What Does Incognito Mode Actually Hide?
Short answer
Incognito mode stops your browser saving history, cookies, form entries and site data on your own device once the window closes. It does not hide anything from your employer, school, internet provider or the websites you visit, and it is not anonymity. It is a local clean-up, nothing more.
On this page
Incognito mode, called private browsing in Firefox and Safari and InPrivate in Edge, does one thing. When you close the window, the browser discards what it would otherwise have saved about that session on your device.
That is a useful feature. It is also much smaller than most people assume, and the gap between what it does and what people think it does leads to real mistakes.
Chrome’s own incognito screen lists the limits in plain text, which has not stopped the belief persisting. It is worth reading once.
What it stops and what it does not
| Hidden from | Not hidden from |
|---|---|
| Other people using your device | Your employer or school |
| Your browsing history list | Your internet provider |
| Cookies after the window closes | The websites you visit |
| Saved form entries and passwords | Your DNS provider |
| Site data and cache entries | Anyone running the network |
The organising principle: incognito is a local feature. It controls what your browser writes to your disk. It has no effect whatsoever on the traffic leaving your device, because the browser cannot change what the network observes.
What happens mechanically
Opening an incognito window creates a fresh, empty browsing context held in memory rather than written to your profile folder:
- An empty cookie jar, so you start signed out everywhere.
- A separate cache and local storage area.
- History entries kept in memory only.
- Saved passwords and autofill available for reading, but nothing new saved.
- Extensions disabled by default, unless you specifically allowed them.
Close every incognito window and that context is destroyed. Open a new one and you start from nothing again. Incognito windows do share state with each other while any remain open, which surprises people who open a second window expecting a clean slate.
One important exception, because it costs people regularly: downloaded files are kept. The download lands in your Downloads folder and stays. Only the browser’s list of it is discarded. The same applies to bookmarks you create and to changed browser settings.
Who can still see everything
Your employer or school. On a corporate network, traffic passes through equipment that logs destinations. On a managed device, the employer may have installed a root certificate allowing full inspection of HTTPS traffic, a legitimate configuration that makes the browser mode entirely irrelevant. Monitoring software on the device records activity before the browser decides what to save.
Your internet provider. DNS lookups reveal domains. Connection metadata reveals the rest. Incognito does not alter a single packet.
The websites themselves. A site sees your IP address, your browser fingerprint and everything you do on it. Sign in to an account and it knows exactly who you are: the same account, the same identity, with no history behind it. Google has been explicit that it collects data on signed-in activity in incognito as it would elsewhere.
Your router and network administrator. Routers with logging enabled, and most parental-control systems, record requested domains at the network level.
Your DNS provider. Unless you use encrypted DNS, every lookup goes to a resolver in readable form.
What it is genuinely good for
Used for what it is, it is a decent tool.
- Shared or borrowed computers. The main use case, and it works.
- Signing into a second account without logging out of the first. Faster than switching profiles.
- Seeing a page as a logged-out visitor. Useful for checking a public link, a paywall, or your own site.
- Avoiding personalised results when researching prices or flights, though the effect is smaller than folklore claims, since pricing varies by region and demand far more than by your cookies.
- Keeping surprise purchases out of the history on a family machine. A modest goal, reliably achieved.
It is also the fastest way to test whether a browser problem is caused by an extension or a corrupted cookie, since extensions are off and the cookie jar is empty. If a site misbehaves normally and works in incognito, you have your answer in ten seconds.
What would actually hide your browsing
Nothing hides it from everyone. Each tool covers a specific observer.
| Goal | Tool | Still exposed to |
|---|---|---|
| Hide domains from your provider | VPN, or encrypted DNS | The VPN or DNS operator |
| Hide your IP from sites | VPN | The VPN operator, and your logins |
| Resist cross-site tracking | Tracking protection, cookie blocking | Fingerprinting |
| Hide activity from your employer | Use a personal device on your own connection | Your own provider |
| Strong anonymity | Tor Browser | Anything you log into |
Stack them if your needs warrant it, and understand that every one of these moves trust rather than eliminating it. A VPN removes your provider from the picture and inserts the VPN company instead, which is a real improvement only if you trust them more, and that is covered further in what your IP address does and does not reveal.
For the specific case of an employer’s device, there is no browser setting that helps. The device is theirs.
Realistic expectations
Incognito does exactly what it says and nothing beyond. Judge it against the right question: “will the next person to use this laptop see what I did?” The answer is no, and that is a real feature.
For anything else — a network you do not control, a provider you would rather not log you, a site you do not want building a profile — it offers nothing at all. People reaching for incognito in those situations are not slightly protected; they are entirely unprotected while believing otherwise, which is worse than knowing.