A browser is not a VPN. Keeping a file out of Photos does not hide your IP address from sites you visit or from your network operator. Tracking protection is list-based and not absolute. Private Browser Incognito is rated 17+ for unrestricted web access and is intended for adults. The vault is optional Stealth Suite. Session erase does not clear it.
Photos is good at what it is for. It collects pictures, plays them back, and makes them easy to find. That is a library. A library is the wrong place for a file you saved because you did not want it in a library.
Private Browser Incognito splits the jobs. Pages live in a forgetful session with no history file. Files you choose to keep, with Stealth Suite, land in an encrypted vault inside the app. They never appear in Photos or Files. This article is why that split exists, what the library still does well, and what a vault cannot pretend to be. For the store itself, read An Encrypted Download Vault on iPhone.
What Photos is designed to do
The Photos app is a gallery with memory features. It surfaces recent shots. It offers sharing. Other apps can ask to look at the library. A person who unlocks the iPhone can open Camera Roll without opening your browser. Widgets and TVs can show a tile you forgot was there.
None of that is a defect. It is the product. If you took a picture of a birthday cake, you want that machine. If you saved a file from a page you would rather not replay in a shared kitchen, you do not. Mixing those intents in one shelf is how private downloads become household downloads.
Files is a cousin, not an escape hatch. A document that lands in a user-visible folder is still on a shelf someone can browse. The vault’s claim is narrower: the file is not on those shelves. It is inside this app, sealed, opened from here.
What a vault is designed to do
A vault is a sealed store. AES-256, no plain copy on disk, excluded from backups. You do not get a second copy on a server we run, because we do not run a browsing server. There are no accounts. The App Store privacy label is Data Not Collected.
App Lock with a six-digit passcode and Face ID is free. It sits in front of the real session. When you use the vault, that lock is also in front of the files. The passcode is never stored. It becomes the key. Forgotten passcodes cannot be recovered. If you forget it, data sealed under it is permanently inaccessible. That is not a support article we can reverse later.
Cipher details without slogans live in AES-256 in the Vault, Explained Without Hype. The useful sentence for this page: ciphertext on disk is not a thumbnail in Camera Roll. Photos cannot show what it cannot see as a photo.
Shared phones and surprise scrolling
The failure mode is ordinary. Someone opens Photos to find a receipt and lands on a clip you saved. Someone plugs the phone into a TV. Someone grants another app access to the library for a collage. None of those people had to pick the browser lock. They picked the gallery.
A forgetful browser already refuses to keep a history list of pages. That does not help if the file from the page is sitting in Photos. Residue moved. It did not disappear. The vault keeps the file in the same app that downloaded it, behind the same lock, out of the gallery’s habits.
Erase does not change that picture. One-tap erase destroys the browsing session. It leaves vault files where they are. If you saved into Photos instead, erase in the browser would not reach the library anyway. You would still have a tile in Camera Roll and a cleanup job in another app. The architectural fix is not a more aggressive trash button. It is a destination that is not the gallery.
Video is the example people search. The destination is still the vault, not a site roster. We do not publish a support list of hosts. See Private Video Downloads That Never Hit Photos. The architecture is the same for any file you start: sealed in the app, not promoted into the library.
Backups, erase, and panic
Libraries like to travel. A vault that is excluded from backups stays on the device. That is a trade: you do not get a cloud restore of those files from us, and you do not get a surprise copy in a backup you forgot you made. Lose the iPhone and the vault on it is gone. Forget the passcode and the vault is sealed forever. There is no account to reset.
One-tap erase closes every tab and destroys cookies, cache, and site data. It does not clear the vault. A browsing wipe is for the session. A kept file is a different decision. A panic code at the lock screen wipes tabs, the entire vault, and the break-in log, then opens what looks like a fresh start. Self-destruct can optionally take the vault after too many wrong codes. Those wipes are permanent.
The decoy passcode opens an empty browser. Vault contents stay behind the real key. Icon colors recolor the shield. They do not turn the app into a calculator. Stealth Suite prices: monthly $4.99, yearly $19.99 with a 7-day trial, lifetime $49.99. If a subscription lapses, protections you already enabled keep working and the vault stays accessible.
What this comparison is not
It is not a dunk on Photos. Use Photos for pictures you want in Photos. It is not a claim that files in a vault are invisible on the network. The site that served them still saw an IP address. Blocking in the browser is list-based and not complete. HTTPS-Only Mode encrypts the connection when the site supports it. It does not hide the host.
It is not a cloud drive, not a password manager, not Tor, not Android. Private Browser Incognito is iOS only. It is not a promise that every page will offer a file. We do not list sites. You are responsible for what you download and for using the app lawfully.
| Property | Photos / Files | Encrypted vault |
|---|---|---|
| Audience | Anyone who opens the library | Someone who unlocks this app |
| Surfacing | Memories, widgets, sharing | Opened from the browser |
| Plain copy on disk | Library media | No plain copy. AES-256 |
| Backups | Part of the library story | Excluded from backups |
| Session erase | Unrelated | Leaves the vault intact |
If you only needed pages to forget themselves, the free browser is the product: no history file, on-device Disconnect lists, one-tap erase, App Lock. If you also needed a file to stay out of the gallery, the vault is the extra kit. Keep the gallery for birthdays. Keep the box for the download you did not want on the fridge. Both can exist on the same iPhone. They should not be the same folder.
Private Browser IncognitoFree on the App Store. No history, on-device blocking, one-tap erase.
Get the app
Frequently asked questions
Why shouldn't downloads go into the Photos app?
Photos is a library. Other apps can request access. People who unlock the phone can open it. Widgets, Memories, and sharing sheets treat it as content to surface. A file you wanted to keep private is then sitting in the same gallery as everything else. A vault is a sealed store inside the browser instead.
Do Private Browser downloads appear in Photos or Files?
No. Private Downloads land in an encrypted vault inside the app. They never appear in Photos or Files. The store is AES-256, with no plain copy on disk, and it is excluded from backups. You open those files from this browser, behind App Lock if you enabled it.
Is keeping files out of Photos a free feature?
The vault is Stealth Suite: monthly $4.99, yearly $19.99 with a 7-day trial, or lifetime $49.99. The free browser still has no history file, on-device blocking, one-tap erase, and App Lock. Session erase does not empty the vault. A panic code can wipe it.
If a file is not in Photos, is it in iCloud?
Vault files are excluded from backups. They stay on the device. There is no cloud copy on our servers, because there are no accounts and no app server for browsing. That is not the same as Photos, which is built to participate in the phone's library and backup story.
Does skipping Photos hide my IP address?
No. Where a file sits after download does not change the network. Sites you visit and your network operator can still see your IP address. A vault is about residue on the phone, not anonymity on the path. A browser is not a VPN.