Myth or factScams & security

Myth or fact: Incognito mode hides you online

Private browsing stops your own device keeping a record. It doesn’t hide you from websites, your employer or your internet provider. Here’s what it does do.

a halftone man in his forties in a business shirt sitting at a desk in a busy open-plan office, hunched over a halftone laptop and typing, while behind him a halftone colleague holding a coffee cup leans in to read his screen and another halftone colleague at the next desk glances over. the man is wearing a novelty disguise of thick round glasses with a big plastic nose and bushy moustache, the only full-colour element, in bright pink; no words and no logos
Illustration: Digital Advisors

Opening an Incognito window feels like slipping on a disguise. It isn’t one.

Verdict: myth. Private browsing hides what you did from the next person who uses your device. It doesn’t hide you from the websites you visit, the network you’re on or whoever runs it.

Google says so in its own help page for Chrome. Incognito “doesn’t make you invisible”.

What it actually does: no record left on your device

Every major browser has a private mode. Chrome calls it Incognito, Safari calls it Private Browsing, and Microsoft Edge calls it InPrivate.

In Chrome, Incognito runs as a separate session. While it’s open, Chrome keeps cookies and site data so things like logins work. When you close every Incognito window, Chrome throws that session away.

Here’s what each maker says isn’t kept:

  • Chrome: the sites you visited, plus the cookies and site data from the session. Incognito also doesn’t sign you in to your Google Account or other sites automatically.
  • Safari: the pages you visited, AutoFill details and recent searches. Private pages also aren’t passed to your other Apple devices, even on the same Apple Account.
  • Edge: browsing history, cookies, site data and form entries.

So if you’re buying a present on the family laptop, or using a shared computer, private mode is a sensible choice.

Who can still see what you’re doing

Google is blunt about it. While you’re in Incognito, your activity may still be visible to:

  • The websites you visit, including Google’s own.
  • Your employer or school, if they manage the network you’re on.
  • Your internet service provider.

Google also notes that sites using its services still share your activity on their sites with Google, including for advertising. And signing out doesn’t stop websites collecting information about you.

The reason is simple. Private mode changes what your browser saves. It doesn’t change what leaves your device. Your connection still travels through the office network or your home internet, and the website still gets your visit.

Things that stay behind anyway

Some things survive a private session.

  • Downloads. In Chrome, Safari and Edge, a file you download stays on the device until you delete it. Safari leaves it off the downloads list, but the file is still there.
  • Bookmarks. Chrome keeps bookmarks and reading-list items, and Edge keeps favourites.

The other thing that stays behind is an open window. Google warns that on Android, anyone who uses your device can open Incognito tabs you’ve left open, unless you lock them.

The extras worth switching on

Private modes have picked up some useful protections.

Chrome blocks third-party cookies in Incognito by default. These are the cookies that let other companies follow you from site to site. You can temporarily allow them for one site if something breaks.

Safari adds tracking protection. Apple’s Mac guide says private browsing turns on advanced tracking and fingerprinting protection by default. It blocks connections to data collection companies that use advanced fingerprinting to identify your device, and strips known tracking parameters from links. Safari also isolates each tab, so a site can’t follow you from one private tab to another.

You can lock private tabs. This is the big one for shared devices and phones.

  • iPhone (Safari): if your phone has a passcode, Private Browsing locks when you’re not using it. Check Settings > Apps > Safari and turn on the option to require Face ID, Touch ID or your passcode to unlock it.
  • Mac (Safari): in Safari > Settings > Privacy, turn on the option to require a password (or Touch ID) to view locked tabs. Apple says private windows also lock when you lock your screen, or after a while unused.
  • Chrome on Android: go to More > Settings > Privacy and security and turn on Lock Incognito windows when you leave Chrome.
  • Chrome on iPhone or iPad: Incognito tabs are hidden by default when you leave Chrome for a while. To lock them, go to More > Settings > Privacy and security > Hide Incognito tabs. Choose the option to lock them immediately with Face ID, Touch ID or your passcode.

Hiding your browsing from your internet provider

That needs a different tool. On an iPhone, Apple’s iCloud Private Relay comes with an iCloud+ subscription. Apple says it hides your IP address and exact location from websites, and hides your Safari browsing from network providers. It isn’t available in every country or region.

On a work network, though, assume your employer can see what you do. Private mode doesn’t change that.

How to open a private window

  • Chrome on a computer: click More (top right) and choose New Incognito window. Or press Ctrl+Shift+N on Windows, or ⌘+Shift+N on a Mac.
  • Chrome on iPhone or iPad: tap More, then New Incognito tab.
  • Chrome on Android: tap More, then Open in a new Incognito window (on some tablets, New Incognito window).
  • Safari on iPhone: tap the tabs button, then swipe right along the tab bar at the bottom until Private Browsing opens. Tap Unlock if it’s locked.
  • Safari on Mac: choose File > New Private Window. The address bar turns dark so you know you’re in one.
  • Edge: select Settings and more and choose New InPrivate window.

For more on keeping your accounts safe on a phone or laptop, see our Gmail settings that stop phishing.

Checklist

  • Use private mode on shared devices. Open a private window to shop, check email or bank on a computer or tablet someone else also uses.
  • Close every private window when you finish. Chrome only deletes an Incognito session’s cookies and site data once all its Incognito windows are closed.
  • Delete downloads you don’t want left behind. Files downloaded in a private window stay on the device.
  • Lock Incognito tabs in Chrome on your phone. Go to More, Settings, then Privacy and security. On Android, turn on Lock Incognito windows when you leave Chrome; on iPhone, use Hide Incognito tabs to lock them.
  • Require Face ID or a passcode for Safari Private Browsing. On an iPhone, find it under Settings, Apps, Safari.
  • Assume work can see your browsing. On a network your employer manages, private mode doesn’t hide your activity from them.
  • Use the right tool to hide Safari browsing from your internet provider. On an iPhone, Apple’s iCloud Private Relay, part of an iCloud+ subscription, does that; private mode doesn’t.