What is a duress pattern? Decoy vaults explained

Most privacy features assume the threat is someone sneaking a look. A duress pattern is for a different moment: someone is standing next to you and telling you to open the app. Refusing is suspicious, and a locked folder already tells them there is something to find. The duress pattern gives you a third option.

The short version

You set up two patterns. Your real pattern opens your real vault. Your duress pattern looks like any other unlock, but it opens a decoy vault with ordinary contents, like holiday photos and a packing list. To the person watching, you did exactly what they asked.

The idea is old. Alarm systems have had duress codes for decades: a code that disarms the alarm in front of an intruder while silently calling for help. Security people also call it a panic code or a decoy password. In photo vault apps you will see it named decoy vault, fake PIN, fake password or duress mode.

Decoy vault vs duress pattern

These two terms get mixed up, and the difference matters.

A decoy vault is just a second vault with a different password. Drawing the decoy pattern shows the decoy, but your real vault is still sitting there, and its pattern still works. If the person keeps pushing, nothing has changed.
A duress pattern does something when it is drawn. In Umbra, drawing it opens the decoy and, at the same moment, removes the way into every other vault from the phone. After that, even you can’t open them from the unlock screen, so you can’t be pressured into it.

A decoy is a costume. A duress pattern is a costume plus locking the real door behind you.

How it works in Umbra

Umbra’s duress pattern is part of Umbra Pro. You set it up from Settings, under Hidden vaults, and the setup walks you through every consequence before you can turn it on.

Pick what it opens. The recommended choice is a new decoy vault, named Travel by default. You can add a few ordinary photos straight away so it looks lived-in.
Draw the duress pattern twice. It has to be different from every other pattern on the phone. Choose one you could draw under pressure.
Decide what happens to your other vaults. By default their patterns are removed and their files stay on the phone. You can also choose "Also destroy their data", which erases their files from the phone too.
Read the summary and confirm. Umbra lists exactly what will happen, step by step, and you tick "I understand what happens" before it switches on.

When the duress pattern is drawn:

The decoy opens exactly like a normal unlock.
Every other vault on the phone loses its pattern. Drawing your real pattern now shows "Nothing opened.", the same thing any wrong pattern shows.
Nothing on screen shows that anything happened. The unlock screen never lists vaults, so there is no vault count that suddenly changed.

Why "hidden" matters as much as "decoy"

A decoy only works if nobody can tell there is more. Plenty of apps show a list of vaults, a count of items or a menu that gives the game away. Umbra’s unlock screen is an empty grid of dots. Each pattern opens its own vault and nothing lists them. On disk, vault keys are stored under names derived from the keys themselves and mixed with random decoys. With Pro, Umbra doesn’t even keep a count of vaults on the phone.

That is what makes the duress story believable: there is no visible second door for someone to ask about.

When a duress pattern helps

A partner, parent or friend insists on seeing what is in the app.
Someone grabs your phone and demands you unlock "that vault app".
You are in a situation where refusing outright would make things worse, and you need the moment to pass.

Its limits, honestly

A duress pattern is a strong tool, not magic. Worth knowing before you rely on it:

It can’t hide that Umbra is installed. A disguise icon (also Pro) can make Umbra look like a calculator or another everyday app, which helps, but a determined person can still find the app.
The decoy has to be believable. An empty vault is suspicious. Put real, boring photos in it.
Your recovery phrases matter more. After a duress unlock, your phrases are the only way back. Store them somewhere safe and off the phone before you depend on this.
Know the law where you are. In some countries, deliberately misleading officials can be an offence. A duress pattern is a personal safety feature, not legal advice.
Test it first. Make a test vault, set a duress pattern, draw it, and recover the test vault with its phrase. Five minutes now saves panic later.

If Pro lapses, an existing duress pattern keeps working. A safety feature shouldn’t stop working at the worst moment because a subscription ended. Only setting it up or changing it needs Pro.

Questions

Is a duress pattern the same as a fake PIN?

Close, but not always. Many apps call their decoy feature a fake PIN, and in most of them it simply opens a second space while the real one stays reachable. Umbra’s duress pattern also removes the way into your other vaults when it is drawn, so they can’t be opened from that phone until you use their recovery phrases.

Can someone tell that I used the duress pattern?

Not from the screen. The decoy opens like a normal unlock and nothing says vaults were removed. Someone with forensic tools and time could learn more about any phone, which is why Umbra also hides how many vaults exist and encrypts every file with its own key.

Do I lose my real photos?

No, unless you turned on "Also destroy their data". By default the files stay on the phone, encrypted, and each vault comes back when you enter its recovery phrase. If you chose to destroy the data, you restore from an encrypted backup with the phrase.

Is the duress pattern free?

Setting it up is part of Umbra Pro, which has a 7-day free trial on the yearly plan. Encryption, hidden vaults, screenshot blocking, the break-in log and backups are free.

Does it work on Android?

Yes. The duress pattern works the same way on iPhone, iPad and Android. The only difference is backups: on Android you recover destroyed data from an exported backup file, since iCloud is an Apple service.