Why Incognito Mode Doesn't Make You Anonymous

In 2020, a group of Google users filed a class-action lawsuit accusing the company of tracking their activity even while they browsed in Chrome's Incognito mode — the feature millions of people open specifically because they believe it makes their browsing private. Google settled the case in early 2024 for a figure the company never disclosed, after plaintiffs argued the mode had left them with what their court filing called an unaccountable trove of personal data. As part of the settlement, Google rewrote Chrome's own incognito disclaimer to be blunter about what the feature actually does: it stops other people who use the same device from seeing your activity, but it does nothing about how the websites you visit, or Google itself, continue to collect data during the session.

That distinction — between hiding something locally and hiding it from the internet at large — is the single most important thing to understand about private browsing, and it's the one most people get wrong. A peer-reviewed study from the University of Chicago and Germany's Leibniz Universität Hannover, published at the 2018 Web Conference, surveyed 460 people about exactly this question and found the confusion was widespread and persistent, even after participants read the actual disclosure text their own browser displayed. More than a fifth of respondents believed their internet provider couldn't see their activity in private mode; over a third thought their employer couldn't; roughly 40 percent believed websites couldn't estimate their location. Nearly half thought bookmarks saved during a private session would disappear afterward — they don't.

What incognito mode actually does

Every major browser has some version of this feature — Chrome calls it Incognito, Edge calls it InPrivate, Firefox and Safari call it Private Browsing — and functionally, they all do the same narrow thing: they open a temporary, isolated session that doesn't save your browsing history, cookies, or site data to your device, and that clears itself out once you close the window. That's genuinely useful in specific situations. If you share a computer with family members, a partner, or roommates, incognito mode keeps them from seeing what you searched for or which sites you visited in your local history. If you're shopping for a gift, planning a surprise, or simply want your work browsing and personal browsing not to bleed into the same autocomplete suggestions, it does the job.

What it was never built to do is prevent anyone outside your device from seeing your activity. Downloaded files and any bookmarks you save persist after the session ends, because those aren't considered part of the temporary browsing history the mode is designed to erase. And everything that happens over the network — the sites you connect to, the data you send — behaves exactly as it would in a normal browsing window.

Your ISP and network still see everything

Every request your browser makes has to travel through your internet service provider, and in the case of a work, school, or public network, through whatever infrastructure that network's administrator controls, before it reaches the site you're trying to visit. Incognito mode doesn't encrypt that traffic or reroute it anywhere; it simply stops your own device from writing down where you went. Your ISP can still log which domains you connected to and when, and on a managed network, IT administrators typically retain the same connection logs incognito mode would otherwise have hidden from a nosy family member. Even when a site uses HTTPS encryption, the DNS lookup that translates a domain name into an address, and often the domain name itself in the connection handshake, remains visible to whoever is watching the network.

Websites still know exactly who — or at least where — you are

The moment you open a page, your IP address is exposed to the site's server, incognito or not — that's simply how the underlying protocol that runs the internet works. An IP address alone can reveal the city, and sometimes the specific neighborhood, a connection is coming from. Incognito mode does nothing to mask it. The only way to hide your IP address from the sites you visit is to route your traffic through something else first, such as a VPN or Tor, which sit at the network layer rather than inside the browser.

Fingerprinting: the tracking method built for a cookie-free world

Even setting IP addresses aside, the technology that has made incognito mode's cookie-clearing feel almost beside the point is browser fingerprinting. Rather than storing an identifier on your device the way a cookie does, fingerprinting scripts silently read dozens of small technical details your browser exposes to every site you visit by default — your screen resolution, installed fonts, GPU and audio hardware quirks, timezone, and language settings, among others. No individual detail is unique; millions of people run Chrome on a 1920×1080 display. But combined, researchers at the Electronic Frontier Foundation and the academic AmIUnique project have found that thirteen or more of these signals together produce a fingerprint that is statistically unique for somewhere between roughly 84 and 90 percent of browsers tested. Canvas fingerprinting, one of the most common techniques, is present on a substantial share of the internet's most visited sites. None of it touches cookies or local storage, which means clearing your history, or opening a fresh incognito window, changes nothing about how identifiable your browser's fingerprint remains from one session to the next.

Logging in erases whatever privacy was left

Perhaps the simplest way incognito mode's privacy gets undone is one most people do without thinking: logging into an account. If you sign into Google, Facebook, or any other service inside a private window, that service now knows exactly who you are for the rest of the session, regardless of which mode the browser tab is running in. Visit a page while logged in, and the platform can record that visit and connect it to your identity just as it would outside incognito. It's precisely why some browsers automatically sign users out at the start of a private session — but not all of them do, and nothing stops you from logging back in.

It offers no protection from malware, either

Incognito mode operates entirely inside the browser's handling of history, cookies, and form data. It has no bearing on your device's exposure to malware, phishing pages, or infected downloads. A malicious file downloaded in a private window is exactly as dangerous as one downloaded in a normal one, and any spyware, keylogger, or malicious browser extension already present on a device can observe activity in incognito sessions just as easily as anywhere else, since those tools typically operate with access to the system rather than to the browser's local history alone.

What genuine anonymity actually requires

None of this makes incognito mode useless — it does exactly what it was designed to do, which is keep your local browsing history private from other people who share your device. The mistake is treating it as a substitute for network-level privacy tools, which it was never built to be. Masking your IP address from the sites you visit and from your ISP requires a VPN, which encrypts your traffic and routes it through a remote server, or Tor, which routes it through multiple independent relays and additionally standardizes browser characteristics across its entire user base specifically to resist fingerprinting. Reducing your exposure to fingerprinting on an ordinary browser generally means using a browser built to actively randomize those signals, since incognito mode's cookie management has no effect on them at all. And no combination of these tools changes what happens the moment you log into an account — at that point, anonymity was never on the table to begin with.

The practical takeaway is less about any single tool and more about matching the tool to the actual threat. Incognito mode solves a real but narrow problem: someone else picking up your device later and seeing where you've been. It was never designed to, and does not, hide anything from your internet provider, your network administrator, the websites you visit, or the fingerprinting scripts running quietly in the background of the modern web.