothing.
Every PIN opens its own vault. If you’re forced to unlock Sealby, open a harmless vault, and the rest stay out of sight. Nothing on the phone lists or counts your vaults, so nothing points to a hidden one.
Deniability, at a glance
- A different PIN opens a different, fully separate vault
- No list or count of vaults is stored anywhere, not on the device and not in the cloud
- A vault you haven’t opened is stored as identical encrypted blocks
- An optional duress PIN (Premium) removes your other vaults from this device when entered
- Deniability hides that data exists. It can’t stop someone watching you type your PIN
- 2·9·4·1·0·6 Everyday vault
- 8·3·5·2·9·1 Hidden vault
- 6·0·7·3·4·8 Work vault
- 4·9·1·6·2·7 Decoy vault (duress PIN, Premium): entering it removes your other vaults from this device
- 7·1·3·9·5·2 Any other PIN opens an empty vault
No list, no count. Nothing records how many vaults exist.
Deniability is built in. It is not a setting.
A PIN doesn’t unlock the app. It opens one vault.
Your PIN, combined with a key kept in your device’s Secure Enclave, opens one specific vault. It reveals nothing about any other.
Everything else looks the same
A vault you haven’t opened is stored as identical encrypted blocks, like every other vault. There is no list and no count of vaults stored anywhere.
Reveal one. Keep the rest out of sight
If you’re forced to unlock Sealby, open a harmless vault. Nothing in the app points to another one, so you can cooperate without exposing what matters.
Or set a duress PIN (Premium)
A duress PIN opens a harmless decoy vault and removes your other vaults from this device the moment it’s entered, so a forced unlock reveals nothing that matters. With Encrypted Backup on, you can restore them later with their recovery phrases.
For moments when “just unlock it” isn’t safe.
Crossing borders
Unlock your phone at a checkpoint without handing over your private life.
Journalists & sources
Protect contacts and material even if a device is inspected or seized.
At-risk situations
Pressure loses its power when nothing on the device points to anything hidden.
What deniability does, and what it doesn’t
Deniability hides that your data exists: nothing stored on the phone points to a hidden vault. It doesn’t protect you from someone who watches you type your PIN, and it can’t recover a vault whose recovery phrase is lost. We say this plainly on purpose. The protection is real because we don’t overstate it.
Common questions
What is a deniable (hidden) vault?
A separate vault that opens only with its own PIN. Vaults are stored as identical encrypted blocks, and no list of them is kept, so nothing records how many vaults you have or that a hidden one exists at all.
Can someone tell how many vaults I have?
No. Sealby keeps no list or count of vaults anywhere, and vaults you haven’t opened are stored as identical encrypted blocks.
What is a duress PIN?
An optional PIN, available with Premium, that opens a harmless decoy vault and removes your other vaults from this device, so a forced unlock reveals nothing that matters. With Encrypted Backup on, you can restore those vaults later with their recovery phrases. You choose whether to set one.
Related: the security model ·crossing borders ·staying safe at home
Keep what matters out of sight.
Set up your first hidden vault in under a minute. Free, with no account.
Download on the App Store
iPhone & iPad · iOS 17+ · Free