A browser is not a VPN. Hidden tabs stay on the device behind the real passcode. They do not hide your IP address from sites you visit or from your network operator. Tracking protection is list-based and not absolute: known ads, analytics, and social trackers from bundled lists are blocked on the device, but no blocker catches everything. Private Browser Incognito is rated 17+ for unrestricted web access and is intended for adults.
People search for hidden tabs when they mean two different things. One is a session that does not write a history file. The other is a session that does not appear when someone else opens the app. Private Browser Incognito does the first by design: every tab is a private session in memory. There is no browsing history feature and no file to clear. The second is App Lock, and if you need an empty window instead of a closed door, a decoy passcode in Stealth Suite.
Hidden, in this product, is behind the real six-digit passcode. It is not a cloud folder, not a sync account, and not a network cloak. This article separates the real stack from the decoy window, says what panic does to both, and keeps the icon colors honest. If you want the decoy’s empty scene in more detail, read Decoy Passcode: A Second Browser That Shows Nothing.
Where the real tabs actually live
Tabs are in-memory private sessions. Cookies and caches exist for the life of that session. One-tap erase closes every tab and destroys cookies, cache, and site data. There is a home-screen quick action. Stealth Suite adds an Auto-Erase timer if you want the session to die after you leave. None of that is a history list you hide in Settings. The file never appears.
App Lock with a six-digit passcode and Face ID sits in front of that session. It is free for everyone in the shipping default. Enter the real code, or use Face ID if you enabled it, and the tabs are where you left them. Fail, and they stay off the glass. The passcode is never stored. It becomes the key. Forgotten passcodes cannot be recovered. If you forget it, data sealed under it is permanently inaccessible, which includes the tabs you were calling hidden.
There are no accounts and no sign-in. There is no app server for browsing. The App Store privacy label is Data Not Collected: no analytics SDK, no ads in the app, no third-party SDKs. We cannot show you a tab we never received. Hidden is local. For the lock itself, see App Lock With Passcode and Face ID.
Real passcode versus decoy
The real passcode opens the real stack. A decoy passcode is a second code. Entering it at the lock screen opens a clean, empty browser. Real tabs stay hidden. There are no downloads in that session, no settings trail, and no sign Stealth Suite exists in the decoy. The person holding the phone can browse in a fresh window that looks like a first launch. They are not looking at your actual tabs.
That empty window is still a real web browser, rated 17+. If someone uses it, the visit has the usual network limits. When they return the phone, you unlock with the real code. The real session is where you left it, unless you erased it, panicked, or fired self-destruct. The decoy does not snapshot the real tabs into a second copy. It is a different scene, not a mirror.
Lock without a decoy is enough when closed is acceptable. The decoy is for shared phones and borrowed devices, when refusing to open the app is itself a signal. Shared-iPhone patterns are collected in Private Browsing on a Shared iPhone. Mix the two codes when you are calm and you will open the real stack when you meant the empty one. We cannot tell you which number you intended.
What hidden does not mean
Hidden does not mean anonymous. Sites you opened in the real session already had their logs. Your network operator already had destinations. On-device blocking still uses bundled Disconnect lists that ship in the app. No blocker catches everything. Per-site exceptions exist. HTTPS-Only Mode is on by default and asks before falling back to insecure HTTP. Search suggestions stay off until you ask. Search can be Google, Bing, DuckDuckGo, Wikipedia, or a custom engine.
We do not claim fingerprint spoofing as a product, Tor, a proxy, or IP hiding. Private Browser Incognito is iOS only. It is not Android, not desktop, and not a password manager. Icon colors in Stealth Suite recolor the shield: Midnight, Ocean, or Ember. Same mark, your color. They are not calculator, notes, or weather disguise icons. Recoloring the icon does not hide tabs. The passcode does.
Hidden also does not mean backed up. Vault files are a separate AES-256 store, excluded from backups, and session erase does not clear them. Tabs are not that store. If you needed a page later, it is your job to keep the URL somewhere else before erase or panic. There is no history file to mine after the fact.
Panic, self-destruct, and an empty stack
A panic code at the lock screen silently wipes tabs, the entire vault, and the break-in log, then opens what looks like a fresh start. Hidden tabs do not survive that. The fresh start is a look, not a recovery. Irreversible. Erased data cannot be recovered, by you or by us. Do not configure a panic code you will type when you meant the real lock.
Self-destruct fires after too many wrong codes. Saved tabs are destroyed, and optionally the vault with them. An intruder who is guessing gets an empty browser. You also get an empty browser. Break-in alerts can timestamp failed unlocks. Intruder Photo is off until you enable it. Camera permission is asked when you turn that feature on, never at the lock screen. Photos may depict other people. Local law applies. None of those tools hide tabs. They record or destroy.
Stealth Suite is optional Apple IAP: monthly $4.99, yearly $19.99 with a 7-day trial, or lifetime $49.99. If a subscription lapses, protections you already enabled keep working and the vault stays accessible. A lapse does not publish hidden tabs. It also does not add a back door. The real passcode is still never stored.
Choosing the right hiding place
If you only need the app shut, use the free lock. If you need to hand over an empty window, use the decoy. If you need the session gone but the vault kept, use one-tap erase. If you need the vault gone too, use panic. If you need a file out of Photos, use the vault, not a tab. Those are four different places a page or a file can be. Calling all of them hidden tabs blurs the product.
The 17+ rating still means unrestricted web access. You are responsible for what you visit and for using the app lawfully. A hidden tab is still a tab that loaded a URL. The lock changes who sees it on the phone. It does not rewrite the site.
If you are comparing outcomes at the lock screen, a compact table is more useful than the word hidden.
| What you enter | What you see | Where the real tabs are |
|---|---|---|
| Real passcode or Face ID | The real session | On screen |
| Decoy passcode | A clean, empty browser | Hidden behind the real key |
| Nothing (lock holds) | The lock screen | Closed. Free App Lock |
| Panic code | A fresh-start look | Wiped, with the vault and the log |
Use that table when someone asks for hidden tabs. The free product already withholds a history file and can keep the session closed. Stealth Suite adds the empty window and the wipes. Private Browser Incognito is built so there is nothing to trust us with: no accounts, lists on device, passcode as the key. Sites still see requests. Phones still get borrowed. Hidden is a lock. It is not a vanishing act on the network, and we do not sell it as one.
Private Browser IncognitoFree on the App Store. No history, on-device blocking, one-tap erase.
Get the app
Frequently asked questions
Where do hidden tabs go on iPhone?
They stay in the real session behind App Lock. Every tab is a private session in memory. There is no history file. The six-digit passcode and Face ID open that session. A decoy passcode, if you set one in Stealth Suite, opens a different, empty browser instead. Hidden means not on the glass for the other person, not missing from the network.
What is the difference between hidden tabs and a decoy browser?
Hidden tabs are the real ones, sealed behind the real passcode. A decoy is a second code that opens a clean, empty browser so you can hand the phone over. Real tabs stay hidden during the decoy. The decoy does not copy them and it does not sync them. There is no sign Stealth Suite exists in that empty window.
Can I hide tabs without Stealth Suite?
Yes, in the simple sense. App Lock with a six-digit passcode and Face ID is free and keeps the real session closed. That is enough when refusing to open the app is acceptable. The decoy empty browser is Stealth Suite. Without Stealth Suite, the lock screen either opens the real session or stays closed.
Does locking hidden tabs hide my IP address?
No. A browser is not a VPN. Sites you visit and your network operator can still see your IP. Hidden tabs are a lock-screen fact. They do not retract requests that already left the device, and they do not change your public IP. Tracking protection is list-based and not absolute.
What happens to hidden tabs if I enter the panic code?
They are wiped, along with the entire vault and the break-in log. The app then opens what looks like a fresh start. That is irreversible. Erased data cannot be recovered, by you or by us. Panic is Stealth Suite. One-tap erase destroys the session and leaves the vault. Panic does not leave the vault.