Settings

Two PINs, two workspaces

Create two vaults with two different PINs. One opens your real workspace; the other opens a decoy that looks just as ordinary. Both are AES-256-GCM ciphertexts of the same shape, so the file itself does not reveal which is which, or that a second vault exists at all.
Primary vault
Decoy vault
Unlock Terminal
WORKSPACE: [LOCKED]
No vault loaded
Seal a pair of vaults above, then unlock with either PIN.

Make the decoy look lived-in

Prevents forensic byte-level inspectors from determining whether encrypted hidden partitions exist:
ENTROPY NOISE FILLER: ACTIVE (64 KB STATISTICAL WHITE NOISE)
Every byte of unused allocated browser storage is continuously padded with CSPRNG pseudorandom noise. Forensic tools inspecting disk blocks see only uniform high-entropy data, making it mathematically impossible to prove whether hidden vaults exist.