Skip to content

DuressDecoy: Hide Sensitive Spaces

DuressDecoy is the safeword response in Sovereign. Mark selected Spaces as sensitive and configure a safeword PIN distinct from your normal PIN. When you open the Safe with the safeword PIN, the sensitive Spaces are hidden and non-sensitive Spaces remain available.

How it works

  • Choose sensitive Spaces in advance.
  • The server recognizes the safeword authentication and restricts the session's view.
  • You open the same Safe, not a separately created decoy Safe.
  • Sovereign hides the selected Spaces without deleting them. Normal access can show them again.

The corresponding HighRisk behavior is LifeSafe, which permanently deletes marked sensitive Spaces. Both tiers have the same price and included allowances; choose based on whether the marked data should survive a safeword event.

Plan what remains visible

Review your non-sensitive Spaces and keep only the information you intend to expose in that view. The safeword is not a silent alarm and does not guarantee safety under coercion. An adversary who already knows the Safe's contents, or controls a client that has seen them, may have information outside the safeword session.

Hiding a Shared Space in your Safe does not hide it from other participating Safes or erase copies they already hold.

Getting started

Follow Using Duress Decoy Mode. Before changing Sovereign to HighRisk, read the deletion warning and review every sensitive Space.

See Sovereign vs. HighRisk and DuressDecoy Security.