the privacy identity basics
everything Cloaked does
- unlimited email aliases for every signup.
- password vault with TOTP codes and passkeys, autofilled on iOS.
- send + reply from your aliases, not just receive.
- block senders with one tap.
- end-to-end encrypted means even we can't see inside your vault — only your device can.
what decoy adds
and what Cloaked skips
- disposable emails on demand (like cloaked). plus an optional personal alias (yourname.decoys.me) where you can invent any prefix on the fly — gym@, netflix@, whatever you pick — which cloaked doesn't offer.
- your inbox never leaves your phone — we use on-device ai so we can surface promo codes, catch 2fa, and summarize mail. cloaked's aliases just forward to you and stop there.
- Decoy lets users choose which accounts and information an ai agent can access and for how long. every Decoy data access is recorded. cloaked has no agent surface.
- free for founding members — no $120/yr to hide your email.
side by side
where decoy wins, and where it doesn't.
disposable emails
a different email for every signup — so when a site gets breached or starts spamming, you burn the decoy, not your real inbox. send and reply from any of them.
decoy
unlimited, send + receiveCloaked
unlimited @cloaked aliases (random, not your domain)password manager + 2fa
passwords, 2fa codes, and passkeys in one place, autofilled on iOS — so you stop juggling an authenticator app to sign in.
decoy
passwords, TOTP, passkeysCloaked
passwords, TOTP, passkeysend-to-end encryption
end-to-end encrypted means even we can't read your data — it can only ever be read on your device. if we ever got breached, there's nothing readable to steal.
decoy
yesCloaked
yesmigration & import
move your whole vault over in one tap via apple's credential exchange (CXP) — and one tap moves it back out if you change your mind. no csv files, no lock-in.
decoy
CXP import from apple passwordsCloaked
csv import; CXP not announcedon-device ai
your inbox never leaves your phone — we use on-device ai so we can pull out promo codes, catch 2fa automatically, summarize what's new, and flag breach hints, all without shipping your mail to a server.
decoy
iOS 26 foundation modelsCloaked
no aiai agents
when an ai agent needs a login, inbox or personal detail, Decoy lets the user choose the exact accounts and information it can access and for how long. every Decoy data access is recorded.
decoy
MCP + user-controlled accessCloaked
not supported| what you get | decoy | Cloaked |
|---|---|---|
disposable emails a different email for every signup — so when a site gets breached or starts spamming, you burn the decoy, not your real inbox. send and reply from any of them. | unlimited, send + receive | unlimited @cloaked aliases (random, not your domain) |
password manager + 2fa passwords, 2fa codes, and passkeys in one place, autofilled on iOS — so you stop juggling an authenticator app to sign in. | passwords, TOTP, passkeys | passwords, TOTP, passkeys |
end-to-end encryption end-to-end encrypted means even we can't read your data — it can only ever be read on your device. if we ever got breached, there's nothing readable to steal. | yes | yes |
migration & import move your whole vault over in one tap via apple's credential exchange (CXP) — and one tap moves it back out if you change your mind. no csv files, no lock-in. | CXP import from apple passwords | csv import; CXP not announced |
on-device ai your inbox never leaves your phone — we use on-device ai so we can pull out promo codes, catch 2fa automatically, summarize what's new, and flag breach hints, all without shipping your mail to a server. | iOS 26 foundation models | no ai |
ai agents when an ai agent needs a login, inbox or personal detail, Decoy lets the user choose the exact accounts and information it can access and for how long. every Decoy data access is recorded. | MCP + user-controlled access | not supported |
be a nobody. get unlimited perks.
free for founding members. lock it in now.
switch to decoy if…
- you want disposable emails on your own domain — @decoys.me by default, or an optional personal alias (yourname.decoys.me) for prefixes you invent on the fly.
- you want promo codes, 2fa, and summaries pulled from your inbox on-device — cloaked’s aliases just forward mail and stop there.
- you want users to control which accounts and information an ai agent can access and for how long, with every Decoy data access recorded.
- you want to stop paying $120/yr to hide your email — decoy is free for founding members.
- you want CXP one-tap import from apple passwords, not a csv export-import dance.
or pick Cloaked if…
- •you want data-broker removal and $1m identity-theft insurance bundled in.
- •you need phone-number aliases with in-app calling and call-guard spam blocking.
- •you want cross-platform today — iOS, android, web, chrome — not iOS-first.
free for founding members
join the waitlist to lock in founding-member status. paid tiers come later — you stay free.
questions
is decoy really free compared to cloaked's $9.99/mo?
yes — free for founding members on the waitlist now. paid tiers come later, founding members stay free.
does decoy do data-broker removal and identity-theft insurance?
no. those are cloaked's specialty — if broker removal is your main reason for a privacy app, cloaked does it well. decoy is aimed at the upstream problem: stop handing your real email out in the first place.
how are decoy emails different from cloaked aliases?
cloaked gives you random @cloaked.email addresses. decoy's default works the same way — random, on-demand disposable emails on @decoys.me — plus an optional personal alias (yourname.decoys.me) where you can invent any prefix inline (gym@, netflix@, shopping@) and send + reply from any of them. forwards to any inbox you already use.
can i import my cloaked vault into decoy?
you can export cloaked to csv and bring that in. cloaked does not support CXP, so passkey transfer is manual. decoy supports CXP import from apple passwords and any CXP-compliant manager.
does decoy do phone-number aliases?
decoy focuses on emails, passwords, TOTP, passkeys, and on-device inbox ai. phone aliases are cloaked territory.
does cloaked have ai assistants like decoy?
no. cloaked has no MCP surface. Decoy ships an MCP server that lets users approve one request or standing access to selected accounts and information.
does decoy only work on iPhone?
today, yes — the decoy app is iOS (iPhone + iPad) with a safari extension on iOS and macOS. desktop and other platforms are in active development. your decoys already forward to whatever inbox you use on any platform (gmail, outlook, proton), and any ai agent can manage them from any device via MCP.