Plausible deniability in encryption, explained

Encryption answers one question very well: can someone read this without the key? Plausible deniability answers a harder, more human one: what happens when someone demands the key? This guide explains the concept, where it came from, how Velcrypt uses it, and where it stops working.

What plausible deniability means

Plausible deniability is the property that, even after you have opened something under pressure, no one can prove that you are holding anything back. You can say “that’s all there is,” and the system gives the other person no evidence to contradict you.

It matters because strong encryption moves the weak point from the maths to the person. If a file is protected by AES-256, nobody is going to break the cipher. They are going to ask you, insist, or threaten. Deniable designs try to make giving in partially a safe option.

A short history: hidden volumes

The idea became mainstream through disk-encryption software. Tools in the TrueCrypt and VeraCrypt family introduced the hidden volume: a second encrypted container tucked inside the unused space of a normal encrypted container.

The trick works because good encryption output looks like random noise, and so does the free space of an encrypted volume that has been filled with random data. One password opens the outer volume, which holds believable decoy files. A different password opens the hidden volume. Without that second password, the hidden part is indistinguishable from empty space.

Researchers also explored “deniable encryption” more formally, where the same ciphertext can be decrypted to different plaintexts with different keys. Hidden volumes were the practical, widely used version.

Over the years, the same researchers and practitioners have documented the limits too: operating systems leave traces (recent-files lists, thumbnails, logs), people behave inconsistently, and an adversary who knows the software supports hidden volumes may simply assume one exists.

How Velcrypt applies the idea

Velcrypt adapts the principle to a photo and document vault on iPhone. There is no outer and inner volume; instead:

• Every pattern is its own vault. Each vault has its own random 256-bit master key, unlocked by a key derived from that pattern.
• There is no list of vaults. The app keeps nothing that enumerates how many vaults exist.
• Unknown patterns open an empty vault. Draw a pattern Velcrypt has never seen and you land in a new, empty vault. There is no “wrong pattern” message.

The consequence is that a wrong pattern and a valid-but-empty vault look identical. If you open a vault for someone, there is nothing in the interface that shows other vaults exist. That makes a decoy vault a natural pattern of use rather than a special mode. The hidden vaults feature page shows how it works in practice.

A planned Premium feature, the duress pattern (coming soon), extends this: a special pattern would open a chosen vault and silently remove access to the others.

The honest limits

Deniability is easy to oversell. Here is what Velcrypt does not claim.

It doesn’t hide that the app exists

Velcrypt is on your Home Screen like any other app. iOS 18 and later let you hide apps in a hidden folder locked with Face ID, but that is an iOS feature, and anyone who knows your device passcode can still look. Seeing a vault app tells people you value privacy; it doesn’t tell them what you keep.

It doesn’t hide that encrypted data exists

Velcrypt does not claim to hide that encrypted data is stored on the device. Encrypted files take space, and iPhone Settings shows how much storage each app uses. A forensic examination of a device could show that the app holds more encrypted data than the vault you opened. It can’t decrypt that data without the pattern, but “there is more here” may be visible to an expert.

It can’t undo copies elsewhere

If a photo still exists in your Photos library, Recently Deleted, iCloud or a chat thread, the vault’s deniability is irrelevant. Remove the originals after importing.

It can’t stop observation

If someone watched you draw your real pattern, or filmed the screen, deniability is gone. Draw in private and shield the screen.

It is not a legal strategy

In some countries, refusing to disclose keys or misleading officials can carry penalties. Deniability is mainly useful against informal pressure: a jealous partner, a thief, a nosy relative. For anything involving authorities, read the border-crossing guide and get proper legal advice.

Deniability vs secrecy: two different promises

It helps to separate the two ideas, because they are often blurred in marketing.

	Secrecy (encryption)	Deniability
The question it answers	Can someone read this without the key?	Can someone prove more exists than you showed?
What it relies on	Mathematics and key handling	Indistinguishable design and believable behaviour
How strong it is	Very strong with AES-256 and good key derivation	Situational; depends on the observer and the context
What breaks it	Weak secrets, leaked keys, copies elsewhere	Storage size, forensic traces, hesitation, observation

Encryption keeps your content unreadable in almost every scenario. Deniability is a softer, social layer on top: valuable in the moment, but never something to bet everything on.

Making deniability credible

Technology supplies the possibility; your behaviour supplies the plausibility.

1. Keep the vault you’d open lived-in. Real albums, recent items, a believable purpose.
2. Match the story to the storage. A decoy with a handful of documents sits oddly next to many gigabytes of app storage.
3. Don’t hesitate. Practise the pattern you would open until it is automatic.
4. Avoid traces. Don’t name albums elsewhere after what you hide, and don’t leave originals in other apps.

Where Velcrypt fits

Velcrypt combines deniable structure with strong encryption: AES-256-GCM via Apple CryptoKit, keys derived from your pattern with PBKDF2-HMAC-SHA512 (at least 600,000 iterations), and per-file keys derived with HKDF. Everything stays on the device, with no account and no server that could reveal how many vaults you have. The encryption page has the details, and the security overview lists the threats it is not designed to stop.