Incognito mode makes me invisible online

A user clicks a small icon in their browser to open a window that looks slightly different from the rest. Perhaps the background is dark or there is an image of a spy in a hat. The feeling is immediate. This person is now invisible. The internet has become a place where movements are untraceable and footprints vanish the moment the tab closes.

This belief started because it was once mostly true within the four walls of a home or office. In the early days of the web, the primary risk to privacy was local. If a person shared a computer with a spouse or a colleague, those people could simply look at the browser history to see every site visited. They could see saved passwords or form data left in a search bar. For someone wanting to hide a surprise gift or a bit of procrastination from a manager, private browsing solved the problem perfectly. It cleared the local evidence.

A local secret#

The confusion stems from a misunderstanding of where data lives. Private mode is designed for local hygiene. It tells the browser not to save the history of the session on the hard drive. It prevents cookies – small text files that websites use to remember a user – from staying on the machine after the window closes. Once that window vanishes, the local record of those actions disappears.

This is a shared-computer feature. It exists so that one person can use a device without leaving a trail for the next person who sits in that chair. The browser does not hide the user from the rest of the world; it only hides the session from other people using the same computer.

The internet is not a single entity but a chain of connections. To reach a website, data must pass through the local router, then to the Internet Service Provider (ISP), and finally to the server hosting the site. Private mode does nothing to encrypt or hide this traffic. The ISP sees every domain visited. If the computer is in an office, the network administrator at the organisation can see everything too. Each website visited still recognises the IP address, which is the unique numerical label assigned to a device on a network. This allows sites to track behaviour and identity even when the browser is in incognito mode.

The danger of confidence#

The risk here is not the technology itself, but the false sense of security it provides. A person might believe they are anonymous and therefore decide to visit risky websites or access sensitive data on an untrusted network. They feel they are wearing a cloak of invisibility, when in reality, they are simply wearing a mask in a room full of high-definition cameras.

Browser developers established these modes to help users manage their local footprints. Google, Apple, and Mozilla designed them for convenience and basic domestic privacy. They did not design them as tools for anonymity against state actors or corporate trackers.

For those who need genuine privacy, other tools are required. A Virtual Private Network (VPN) can hide an IP address from the websites being visited and encrypt traffic so the ISP cannot see the specific pages accessed. For a higher level of anonymity, a person might use Tor. This is a specialised network that bounces traffic through several different servers around the world to make it difficult to trace the origin of the request. Even these tools have limits, but they operate on the network level rather than just the browser level.

If a user needs to hide their activity from the internet and not just from a housemate, avoid relying on private windows. Use a reputable VPN for basic masking or the Tor Browser for stronger anonymity. Always assume that any network administrator or service provider can see where the traffic is going.