is incognito mode private does incognito mode work private browsing browser fingerprinting online privacy vpn

Is Incognito Mode Actually Private? What It Hides and What It Doesn't

Adrian Maverick · · 11 min read

Open a private window and the browser tells you a little story. Chrome shows a hat and glasses and the words "You've gone Incognito." Firefox gives you a purple mask. The whole design says: you are hidden now. You are not.

Here is the honest version, because you deserve it before the third paragraph. Incognito mode makes your browsing private from other people who pick up your device. That is the entire job. It does almost nothing to hide you from the people actually watching, which is your internet provider, the websites you open, the network you are on, and, yes, Google.

Is incognito mode actually private?

No, not in the way most people assume. Incognito mode is private from your own device, not from the internet. When you close the window it wipes the local record: your history, cookies, and anything you typed into forms all get thrown out so the next person on that computer cannot see them. That is genuinely useful and it is real.

What it does not do is hide your activity from anyone upstream. Google spells this out on its own Chrome help page. Incognito, it says, does not change the fact that "websites you visit, including Google sites, and organizations that manage your network, like your school, employer, or internet service provider, may be able to observe your activity." Your IP address is not hidden. Your traffic is not encrypted by the mode itself. The sites you load still see you arrive.

So the name oversells it, on purpose, and that is not just my read. It is the finding of a lawsuit.

What incognito hides and what it leaks

The confusion is really about where the privacy line sits. Everything on your side of the line gets cleaned up. Everything on the other side keeps a record.

What you do Private in incognito?
Local browsing history on your device Yes, wiped when you close the window
Cookies and site data from the session Yes, discarded at the end of the session
Form and search entries saved to the device Yes, not stored
Someone else on your computer seeing where you went Yes, that is the real use case
Your IP address, which identifies your connection No, fully visible to every site
Your internet provider's log of sites and DNS lookups No, they see all of it
The Wi-Fi owner or network admin (employer, school, cafe) No, they can still see the domains you hit
The websites themselves tracking your visit No, they log you like any other visitor
Your browser fingerprint No, it is nearly identical to your normal one

That last row is the one people never hear about. Even with cookies gone, sites can identify you by your browser fingerprint, the unique combination of your screen size, fonts, operating system, timezone, and dozens of other details your browser hands over automatically. The EFF's Cover Your Tracks tool will show you your own fingerprint in about ten seconds, and here is the kicker: your fingerprint in an incognito window is basically the same as in a normal one. Clearing cookies does not change your device. So a tracker that fingerprints you can follow you across sessions whether you are incognito or not.

The proof Google itself had to admit it

If you want one fact that settles the whole debate, it is this. In 2020 a group of users sued Google in a case called Brown v. Google, arguing that Incognito was misleading because Google's ad and analytics tools kept collecting data about them even in private mode. In April 2024, as CNN and The Hacker News both reported, Google settled. The company agreed to delete billions of records of private-browsing data collected between 2016 and 2024, to keep third-party cookies blocked by default in Incognito, and to rewrite the disclaimer to be honest about what still gets collected.

Google had already quietly updated the Incognito wording in January 2024 to admit that private browsing "won't change how data is collected by websites you visit and the services they use, including Google." Read that again. The company whose browser you are using was telling a court that its own private mode does not stop its own data collection.

This is the surveillance economy in miniature. The feature named for privacy was, for years, still feeding the ad machine, and it took a class action to force the fine print into the open. When the product is free, the private mode is not really for your privacy. It is for the appearance of it.

When incognito mode is actually the right tool

None of this makes incognito useless. It makes it a tool with one honest job, and it is good at that job. Reach for it when the threat you care about is local:

  • Shared or borrowed computers. A library machine, a hotel business center, a friend's laptop. Incognito means you do not leave your logins and history behind.
  • Keeping sessions separate. Log into a second account without signing out of the first, since incognito starts with no cookies.
  • Getting a clean view of a page. Prices, search results, and paywalls that behave differently once a site knows you. A fresh session with no history can show you the un-personalized version.
  • Stopping the next person on your device from seeing what you looked up. Gifts, health questions, anything you would rather not have autocomplete surface later.

For all of those, incognito is exactly right and you do not need anything fancier. The mistake is only in believing it does more.

How to actually browse privately

If your goal is to be private from the network and the sites, not just the next person at your desk, incognito is the wrong layer. Here is what actually moves the needle, cheapest and simplest first.

  1. Use a VPN. This is the single biggest gap incognito leaves open. A VPN encrypts your traffic and hides your IP, so your internet provider and the Wi-Fi network can no longer log the sites you visit or sell that list. This is the layer that does what people wrongly think incognito already does. Pair the two: incognito for the local cleanup, a VPN for the network.
  2. Switch to a browser that fights tracking by default. Browsers like Firefox and Brave block many trackers and third-party cookies out of the box, so you are not relying on a private window to undo tracking that a better browser would never allow. Block-by-default beats clean-up-after.
  3. Check and reduce your fingerprint. Run EFF's Cover Your Tracks. Browsers with fingerprinting resistance, and the Tor Browser especially, make you look like everyone else instead of uniquely you.
  4. Use Tor for the genuinely sensitive stuff. When you need to be anonymous from the site and the network at once, the Tor Browser routes your traffic through multiple relays so no single point sees both who you are and where you went. It is slower. It is also the real thing incognito pretends to be.
  5. Stop signing in. The fastest way to be tracked in any mode is to log into your Google or Facebook account and then browse. No VPN or private window undoes that. If you are logged in, they know it is you.

Notice the order. Tool-agnostic habits first. The point is that private browsing is a stack, not a switch, and incognito is only the bottom rung.

Where Secria fits

The honest read on incognito is that its biggest hole is the network layer. Your provider and whatever Wi-Fi you are on can still see everything, and closing the window does nothing about that. That is a VPN's job.

Secria VPN is built for exactly that gap. It encrypts your whole connection so your ISP and the network cannot log or sell your browsing, keeps no activity logs by design, runs private DNS so your lookups stay yours, and uses post-quantum encryption so traffic captured today is not decryptable years from now. It is one option among several good ones, and the useful move is to run something like it alongside a tracker-blocking browser, not to expect any one product to do all of it. Incognito plus a VPN plus a browser that blocks by default is a real privacy setup. Incognito alone is a tidy desk.

Quick answers

Can my ISP see my history in incognito mode? Yes. Incognito does not encrypt your traffic or hide your IP, so your internet provider still sees every domain you visit and every DNS lookup you make. Only a VPN or Tor hides that.

Can my employer or school see incognito browsing? Yes, if you are on their network or device. Network administrators can see the sites you connect to regardless of private mode, and a managed device may log more than that.

Does incognito mode hide my IP address? No. Every website you open sees your real IP in incognito, exactly as it would in a normal window. Hiding your IP requires a VPN, a proxy, or Tor.

Does incognito stop websites from tracking me? Not really. Cookies are cleared at the end of the session, but sites can still fingerprint your browser and device to recognize you, and if you log in, they know precisely who you are.

Is incognito mode good for anything, then? Yes. It is the right tool for local privacy: shared computers, separate logins, and keeping your searches off your own device's history. Just do not mistake it for anonymity.

The takeaway is not that incognito is broken. It is that the name is a marketing choice, and a company got sued for exactly how much that name promises. Use the private window for what it actually does, then add the layers that do the rest.

Sources

Secria fact-checks every post against primary sources. Spotted something wrong or out of date? Email hq@secria.me and we will correct it.

Back to all posts