Decoy safe behavior in Blopman
Blopman is designed so a wrong unlock attempt can open a decoy safe with placeholder content instead of advertising that you typed the wrong secret.
Many vault apps show “Wrong password.” That message tells anyone watching that a real vault exists and that they have not found the correct secret yet.
Blopman’s approach
Depending on your setup, an incorrect PIN or pattern can open a decoy safe—a separate space with non-sensitive placeholder content—rather than flashing an error. The goal is to reduce casual pressure and shoulder-surfing risk, not to defeat a forensic examiner with a full device image.
Be honest about limits
- A decoy helps against someone who briefly borrows your unlocked phone or demands you “open the vault app.”
- It does not make encrypted files vanish from storage copies or backups in every threat model.
- Fill a decoy with believable everyday items if you use one; an empty decoy looks fake.