Shadow Layers
Last updated
Last updated
Q. What is a Shadow Layer? A. An independent, password-protected layer inside a vault, with its own keys and files. Which layer opens depends only on which password you type. It's how Oten Drive provides plausible deniability. See How Shadow Layers work.
Q. How do I switch between layers? A. You don't switch in-app. Lock the vault and unlock again with the other layer's password. There's deliberately no layer menu — that's what keeps layers undetectable.
Q. Can someone tell I have a hidden layer? A. Not from the app or the server. The unlock prompt is identical for every layer, there's no counter or list, and the server can't tell how many layers exist. The risk is behavioral, not technical — see What Shadow Layers do not protect against.
Q. Does my Drive have Shadow Layers? A. No. Shadow Layers are a Vault feature. If you need deniability, create a vault.
Q. How many vaults and layers can I have? A. Multiple vaults per account, and multiple layers per vault. Each is independently encrypted.
Q. What's the "vault key storage choice" when I create a vault? A. Convenience (the vault key isn't stored; reset relies on your keys) or Security (you store and manage the vault key). Your choice determines how a future password reset works.
Q. If one vault is compromised, are the others exposed? A. No. Each vault has its own independent key hierarchy. Compromising one does not expose another — and neither does compromising one layer expose another layer.