VEYRNOX · Learn · Duress PIN

Duress PIN

A duress PIN is a secondary passcode that unlocks a decoy view of a wallet when the user is under physical or psychological coercion. Entering it looks identical to a normal unlock, but reveals a curated fake state instead of real holdings.

How it works

A duress PIN is registered separately from the primary PIN and mapped to a distinct wallet state — a decoy account with small, plausible balances. When the wallet detects the duress code, it derives a different KEK, decrypts only the decoy vault, and hides the real vault. To an attacker watching the screen, the two experiences are indistinguishable — same balance surface, same transaction history, same asset icons.

Why it matters

The $5 wrench attack bypasses every cryptographic control a wallet has. Cold storage, hardware wallets, and strong PINs all fail once the owner is forced to unlock at gunpoint. A duress PIN gives the user a survivable answer: hand over what looks like the whole wallet, satisfy the attacker, and preserve the real funds.

Related concepts

Frequently asked questions

Is a duress PIN the same as a decoy wallet?

The duress PIN is the trigger; the decoy wallet is the state it unlocks. Together they form Coercion Resistance.

Can an attacker tell the duress PIN was used?

No. The decoy view mirrors the real interface with plausible values you choose.

Does the duress PIN wipe my real wallet?

No. The real vault stays encrypted — recoverable later from your Shamir shards.

In Veyrnox

Veyrnox ships duress PIN as part of Coercion Resistance on Safety Plus. The decoy vault is a real, spendable wallet with a small balance you fund yourself, so transactions succeed under observation. The real vault is unreachable during a duress session.

Learn more →