Incognito Mode: What It Actually Does (And Doesn't Do)

Most people assume incognito mode makes them invisible online. It doesn't even come close. Here's the full truth about what private browsing protects, where it falls short, and what actually works if privacy matters to you.

---

In 2019, Google's own marketing chief Lorraine Twohill sent an email to CEO Sundar Pichai admitting that Chrome's incognito mode was "not truly private," and that the company was stuck using "really fuzzy, hedging language" to market it. Another Google employee reportedly went further, recommending that the incognito splash screen be changed to read: "You are NOT protected from Google."

These internal admissions only surfaced because of a class-action lawsuit filed in 2020, which alleged that Google had been tracking users who believed they were browsing privately. In April 2024, Google settled, agreeing to delete billions of private browsing records and rewrite its incognito disclosures. The settlement's value was estimated at over $5 billion — not because Google paid that out directly, but because of the scope of data destroyed and the policy changes required.

The lawsuit confirmed what privacy researchers had been warning about for years: most people fundamentally misunderstand what incognito mode does. A study by the University of Chicago found that a significant share of internet users believe private browsing makes them anonymous online, hides their activity from their employer, or protects them from hackers. None of those things are true.

This article is a complete guide to how incognito mode actually works, what it protects, what it doesn't, how it differs across major browsers, and — most importantly — what to use when you need real privacy online.

What Is Incognito Mode?

Incognito mode — called "Private Browsing" in Firefox and Safari, "InPrivate" in Microsoft Edge, and "Private Window" in Brave — is a browser feature that creates a temporary, isolated browsing session. When you close the window, the browser erases certain local data from that session.

The concept has been around since 2005, when Safari became the first major browser to offer a private browsing mode. Chrome followed with its "Incognito" brand in 2008, and every major browser now offers some version of it.

Here's the single most important thing to understand: incognito mode provides local privacy on your device. It controls what stays on your computer after you're done browsing. It has almost no effect on what the rest of the internet — your ISP, websites, advertisers, your employer — can see while you're browsing.

Think of it like writing on an Etch A Sketch instead of in a notebook. You can shake the screen clean when you're done, and nobody who picks it up will see what you drew. But anyone who was standing behind you the entire time saw everything.

That distinction — local device privacy vs. online anonymity — is the key to understanding everything else in this article.

What Incognito Mode Actually Does

Incognito mode does deliver real protections. They're just more limited than most people think.

Your Browsing History Isn't Saved

In normal browsing, your browser keeps a detailed, searchable log of every page you visit. Incognito doesn't create that log. Once you close the window, there's no local record of the sites you visited — someone else using your device afterward won't find anything by checking your history.

One caveat: your browsing activity can still leave traces in your device's DNS cache, which stores recently resolved domain names to speed up future requests. Anyone with some technical knowledge could check the DNS cache and see which domains you visited, even if your browser history is clean. (On Windows, the command ipconfig /flushdns clears this cache. On macOS, it's sudo dscacheutil -flushcache.)

Cookies Are Deleted When You Close the Window

Cookies — small files websites store in your browser to remember who you are — work normally during an incognito session. You can log in to sites, add items to shopping carts, and interact with pages just like you normally would. But the moment you close the incognito window, all cookies from that session are wiped.

This means websites can't use leftover cookies from an incognito session to recognize you in future visits. It also means each new incognito session starts completely fresh — no memory of previous sessions. If you log into Amazon in incognito, close the window, and open a new incognito window, Amazon won't know you were there.

Form Data and Passwords Aren't Stored

Anything you type into login forms, search bars, or other input fields during an incognito session doesn't end up in your browser's autofill database. Usernames and passwords won't be remembered. This is genuinely useful on shared or public computers where you don't want your credentials lingering after you walk away.

The Session Is Isolated from Your Regular Browser

An incognito window operates separately from your regular browsing session. If you're logged into Gmail in your normal browser, an incognito window gives you a logged-out state — it doesn't carry over any of your cookies or authenticated sessions. This makes incognito handy for logging into a second account on the same service simultaneously, or for seeing what a website looks like to a first-time visitor.

Most Extensions Are Disabled (in Chrome)

In Chrome, extensions are turned off by default in incognito unless you explicitly enable them one by one. This reduces the risk that an extension is silently recording your activity.

This varies significantly by browser, though. Brave keeps its built-in privacy shields (ad blocking, tracker blocking, fingerprint randomization) active in private windows — which actually provides more protection than Chrome's blunt approach of turning everything off. Firefox similarly keeps its Enhanced Tracking Protection active in Private Browsing windows.

Downloads and Bookmarks Still Persist

One important detail people miss: files you download during an incognito session stay on your device. So do bookmarks you save. Incognito erases your browsing session data, but anything you actively saved or downloaded is yours to keep — and for anyone with access to your device to find.

What Incognito Mode Doesn't Do

This is where incognito mode's limitations become serious — and where the privacy gap between perception and reality gets dangerously wide.

It Doesn't Hide Your Activity from Your ISP

Your internet service provider can see every website you connect to, regardless of whether you're using incognito mode. Here's why: when you type a URL into your browser, your device sends a DNS request to translate that domain name into an IP address, and that request passes through your ISP's servers. Your ISP can log the domain, the timestamp, and how much data you transferred. Incognito mode does nothing to encrypt or reroute this traffic.

This isn't theoretical. In many countries, ISPs are legally permitted — and in some cases required — to retain logs of customer browsing activity. In the UK, the Investigatory Powers Act requires ISPs to store browsing records for 12 months. In the US, ISPs can collect and sell browsing data to advertisers. Incognito mode offers zero protection against any of this.

It Doesn't Hide Your Activity from Your Employer or School

If you're on a corporate or school network, the network administrators can monitor every connection you make. Enterprise networks typically route traffic through firewalls, proxies, or monitoring software that logs which domains are accessed, when, and by which device. Many organizations also install endpoint management software directly on company-owned devices that can see all browsing activity at the system level — below the browser entirely.

Bottom line: incognito mode prevents your browsing history from being saved in the browser on your device. It doesn't change anything about how your traffic moves across the network, or who can observe it along the way.

It Doesn't Hide Your IP Address

Every website you visit in incognito mode sees your IP address — the unique numerical identifier assigned to your connection by your ISP. Your IP address reveals your approximate geographic location (usually accurate to the city level), and websites can use it to identify and track returning visitors even without cookies.

To hide your IP address, you need a VPN or the Tor network. Incognito mode has no effect on your IP address.

It Doesn't Protect You from Malware or Phishing

If you click a malicious link or download ransomware while in incognito mode, you're exactly as compromised as you'd be in a regular window. Incognito mode is a privacy feature, not a security feature — it doesn't scan downloads, block malicious websites, or add any protective layer between you and threats.

It Doesn't Prevent Website Tracking

While incognito mode prevents cookies from persisting after a session, websites have multiple ways to track you during and across sessions that incognito mode doesn't address:

Login-based tracking is the most straightforward. If you sign into Google, Facebook, or Amazon during an incognito session, that service can record and associate your activity with your account, just as it would in a normal window. Logging in essentially opts you back into tracking, regardless of your browser mode.

First-party cookies are active during the session. Incognito deletes cookies when you close the window, but while the window is open, cookies function normally. A website can use them to track everything you do across a single visit.

Browser fingerprinting is the most significant blind spot, and it deserves its own section.

It Doesn't Prevent Browser Fingerprinting — The Biggest Gap

Browser fingerprinting has become the dominant tracking method on the modern web, and incognito mode is essentially powerless against it.

Unlike cookies, which your browser stores and can delete, a fingerprint is assembled from technical information your browser must reveal to render web pages correctly. This includes your screen resolution, time zone, operating system, browser version, installed fonts, language settings, how your graphics card renders specific test images (known as Canvas fingerprinting), and how your audio hardware processes test signals (AudioContext fingerprinting). No single data point is unique, but when dozens of them are combined, the resulting profile is remarkably distinctive.

Research from the Electronic Frontier Foundation (EFF) found that over 83% of browsers have a fingerprint unique enough to be identified, and some studies report accuracy rates exceeding 95% in controlled conditions. The key problem is that your fingerprint in incognito mode is typically identical to your fingerprint in a normal window — same device, same GPU, same fonts, same screen. The only differences are the absence of persistent cookies and potentially fewer active extensions. That's not enough to change your fingerprint meaningfully.

The situation got worse in February 2025, when Google updated its advertising platform policies to officially permit browser fingerprinting — a technique it had previously discouraged. With that restriction lifted, fingerprinting-based tracking has become even more prevalent, making incognito mode's cookie-deletion approach increasingly insufficient.

Want to see how unique your own browser fingerprint is? The EFF's Cover Your Tracks tool lets you run a test in seconds. Try it in both a normal and an incognito window — the results are often identical, which illustrates the problem clearly.

Some browsers are fighting back. Chrome is testing experimental features in Canary builds that block Canvas API reads and filter known fingerprinting scripts in incognito mode — but these haven't shipped in stable releases. Safari 26 introduced Advanced Fingerprinting Protection that injects noise into data that fingerprinters rely on. Firefox already blocks known fingerprinting scripts by default through Enhanced Tracking Protection. And Brave takes the most aggressive approach, randomizing fingerprint-related APIs across all browsing modes. But if you're using Chrome, Edge, or most other browsers today, incognito gives you no fingerprinting protection at all.

How Private Browsing Differs Across Browsers

Not all private browsing modes are equal. The feature that Chrome calls "Incognito" does significantly less than what Brave calls a "Private Window." Here's how the five major browsers compare.

Chrome — Incognito Mode

Chrome's incognito is the most widely recognized private browsing mode, but it's also the most minimal. It handles the basics — deleting history, cookies, and form data on close — and blocks third-party cookies by default (a change mandated by the 2024 lawsuit settlement). Extensions are disabled unless you manually allow them.

What it doesn't do: block trackers, block ads, prevent fingerprinting, or hide your IP address. Since the settlement, Google has at least updated the incognito splash screen to be more honest about these limitations. But fundamentally, Chrome's incognito is a local cleanup tool and nothing more.

If you want stronger privacy without switching to an entirely different browser ecosystem, see our roundup of Chrome alternatives.

Firefox — Private Browsing

Firefox's Private Browsing mode is meaningfully stronger than Chrome's. It includes Mozilla's Enhanced Tracking Protection (ETP), which blocks known third-party trackers, cross-site tracking cookies, cryptominers, and known fingerprinting scripts — all enabled by default. Firefox is developed by Mozilla, a nonprofit, which means the browser isn't built around an advertising business model. That structural difference matters.

Firefox doesn't block all fingerprinting (advanced techniques can still work), and it doesn't block ads natively. But as a starting point, it's significantly ahead of Chrome. See how it compares in our Firefox vs. Brave or Firefox vs. Edge comparisons.

Safari — Private Browsing

Apple's Safari includes Intelligent Tracking Prevention (ITP), which uses machine learning to identify and block cross-site trackers. Safari 26 added Advanced Fingerprinting Protection across all browsing modes, injecting noise into signals that fingerprinters rely on — a meaningful step that puts Safari ahead of Chrome on this front.

The trade-off is ecosystem lock-in: Safari only runs on Apple devices and has a smaller extension library than Chromium-based browsers. Explore our Chrome vs. Safari comparison or Safari alternatives if you want cross-platform options.

Brave — Private Window (and Private Window with Tor)

Brave goes the furthest of any mainstream browser. Its standard Private Window blocks ads and trackers by default, randomizes fingerprint-related APIs, and upgrades connections to HTTPS wherever possible — protections that are active in both normal and private mode.

Where Brave stands alone is its Private Window with Tor option. This routes your traffic through the Tor network with a single click, hiding your IP address from websites you visit. It's less hardened than the dedicated Tor Browser (which adds additional anti-fingerprinting and isolation measures), but it's a dramatically more private option than anything Chrome, Firefox, or Safari offer.

See the Chrome vs. Brave comparison or the full Brave review for more detail.

Edge — InPrivate Mode

Edge's InPrivate mode is functionally similar to Chrome's incognito. It handles the basics — history, cookies, site data deletion — and includes configurable tracking prevention at three levels: Basic, Balanced (the default), and Strict. In its default Balanced mode, Edge blocks known trackers from sites you haven't visited, which puts it slightly ahead of Chrome's stable release but behind Firefox and Brave.

Edge is deeply integrated with Microsoft services, including Bing and Copilot AI, which may be a concern for privacy-focused users. Our Brave vs. Edge comparison covers the differences in depth, and you can also browse other Edge alternatives.

Private Browsing Comparison at a Glance

Chrome is testing fingerprinting protections in experimental builds but hasn't shipped them in stable releases as of early 2026. Safari's Advanced Fingerprinting Protection was introduced in Safari 26 and adds noise to key signals, but doesn't fully block all fingerprinting techniques.

When Incognito Mode Is Actually Useful

Despite its limitations, incognito mode has real, practical uses. The key is understanding what it's genuinely good for — and not expecting more.

Shared or public computers. This is incognito's strongest use case. If you're using a computer at a library, hotel, internet café, or someone else's home, incognito mode ensures your login credentials, browsing history, and cookies aren't left behind on that device for the next person to find.

Shopping for gifts or surprises. Want to buy a birthday present without your partner seeing the exact item show up in their ad feed? Incognito prevents the purchase from appearing in your browsing history and stops cookies from feeding your shopping behavior into ad retargeting — at least temporarily, and on that device.

Logging into multiple accounts. Need to check two different email accounts on the same service, or compare how a website looks when logged in vs. logged out? Incognito provides a separate cookie environment that doesn't overlap with your main browser session. (Firefox's Multi-Account Containers are an even better solution for this if you do it regularly.)

Getting a "clean" view of search results. Search engines personalize results based on your history and profile. Incognito strips away most of this personalization, giving you a less filtered view of what a first-time searcher would see. SEO professionals and journalists use this frequently.

Testing websites as a developer. Incognito is a quick way to load a site without cached files, stored sessions, or login state interfering. It's a standard part of every web developer's workflow.

Avoiding some forms of dynamic pricing. Some travel and e-commerce sites adjust prices based on cookies and browsing history. Incognito gives you a "fresh" session that won't carry over signals from previous visits. It's not a guaranteed defense — IP-based and fingerprint-based pricing can still apply — but it removes one variable.

What to Use Instead for Real Online Privacy

If your privacy needs go beyond keeping your local browsing history clean, incognito mode isn't enough on its own. Meaningful privacy online requires layering multiple tools, each addressing a different part of the problem.

A VPN Hides Your IP and Encrypts Your Traffic

A Virtual Private Network encrypts your internet traffic and routes it through a server in a location you choose. This hides your real IP address from websites and makes your browsing activity invisible to your ISP. Reputable providers like Mullvad, ProtonVPN, or IVPN operate under verified no-logs policies, meaning they don't record what you do.

A VPN handles what incognito can't: network-level privacy. But a VPN alone doesn't block trackers, prevent fingerprinting, or stop you from being tracked when you log into accounts.

A Privacy-Focused Browser Makes Privacy the Default

Instead of relying on a special mode in a browser that tracks you in its normal state, consider a browser where privacy is the default. Brave blocks ads, trackers, and fingerprinting attempts out of the box — you don't need to remember to open a special window. Firefox offers strong tracking protection and the most robust extension ecosystem for privacy tools. LibreWolf takes Firefox's foundation and strips out all telemetry for maximum privacy. And the DuckDuckGo browser offers simple, aggressive tracker blocking with a one-tap "Fire" button that burns all session data.

You can compare all of these side by side at browsers.to.

A Tracker Blocker Stops Scripts Before They Run

Browser extensions like uBlock Origin block tracking scripts, fingerprinting attempts, and ads before they can execute. This works in both normal and incognito mode (if you enable the extension for incognito in your browser settings). uBlock Origin is free, open-source, and widely regarded as the most effective option available.

One important note: Google's transition from Manifest V2 to Manifest V3 in Chrome has reduced the filtering capabilities of ad-blocking extensions on Chromium browsers. Firefox still fully supports Manifest V2, making it the strongest platform for extension-based privacy tools right now.

Tor Provides the Strongest Anonymity

The Tor Browser is the gold standard for anonymous browsing. It routes your traffic through three separate encrypted relays, making it extremely difficult for anyone to trace your activity back to you. It also uses aggressive anti-fingerprinting measures that make all Tor users look virtually identical to websites.

The trade-off is speed. Tor is significantly slower than normal browsing because of its multi-hop routing. It's not practical as a daily browser for most people, but it's the right tool when anonymity genuinely matters — for journalists, activists, researchers, or anyone in a situation where being identified could have serious consequences.

A Private Search Engine Removes Search-Level Tracking

Even in incognito mode, if you search with Google, your queries are recorded and associated with your IP address and other identifiers. Switching to DuckDuckGo, Brave Search, or Startpage means your search activity isn't logged or used to build a profile on you.

Layering Tools Is the Real Strategy

No single tool provides complete privacy. The most effective approach stacks protections so that each one covers a different gap:

1. Browser: A privacy-focused browser like Brave or Firefox as your default
2. Search: DuckDuckGo or Brave Search instead of Google
3. Network: A trusted, no-logs VPN for IP and traffic protection
4. Extensions: uBlock Origin for tracker and ad blocking
5. DNS: Encrypted DNS (DNS-over-HTTPS) to prevent ISP-level domain snooping
6. Habits: Avoid logging into tracking-heavy accounts (Google, Facebook) when you want to browse privately

Frequently Asked Questions

Does incognito mode hide my activity from my ISP?

No. Your ISP can see every domain you connect to, regardless of browser mode. Incognito only controls what's saved on your device afterward. To hide your activity from your ISP, you need a VPN that encrypts your traffic before it leaves your device, or you need to use the Tor network.

Can my employer see what I browse in incognito mode?

Yes — if you're on a company network or a company-managed device. Corporate firewalls, proxy servers, and endpoint management software all operate below the browser level. Incognito mode can't affect what your IT department sees at the network layer. If this is a concern, the only effective approach is to use a personal device on a non-corporate network.

Is incognito mode safe to use on public Wi-Fi?

Incognito mode doesn't add any security on public Wi-Fi. It won't encrypt your traffic or protect you from interception. For public Wi-Fi, a VPN is the essential tool. That said, most modern websites use HTTPS encryption by default, which means the content of your communication with a site is encrypted even without a VPN — but the domains you visit are still visible to the network operator.

Does incognito mode prevent Google from tracking me?

Only partially. If you log into your Google account in incognito, Google can fully associate your session with your profile. Even without logging in, Google can use your IP address and browser fingerprint to identify returning visitors. The 2024 settlement forced Google to be more transparent about this, but the tracking infrastructure itself hasn't fundamentally changed.

What's the difference between incognito mode and a VPN?

They solve different problems entirely. Incognito manages local data (history, cookies, form data) and deletes it when you close the window. A VPN operates at the network level, encrypting your traffic and masking your IP address. Think of incognito as clearing your desk at the end of the day, and a VPN as making sure nobody can read your mail while it's in transit. They can — and ideally should — be used together.

Can websites detect that I'm using incognito mode?

It's harder than it used to be. Before 2019, websites could reliably detect Chrome's incognito mode through quirks in its filesystem API. Google fixed that gap, making direct detection much more difficult. However, some websites can still infer private browsing through indirect signals — like the absence of previously stored cookies, reduced storage quota behavior, or missing extension-injected elements. It's not reliable enough for widespread use, but it's not impossible either.

Does incognito mode make my browser faster?

Marginally, in some cases. Because extensions are typically disabled (in Chrome) and there's no cached data, pages start from a clean state. But the flip side is that with no cached data, your browser can't reuse previously downloaded resources like images or scripts — which can actually make revisiting the same site slower within the session. In practice, the speed difference is negligible.

The Bottom Line

Incognito mode is a useful feature — for a specific set of situations. It keeps your browsing history off your local device, wipes cookies after a session, and gives you a clean browser state that's isolated from your regular profile. For shared computers, gift shopping, and quick multi-account logins, it works exactly as intended.

But it is not an invisibility cloak. Your ISP still sees where you go. Your employer still sees what you access on their network. Websites can still track you through your IP address and browser fingerprint. Advertisers can still profile you. And as the Google lawsuit revealed, even the company behind Chrome's incognito mode knew internally that it wasn't delivering the privacy its users expected.

The good news is that real privacy tools exist — they just go by different names than "incognito." A privacy-focused browser, a good VPN, a tracker blocker, and a private search engine, used together, can give you the level of protection that most people think incognito already provides.

If you're ready to move beyond incognito, start by choosing a browser that doesn't require a special mode to respect your privacy. You can compare all the major options side by side at browsers.to.

Privacy isn't a single button you press. It's a stack of choices — your browser, your search engine, your network tools, your daily habits — that work together to reduce how much of your digital life is visible to others. Incognito mode can be one layer in that stack. Just don't mistake it for the whole thing.