Photo Vault Apps With a Decoy Passcode (2026): Which Ones and How They Compare

About one in three photo vault apps offers a decoy passcode. Of 69 photo vault apps we checked on the US App Store on October 30, 2026, 23 (33%) describe a decoy, fake or panic passcode that opens a harmless vault instead of the real one. 14 of them also describe break-in alerts. But 65% of the decoy apps also declare “Data Used to Track You”. Here’s the comparison.

Disclosure: we make Easy Vault, which has a decoy vault and isn’t included in this data. Figures come from the apps’ public App Store pages as of October 30, 2026. Part of our photo vault app privacy report; download the dataset.

How a decoy passcode works

You set two passcodes. Your real one opens your real vault. The decoy opens a second vault you fill with harmless photos. If a partner, friend or anyone else pushes you to open the app, you enter the decoy, and the app shows nothing that suggests a second vault exists.

Decoy vaults by the numbers

Measure23 apps with a decoyAll 69 vault apps
Also describe break-in or intruder alerts61% (14)33%
Declare Data Used to Track You65%62%
Declare Data Not Collected17% (4)20%

The most-rated vault apps that describe a decoy

AppRatingsBreak-in alertsStrongest privacy category declared
Private Photo Vault - Pic Safe1,018,572YesData Used to Track You
Secret Photo Album - SA38,907YesData Used to Track You
PV - Secret Photo Album30,290–Data Used to Track You
Calculator# Hide Photos Videos28,933–Data Used to Track You
Secret Photo Vault Lock Photos27,392–Data Not Collected
SV - Private Photo Vault PRO26,336YesData Used to Track You
Safe Lock - Hidden Photo Vault24,917YesData Not Collected
Secret photos - KYMS17,330–Data Used to Track You
Secret Photo Album · 1Locker13,707–Data Not Linked to You
InCalc - Photo Lock10,013YesData Used to Track You

“Describes a decoy” means the app’s App Store description mentions a decoy, fake or panic passcode. “Break-in alerts” means it mentions intruder or break-in photos. An app may offer a feature without describing it.

What to check in a decoy vault

  1. It looks identical. The decoy should open to the same screens as the real vault, with nothing marking it as fake.
  2. No sign of a second vault. Settings in the decoy shouldn’t reveal the real one.
  3. Face ID doesn’t give you away. If Face ID always opens the real vault, someone holding your phone up to your face skips the decoy. Look for an app that doesn’t start Face ID automatically when a decoy exists.
  4. The real vault stays encrypted. A decoy is only as good as the lock on the real vault. See do photo vault apps actually encrypt?
  5. A duress option, if you need it. Some apps can remove the real vault from the device when the decoy is opened, so it can’t be forced open later.

Easy Vault, which we make, checks all five: an identical decoy vault, Face ID that waits for a tap once a decoy exists, AES-256-GCM encryption, and an optional Vanish mode that removes the main vault from the device when the decoy is opened, with your encrypted iCloud backup kept for restoring later. See how to keep private photos private.

Methodology

From the 69 photo vault apps in our October 30, 2026 App Store study, we counted apps whose description mentions a decoy, fake passcode, duress or panic mode, and separately intruder or break-in alerts. Privacy labels come from each app’s App Store page. Full method: privacy report.

Frequently asked questions

What is a decoy passcode in a photo vault app?

A second passcode that opens a separate, harmless vault instead of your real one. If someone pressures you to open the app, you enter the decoy passcode and they see only what you chose to put there.

How many photo vault apps have a decoy passcode?

About one in three. In October 2026, 23 of 69 photo vault apps on the US App Store (33%) described a decoy, fake or panic passcode in their description, including the most-rated vault app, Private Photo Vault.

Do decoy vault apps also take break-in photos?

Many do. Of the 23 apps describing a decoy passcode, 14 also described break-in or intruder alerts, which photograph someone who enters a wrong passcode.

What makes a good decoy vault?

It should look exactly like the real vault, give no sign that another vault exists, and keep your real vault encrypted. Some apps also offer a duress option that removes the real vault from the device when the decoy is used.