What Incognito Mode Really Hides (and What It Doesn't)

Almost every browser offers a private mode. Chrome calls it Incognito, Firefox calls it Private Browsing, Safari and Edge have their own versions. Many people open it believing they become invisible online. They do not.

Private browsing is useful, but it solves a much narrower problem than most users think. This guide explains exactly what private mode protects, who can still see your activity, and the practical steps that genuinely improve your privacy online.

Table of Contents

What Private Browsing Actually Does

Private mode is designed to protect your activity from other people who use the same device. When you close a private window, the browser deletes:

Your browsing history from that session.
Cookies and site data created during the session.
Information entered into forms.
Temporary files and cache from that session.

That is useful if you share a laptop with family, use a public computer, shop for a surprise gift, or want to sign into a second account without logging out of your main one. It also means sites cannot use cookies from your normal browsing to recognise you inside the private window, at least not through those cookies.

What Private Browsing Does Not Hide

Here is where most misunderstandings begin. Private mode does nothing to hide your activity from the network or from the websites themselves.

Your Internet Service Provider

Your internet provider can see which domains you connect to, whether you are in a private window or not. On secure HTTPS sites, they usually cannot see the specific pages or content, but they can see the site names through DNS requests and connection data unless you take extra steps.

Your Employer or School Network

If you are on a work or school network, the administrator can often log traffic, apply filters and in some cases inspect activity through installed software on managed devices. Private mode does not bypass any of this.

The Websites You Visit

Websites still see your IP address, your approximate location, your browser type and device details. If you sign into an account in a private window, the site knows exactly who you are.

Browser Fingerprinting

Even without cookies, many tracking systems build a “fingerprint” from small details such as screen size, installed fonts, time zone, language and graphics settings. Combined, these can identify a browser with surprising accuracy across sessions.

Downloads and Bookmarks

Files you download and bookmarks you save in a private session remain on your device after you close the window.

Practical Steps for Better Privacy

If you want real privacy, you need a few more layers. None of them are complicated.

Use Secure DNS

DNS is the system that turns website names into addresses. By default, these requests often go to your internet provider unencrypted. Turning on DNS over HTTPS encrypts them.

In most modern browsers, you can find this under privacy or security settings, usually labelled “Use secure DNS”. On Android, the system wide Private DNS setting does a similar job for all apps. Choose a reputable provider and enable it once.

Block Third Party Trackers

Much of online tracking comes from third party scripts embedded in websites, such as advertising and analytics tools. Several browsers now block many of these by default or offer strict tracking protection settings. You can also install a well reviewed content blocker extension. Stick to established extensions with large user bases and clear privacy policies, because a bad extension can itself become a privacy risk.

Manage Cookies Sensibly

Set your browser to block third party cookies. Clear cookies regularly, or use container or profile features that keep different parts of your life separate, such as work, shopping and personal accounts.

Review Site Permissions

Websites can request access to your camera, microphone, location and notifications. Visit your browser’s site settings occasionally and revoke permissions you do not need. Deny notification requests by default. They are one of the most common ways spam and scam alerts reach people.

Use a Reputable VPN When It Makes Sense

A VPN routes your traffic through a server run by the VPN provider. This hides your browsing from your local network and internet provider, and masks your IP address from websites.

However, a VPN does not make you anonymous. It shifts trust from your internet provider to the VPN company. Free VPNs in particular often fund themselves through data collection or advertising. If you use one, choose a provider with an independently audited no logs policy and a clear business model.

A VPN is most useful on public Wi Fi in cafes, airports and hotels, where other users on the same network could potentially monitor unencrypted traffic.

Keep Your Browser Updated

Browser updates fix security vulnerabilities that could expose your data. Turn on automatic updates and restart your browser when prompted.

Protecting Privacy on Shared Devices

If several people use the same computer or phone:

Create separate user profiles in the operating system or browser so each person has their own history, saved passwords and accounts.
Lock the screen whenever you step away.
Avoid saving passwords in a shared browser profile. Use a dedicated password manager instead.
Check signed in accounts before leaving a shared or public device, and sign out of everything.

Privacy on Mobile Devices

Phones carry more personal data than most computers. A few settings make a big difference:

Review which apps have access to location, camera, microphone and contacts.
Turn off ad personalisation in your phone’s privacy settings and reset your advertising ID periodically.
Use the browser’s private mode for one off searches, but remember it carries the same limits as on desktop.
Enable the system level Private DNS option on Android, or the equivalent privacy relay or secure DNS option on iOS where available.

A Quick Privacy Checklist

Use private mode for shared devices and one off sessions.
Turn on secure DNS in your browser or phone.
Block third party cookies and trackers.
Review site permissions every few months.
Use a trusted VPN on public Wi Fi.
Keep your browser and operating system updated.
Use separate profiles for different people and purposes.

Final Thoughts

Private browsing is a helpful tool for keeping activity off a shared device, but it was never designed to make anyone anonymous. Your internet provider, network administrator and the websites you visit can still see a lot. Real privacy comes from combining private mode with secure DNS, tracker blocking, careful permission management and, when appropriate, a trustworthy VPN. Each step is simple, and together they give you far more control over who sees what you do online.