Create as many vaults as you like
Each vault is fully independent, with its own PIN, pattern or passphrase and its own contents. There is no “main” vault that knows about the others.
Deniability
Hand over your phone. Reveal nothing.
Sealby keeps multiple independent vaults behind different PINs. Open a harmless one under pressure — the rest stay invisible, because nothing can prove they exist.
Deniability, at a glance
- A different PIN opens a different, fully independent vault
- No vault list or count is stored anywhere — the number of vaults is forensically undetectable
- Unrevealed vaults are indistinguishable from random data
- Optional duress PIN irreversibly wipes hidden vaults when entered
- Deniability protects the existence of data — it can’t stop someone watching you type
- 2·9·4·1·0·6 Everyday vault
- 8·3·5·2·9·1 Hidden vault
- 6·0·7·3·4·8 Work vault
- 4·9·1·6·2·7 Decoy vault (Duress mode) — deletes all other vaults when opened
- 7·1·3·9·5·2 Looks identical to nothing
No index, no count — the number of vaults is undetectable.
Deniability that’s structural, not a setting.
A PIN doesn’t unlock — it chooses
Entering a PIN doesn’t “unlock the app”; it derives the keys for one specific vault. The right input reveals one vault and nothing about any other.
Everything else looks like noise
Unrevealed vaults are indistinguishable from random data. There is no index, no list, and no count of vaults stored anywhere to find.
Reveal one. Keep the rest invisible
Under pressure, open an innocuous vault. Because nothing proves another exists, you can cooperate without exposing what matters.
Or set a duress PIN that destroys
Assign a duress passcode that silently and irreversibly wipes your hidden vaults the instant it is entered — so a forced unlock erases what matters instead of revealing it.
For moments when “just unlock it” isn’t safe.
Crossing borders
Show a clean device at a checkpoint without surrendering your private life.
Journalists & sources
Protect contacts and material even if a device is inspected or seized.
At-risk situations
Coercion loses its leverage when there’s no way to prove anything is hidden.
What deniability is — and isn’t
Deniability protects the existence of your data: no one can prove a hidden vault is there. It is not a defence against someone who watches you type a PIN, and it can’t recover a vault whose phrase is lost. We’re precise about this on purpose — the protection is real because we don’t overstate it.
Common questions
What is a deniable (hidden) vault?
A separate vault that opens only with its own PIN. Because vaults are indistinguishable from random data and there is no stored list of them, no one can prove how many vaults you have — or that a hidden one exists at all.
Can someone tell how many vaults I have?
No. Sealby keeps no global registry or index of vaults, and unrevealed vaults are indistinguishable from unused random data. The vault count is forensically undetectable.
What is a duress PIN?
An optional passcode that, when entered, silently and irreversibly wipes your hidden vaults — so a forced unlock destroys what matters instead of revealing it. You choose whether to set one.
Related: the security model ·crossing borders ·staying safe at home
Keep what matters truly invisible.
Set up your first hidden vault in under a minute — free, with no account.
Download on the App Store
iPhone & iPad · iOS 17+ · Free