Incognito Mode: What It Really Hides and What It Does Not

1Understand what a private window actually erases

The feature has a well-defined job: the session is not recorded on that device. When you close the last private window, the browser discards the history of those pages, the cookies created, the data typed into forms and the cache of what was loaded. That is exactly why it works so well for the shared computer scenario, and why it does nothing beyond that.

1. Open a private window from the browser menu, the three dots or three lines in the top right corner. The keyboard shortcut is shown right there beside the option name.
2. Notice that the window looks different, usually darker and with its own icon, so you know which one you are browsing in.
3. Browse normally and close the window when you are done. Nothing from that session appears in the history afterwards.
4. Test it yourself: open a site in the private window, close everything and search for the address in the browser history. It will not be there.
5. Hold on to this idea: the feature protects what stays on the computer, not what leaves it over the internet.

2Know who can still see you

This is the part the feature's name hides. A private window changes what the browser keeps, and changes nothing about the path the data travels. Four parties still see your activity exactly as they would in an ordinary window, and it is worth understanding each one so you do not count on protection that is not there.

1. Your internet provider still sees which sites you visit. With the secure connections used today it does not see the page content or what you type, but it sees the addresses and the times.
2. Whoever runs the network sees the same: company, school, hotel or someone else's home Wi-Fi records the visits just as easily.
3. The site you visit knows someone arrived, from which internet address, with which browser and system, and can recognise repeat visits through characteristics other than cookies.
4. Any account you sign in to records everything you do while signed in, without exception. That is the subject of Solution 5.
5. If the computer belongs to the company, or has monitoring software installed, it records activity before it even reaches the browser, and a private window cannot interfere with that.

3Check whether the device is managed by someone

Plenty of people use a private window on a work computer thinking it settles the matter. It does not, and it is important to know that beforehand rather than afterwards. A company-issued device normally has policies applied and, in many cases, remote administration software. None of that goes through the browser, so no browser setting changes the outcome.

1. Open the browser settings and look, at the top or bottom, for a notice saying it is managed by an organisation.
2. In Chromium-based browsers, type chrome://policy in the address bar to see the policies applied to the device.
3. In the system, check whether your user account is an administrator or is tied to a domain or a work account.
4. If any of those signs appear, treat browsing on that device as potentially recorded, private window or not.
5. For personal matters, use your own device and your own connection. That is the only separation that truly works.

chrome://policy

4Close every private window to end the session

Here lies a misunderstanding with practical consequences. Closing a tab, or leaving a private window open in the background, keeps the session alive: the cookies remain valid and the next person to use the computer may find you still signed in. The cleanup only happens when the last private window closes. Two things also stay on the computer regardless.

1. When you finish, close all open private windows, not just the tabs. On a phone, close the private tabs from the tab switcher too.
2. Check that no private window was left minimised or hidden behind another, which happens easily.
3. Remember that the files you downloaded remain saved in the downloads folder, with the date and time visible to whoever uses the computer next.
4. Remember too that bookmarks you save inside the private window are saved normally in the browser.
5. On a shared computer, manually delete the downloaded files you do not want anyone to find.

5Do not sign in to your account inside the private window

This is the most common failure, and it undoes everything else. The moment you sign in, the service knows exactly who is on the other side, and records in your account every search, every video watched and every page opened. The window still keeps nothing on the computer, but the record now exists on the server, tied to your name. If the point was to leave no trace, signing in defeats the point.

1. Before searching for something you would rather keep out of your account, confirm that you are not signed in to any service in that window.
2. Watch out for automatic sign-in: some services reconnect on their own as soon as you open the site, even in a private window, if you ticked stay signed in at some earlier point.
3. If you signed in by mistake, sign out, close all private windows and start again.
4. To see what was recorded, open the privacy or activity settings of the service in question and review the history kept there.
5. It is worth using the private window for the opposite purpose: signing in to a second account without dropping the first one's session, which is a legitimate and practical use.

6Use the private window for the cases where it genuinely helps

After so many caveats, it is worth saying the feature is excellent within what it sets out to do. There are four situations where it is the right tool, and in all of them the point is leaving no trace on that device or not carrying your identity into the site.

1. A shared or borrowed computer: browse, do what you need and close. Nothing is kept for the next person, as long as you follow Solution 4.
2. A second account: sign in to the work account in the normal window and the personal one in the private window, without either dropping the other.
3. Testing a site: because the private window loads none of your cookies or cache, it shows the site as a new visitor would see it, which helps when a page insists on not refreshing.
4. Shopping for gifts or trips on the home computer: it handles the problem of a family member seeing the history or getting the site's suggestions later.
5. Outside those cases, think twice before relying on it for privacy.

7Understand what a VPN solves and what it does not

A VPN is the tool people turn to when they discover the limits of private browsing, and it comes wrapped in its own exaggerated promises. What it does is route your traffic through an intermediate server, so the provider and the network administrator only see that you are connected to that server, not which sites you open. That solves one specific problem and creates another: the VPN service now sees what your provider used to see.

1. Use a VPN when the goal is hiding the addresses you visit from whoever runs the network, such as on public or open Wi-Fi.
2. Do not count on a VPN to hide you from sites you sign in to: the login identifies you anyway.
3. Choose carefully, because you are transferring trust from your provider to the VPN company. Free services live on something, and often that something is selling browsing data.
4. Remember that a VPN does not replace a private window: it does not stop the history being saved on your computer.
5. Combine the two where it makes sense, knowing each solves a different half of the problem.

8Adjust the browser you use every day

For almost everyone, changing the settings of the main browser delivers more day-to-day privacy than opening a private window now and then. You reduce tracking across all your browsing, not only in the specific sessions you remembered to protect.

1. In the privacy settings, turn on the highest level of tracking protection your browser offers, and step it down if an important site breaks.
2. Set the browser to clear cookies and site data on exit, keeping on the exception list the few sites you want to stay signed in to.
3. Review the camera, microphone, location and notification permissions and remove everything you do not recognise or no longer use.
4. Install a well-known ad blocker, which removes a good share of trackers along with the advertising.
5. Review the activity settings of the accounts you use most and switch off or limit the history they keep about you.