[FEATURE] Decoy Vault #1144

New Issue

OVERLORD · 2025-10-09T17:05:25+03:00

OVERLORD commented

2025-10-09 17:05:25 +03:00

Originally created by @knightian on GitHub.

I had a thought about a useful feature.

What if Vaultwarden could detect a wrong password and use it to supply a decoy vault? So you have an account (email) that has it's normal master password, but you have also another master password attached to the same account (email) that if you supply under coercion it unlocks a decoy vault full of decoy password values.

Originally created by @knightian on GitHub. I had a thought about a useful feature. What if Vaultwarden could detect a wrong password and use it to supply a decoy vault? So you have an account (email) that has it's normal master password, but you have also another master password attached to the same account (email) that if you supply under coercion it unlocks a decoy vault full of decoy password values.

OVERLORD closed this issue

2025-10-09 17:05:26 +03:00

OVERLORD commented

2025-10-09 17:05:29 +03:00

@BlackDex commented on GitHub:

Sounds like a truecrypt feature.
But that isn't something which can be done by this project it self. Since the clients need to support that too.

Also, if you were coerced, they would probably check the results first and keep trying to get it out of you.

@BlackDex commented on GitHub: Sounds like a truecrypt feature. But that isn't something which can be done by this project it self. Since the clients need to support that too. Also, if you were coerced, they would probably check the results first and keep trying to get it out of you.

OVERLORD referenced this issue

2025-10-09 17:22:30 +03:00

WebVault 2.16 throws a 404 when building trying to create an organisation. #1611

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/vaultwarden#1144