First Release
Pre-release
Dont Xpose Me 1.0.0 is the first release. It adds a second numeric PIN on AOSP-like lock screens. The real PIN still unlocks the phone. The duress PIN is for Magisk and LSPosed.
Test mode is the default. A matching PIN shows up under Test attempts in the app, and the wipe stays off until you arm. Arming asks for a biometric or the real device credential, and it is refused unless Magisk su works, the LSPosed hook has a recent heartbeat, the module is scoped to android and SystemUI, deleteAllKeys exists, and the PIN is at least 4 digits. The PIN cannot be your real lock PIN or all one digit. Only a salted SHA-256 hash is stored.
Armed mode is irreversible. A match calls AndroidKeyStoreMaintenance.deleteAllKeys() (one retry), requests a recovery userdata wipe, then shuts down if the device is still running. There is no file shred. Patterns and passwords are ignored.
Requirements: Android 12 or newer, Magisk, and LSPosed (Zygisk, Xposed API 93+), on an AOSP-like SystemUI such as Pixel or Lineage. This is a KeyMint wipe, not GrapheneOS Weaver or secure-element duress.
Stay in test mode until a match shows under Test attempts. Try an armed wipe on a spare device before you rely on it.