Skip to content
11 min read Recently reviewedBeginner

Understanding the Incognito Mode Myth

Applies to: Google Chrome (Incognito), Microsoft Edge (InPrivate), Mozilla Firefox and Safari (Private Window); Windows and Mac
Article Type: Informational
Last Updated: 2026-07-29

Summary

Private browsing is one of the most misunderstood buttons in any browser, and the misunderstanding is not the reader's fault — the name, the icon, and the dark window all promise more than the feature delivers. This article sets out precisely what private browsing removes, who can still see your activity, and the handful of situations where it is genuinely the right tool.

Prerequisites

  • Any modern browser. No admin rights, settings changes, or technical background required.
  • The mode is called Incognito in Chrome, InPrivate in Edge, and a Private Window in Firefox and Safari. The behaviour described here is the same in all four.

Instructions

1. Where the Belief Comes From

The myth that private browsing makes you anonymous is reasonable on its face, and it comes from three honest places.

  • The name and the artwork. A mode called Incognito, marked with a hat-and-glasses icon, sets an expectation before you have read a word. Nothing about the design says "this only affects one computer".
  • What it visibly does is real. Close the window and the history is gone, the cookies are gone, and the address bar has forgotten the site. Watching that happen, it is fair to conclude that the visit itself has been erased.
  • It solved a real problem well. Private browsing was designed for shared computers in an era when a household had one PC. For that job it worked perfectly, and the reputation stuck long after most people stopped sharing a machine with their family.

The feature is not a marketing trick. It does exactly what it was built to do. The gap is between what it was built to do and what people assume it covers.

2. What Private Browsing Actually Does

When you close the last private window, the browser discards everything it collected during that session on that device.

  • Browsing history. The pages you opened never enter the history list and never appear in address bar suggestions afterwards.
  • Cookies and site data. Every cookie set during the session is dropped when the window closes, which is why you start signed out of every site and finish signed out again.
  • Form and search entries. Anything typed into a search box or a form field is not saved for autofill.
  • Site permissions. A camera, microphone, or location permission granted in the window applies to that session only.
  • Cached files. Images and scripts downloaded to render pages are discarded rather than kept on disk.

Chrome states the boundary plainly on its own start page. Under Your activity might still be visible to: it lists Websites you visit, Your employer or school, and Your internet service provider. Edge prints an equivalent notice on the InPrivate start page. The browsers have never claimed anything more than this — the claim was added by the rest of us.

Three things are worth knowing about what stays behind anyway:

  • Downloaded files remain on the computer. The download is not listed in the browser's download history, but the file itself sits in your Downloads folder until you delete it.
  • Bookmarks and favourites you create are kept. They are browser settings, not session data.
  • The operating system's own DNS cache can still hold the site names your computer looked up. That cache is outside the browser and private mode does not reach it.

3. What It Does Not Do

Everything in this section applies identically in a private window and a normal one.

Who sees your activityWhat they seeWhy private mode makes no difference
The websites you visitYour IP address, rough location, browser and device details, and any account you sign in toThe site receives an ordinary web request. Nothing in it says the window was private.
Your employer, on a work device or networkThe sites requested, the time, and the account or device that askedThe request is logged by the network filter and the company DNS resolver, both of which sit outside the browser.
Your internet service providerThe domains you connect to, along with time and volumeYour traffic still travels over their network to reach the site.
Your school, hotel, or café networkThe same domain-level recordWhoever runs the network you are connected to sees the connections you make on it.
Anyone with access to the computer itselfFiles you downloaded, and anything monitoring software recordsPrivate mode governs what the browser writes down, not what other software on the machine does.

The single sentence worth memorising: private browsing controls what your browser saves, not what anyone else observes.

4. On a Work Computer, Nothing Changes

This is where the myth causes real harm, because people rely on it for exactly the thing it does not cover.

A managed work laptop sits behind three independent layers, and none of them is part of the browser.

  1. The corporate proxy or web filter. On the office network or the company VPN, every request is checked against a policy before it is allowed out. The request, the destination, the time, and the account are recorded — including requests that were blocked. Many organisations also inspect encrypted traffic on managed devices, so the padlock in the address bar does not hide the destination from the company's own filter.
  2. DNS logging. Before your browser can reach a site, the computer asks a name server for its address. On a managed device that lookup goes to a company resolver, which keeps a record of the name. A private window still has to ask.
  3. Endpoint management software. The agent your employer installs to keep the laptop patched and compliant runs regardless of which browser window is open. Some deployments record the URLs visited directly.

Two consequences follow from this.

  • A private window on a work laptop produces the same logs as a normal one. The one difference is that your own history list is empty afterwards, which affects nobody but you.
  • Some organisations turn the mode off entirely. Browser policy can remove New Incognito window and New InPrivate window from the menu. If the option is missing from your work browser, that is a deliberate setting rather than a fault.

For a full account of what your employer can and cannot see, read Understanding What IT Can See on Your Work Computer.

A private window starts you signed out of everything. The moment you sign in to something, that protection is spent.

  • The account knows it is you. Signing in to a Google account inside an Incognito window puts your searches into that account's activity record. Signing in to your work account inside an InPrivate window writes an entry to your organisation's sign-in log, complete with IP address and device.
  • The session persists in the account, not the browser. Closing the window clears the cookie on your machine. It does not remove anything the service already recorded server-side.
  • One sign-in can identify the whole session. Sites you visited before signing in can often be tied to the same session by the same IP address and browser fingerprint.

Private mode gives you a clean, unauthenticated starting point. It cannot keep you anonymous after you have introduced yourself.

6. It Is Not a VPN, and It Does Not Hide Your IP Address

These two tools are often mentioned in the same breath and they solve different problems.

  • Private browsing changes what is stored locally. It does not change how your traffic is routed. Your IP address, and the rough location that goes with it, reach every site exactly as before.
  • A VPN changes the route. It builds an encrypted tunnel to another network and sends your traffic out from there, so the network you are sitting on sees the tunnel rather than the destinations.
  • A company VPN routes you towards the company, not away from it. Its purpose is to place you inside the corporate network so you can reach internal systems — which means your traffic passes through the corporate filter no matter where you are working from. See Understanding Your Company's VPN — What It Does and Why You Need It.
  • Neither one encrypts what HTTPS already encrypts. The padlock in the address bar is what protects the contents of a page on an untrusted network, and it is present in both window types. For what actually matters on a hotel or café network, see How to Stay Safe on Public Wi-Fi and Untrusted Networks.

7. What Private Browsing Is Genuinely Good For

Knowing the boundary makes the feature more useful, not less. These are the jobs it does well.

  • A second account without signing out of the first. Open a private window to check a second mailbox or sign in to a client's system while your own session stays untouched in the main window. For anything you do regularly, a dedicated browser profile is the better tool — it keeps its own bookmarks, extensions, and saved sign-ins. See How to Set Up Multiple Browser Profiles.
  • A clean session for testing a broken site. A private window carries in no cookies and, by default, runs no extensions. That makes it the fastest way to find out whether a stale cookie or an extension is breaking a web app: if the site works in a private window and fails in your normal one, you have your answer. Follow up with How to Clear Browser Cache and Cookies or How to Manage Browser Extensions.
  • Seeing a page the way a signed-out visitor sees it. Before sending a link to a document, a job posting, or a public page, open it in a private window. If it asks you to sign in there, the recipient will hit the same wall.
  • A shared, public, or borrowed computer. A hotel business centre, a conference kiosk, a colleague's desk. Here private browsing is doing precisely the job it was designed for, and it does it well. Close the window when you finish, and check the Downloads folder for anything you saved.

The honest summary: private browsing hides your browsing from other people using the same device. That is the entire feature. It does that reliably and it is worth using for it. It does not hide anything from your employer, your network, your internet provider, or the sites you visit — and no combination of settings inside the browser will change that.

Troubleshooting

INFO

None of this is specific to Chrome. Incognito, InPrivate, and Private Window are the same feature with different names, and each one draws the same line in the same place: it governs what the browser writes to the computer in front of you, and nothing that happens after the request leaves it.

SituationWhat is really going onWhat to do instead
You want a site kept off your employer's recordsNetwork and DNS logging happen outside the browserUse a personal device on your own connection. No browser setting affects what the company network records.
New InPrivate window is missing from the menuOrganisation policy disables private browsingThis is a deliberate setting. If you need it for a legitimate task, tell IT: "Please allow InPrivate windows for my account — I need a signed-out session to test customer-facing links."
A downloaded file is still there after closing the windowDownloads are written to disk, not to the sessionDelete it from your Downloads folder. The browser only forgot the download list, not the file.
A website still recognises you in a private windowYou signed in, or the site matched your IP address and browser fingerprintSign out, close every private window, and open a fresh one. Anything after a sign-in is attributable to your account.
You want to hide your IP address from a websitePrivate mode does not change how traffic is routedPrivate browsing cannot do this. A VPN can, subject to your company's policy on personal VPN software.
Your saved passwords still appear in a private windowSome browsers offer profile-level saved passwords in private modeReview what is stored, and keep personal credentials out of a work browser profile. See How to Manage Saved Passwords in Your Browser.