Sealby
Different PINs can reveal different vaults
Open your real vault, a harmless decoy or an empty vault. In the normal app interface, opening one does not list the others.
See how hidden vaults workDeniability & duress
Border zones are legally special: in many countries, agents can inspect devices with powers ordinary police do not have. Here is how travellers who cross with sensitive material think about it.
Different PINs can reveal different vaults
Open your real vault, a harmless decoy or an empty vault. In the normal app interface, opening one does not list the others.
See how hidden vaults workStrong until it is unlocked
A device passcode protects the phone, but one successful unlock exposes the apps and accounts inside it.
Adds a second lock
Useful against casual access, though the app may still reveal that protected content exists.
Often the safest preparation
Remove anything you do not need before a border crossing or other high-pressure situation.
Most legal systems treat the border as an exceptional zone: the state’s interest in controlling what enters is weighed differently than in domestic policing, and device searches often need less justification or none at all. Some countries publish thresholds ("reasonable suspicion" tiers for basic vs forensic searches); others leave it to officer discretion.
The practical consequence: the protections you assume from ordinary life may simply not apply for the minutes your phone spends at a checkpoint.
A basic inspection is a person navigating your unlocked phone: photos including the Hidden album, messages, email, notes, installed apps, and any cloud service that is logged in. A deeper (forensic) search can involve connecting the device to extraction tooling, with capabilities that vary by device, OS version and vendor.
Two things follow. First, "hidden from browsing" tricks — the Hidden album, renamed folders — do not survive even the basic version. Second, what is not on the device cannot be read from it: minimisation beats concealment.
The pattern used by people who cross often with professional obligations: decide what genuinely must be on the crossing device; move everything else off it before travel; keep what must travel in encrypted storage that does not advertise itself; and know, for your specific route, what refusal would cost you.
Deniable vaults fit the third step. Sealby’s design means each PIN opens its own vault and the total number of vaults is not recorded anywhere — so an unlocked phone shows a working app with whatever you chose to keep visible. No visible locked container inviting the next question.
If your device was out of your sight or connected to unknown equipment, treat that in proportion to your risk: change important passwords from another device, review logged-in sessions, and if the stakes are professional (sources, clients, patients), follow your organisation’s incident guidance. For most travellers most of the time, the crossing is uneventful — preparation is cheap precisely because you do it before, not after.
This article is general education, not legal advice. Border search powers differ significantly between countries and change through legislation and court decisions. If a crossing matters, check current official guidance for the specific countries involved, or consult a lawyer.
In many countries, yes — border search powers are commonly broader than domestic policing, and physical inspection of an unlocked device is routine in some places. The details (whether they can compel a passcode, copy data, or detain the device) vary a lot by country and are actively evolving.
It depends on where and who you are. Citizens generally cannot be denied entry to their own country, though the device may be detained. Non-citizens can be refused entry outright. Some countries also have laws that penalise refusing to provide access. Knowing the rules for your specific route beats any general answer.
A deniable vault changes what compliance reveals. If you are asked to unlock the phone and do so, agents see what is visible on the device. A vault that shows a harmless PIN’s content — and cannot be shown to contain more — means cooperation does not have to equal full disclosure. It is a mitigation, not immunity, and lying to border agents is its own risk; the point of deniability is that there is nothing to lie about.
Carry less. The most robust pattern is a travel-clean device: sensitive material lives in encrypted storage you can restore after arrival rather than on the device that crosses. Deniable local storage is the fallback for what genuinely must travel with you.
Download Sealby and protect what matters. Setup takes under a minute, and there’s no account to create.
iPhone & iPad · iOS 17+ · Free