Every major browser offers a private browsing mode — Chrome calls it Incognito, Firefox and Safari call it Private Browsing, Edge calls it InPrivate. Despite the different names, they all work essentially the same way. The realistic mental model matters here: private browsing mode is a tool with specific, well-defined benefits — not a comprehensive anonymity solution — and using it with inflated expectations leads to decisions that create false security. For the bigger picture, our Complete Guide to Online Security and Privacy pulls everything together.
The core benefit: when you browse in a private window, the browser does not save your browsing history, cookies, site data, or form information to the local device after the session ends. The browsing session leaves no local trace. Anyone who uses the same device afterward will not find the sites you visited, the logins you used, or the forms you filled out.
How to open a private window in each major browser
- Chrome (Incognito): Ctrl+Shift+N (Windows) / Cmd+Shift+N (Mac), or Chrome menu → New Incognito window. Distinctive dark header and the Incognito icon in the top-left corner.
- Firefox (Private Window): Ctrl+Shift+P, or File → New Private Window. A purple mask icon appears in the upper-right corner.
- Microsoft Edge (InPrivate): Ctrl+Shift+N, or three-dot menu → New InPrivate window. Blue InPrivate indicator appears in the top-right.
- Safari (Private): Cmd+Shift+N (Mac), or File → New Private Window. “Private” appears in the Smart Search field when private mode is active.
In Chrome and Edge, Incognito/InPrivate tabs cannot coexist alongside regular tabs in the same window — a separate dark window is always created. In Firefox and Safari, private tabs and regular tabs can coexist in the same window in some configurations, making the visual indicator more important to check before assuming you’re in private mode.
Opening a new tab with Ctrl+T inside a private window creates another private tab. Closing the last private tab closes the private session and discards all its cookies and history.
Mobile: Chrome for Android: three-dot menu → New Incognito tab. Chrome for iOS: three-dot menu → New Incognito Tab. Safari for iOS: Tabs icon → Private → Done. Firefox mobile: three-dot menu → New private tab.
What private browsing mode actually protects you from
The protections are specific and useful within their defined scope:
- Local device history inspection. A family member, colleague, or anyone else who uses the same device and browser after you won’t find the sites you visited, see your login sessions, or find form data from the session. Downloads still save to the download location, but the download history in the browser is not recorded.
- Cross-session cookie-based tracking. Because private sessions discard cookies at close, websites can’t use cookies to track your browsing across sessions. This is useful for avoiding price discrimination on travel and shopping sites, which sometimes display higher prices to users with browsing histories indicating repeat interest in a product. Open the booking site in a private window and compare prices to what you saw in a regular session.
- Accessing a second account. A fresh cookie state means you can log into a different account on a service without logging out of the primary account in your regular browser window — the two sessions are completely isolated.
- Testing how a website looks to a logged-out visitor. No cookies, no cached content — the private window shows exactly what a new visitor sees. Useful for web developers, content managers verifying what’s publicly accessible, and anyone testing access controls.
What private browsing mode does NOT protect you from
This is where the most consequential misunderstandings live:
- Your ISP seeing your traffic. Your internet service provider sees all DNS lookups and connection requests from your network regardless of browser mode. Private browsing is a local privacy tool, not a network privacy tool.
- Employer monitoring on a corporate device or network. IT departments that monitor network traffic see activity in private windows exactly as they see activity in regular windows.
- The websites you visit knowing your IP address. The site sees the IP address of the connection. Private mode changes nothing about this.
- Malware or keyloggers on the device. Software running on the device can observe everything typed, regardless of browser mode.
- Browser fingerprinting. Fingerprinting uses the combination of browser version, screen resolution, installed fonts, timezone, and hardware specifications to create a unique device identifier that persists regardless of whether cookies are cleared. Advertising networks using fingerprinting can identify returning visitors across private sessions without any cookies. Standard Incognito and InPrivate modes don’t address this — Firefox’s Strict Enhanced Tracking Protection mode and the Tor Browser are the tools that do.
The Tor Browser routes traffic through the Tor anonymity network, hiding browsing activity from the ISP and network observers. A VPN encrypts traffic between the device and the VPN server, hiding browsing destinations from the ISP. Private browsing mode does neither. Private mode for local observers is correct use; private mode for network observers is incorrect — that requires Tor or a VPN.
Practical scenarios where it’s the right tool
Private browsing mode is correct for:
- Banking or sensitive accounts on a shared or public computer: even if you forget to log out, closing the private window terminates the session and discards the authentication cookie
- Shopping and travel price comparisons: fresh cookie state prevents cookie-based price discrimination
- Diagnosing website problems: if a site works correctly in private mode but not in regular mode, the issue is in your cached data or cookies — confirming this takes two minutes
- Checking personal accounts on someone else’s device without leaving history, saved credentials, or session data
The privacy threat hierarchy is worth internalising: private browsing mode for local traces → private browsing mode plus a VPN for ISP observation → Tor Browser for network observer privacy and fingerprint resistance. Each step adds protection for a different adversary: local (shared device users), network (ISP and employer), global (surveillance systems and sophisticated tracking). Understanding this hierarchy calibrates which tool to use for which threat, rather than relying on private mode for threats it wasn’t designed to address.
Our guide on setting up a VPN covers the network-level privacy layer that complements private browsing, and our guide on securing your browser covers the browser settings and extensions that extend tracking protection beyond what private mode provides. For testing whether your browser is fingerprint-identifiable even in private mode, the EFF’s Cover Your Tracks tool provides a real-time fingerprinting assessment.
Extensions and settings that enhance private browsing
Standard private browsing mode can be extended to provide stronger tracking resistance:
- uBlock Origin in private windows: Chrome: chrome://extensions → uBlock Origin → “Allow in Incognito” → On. With uBlock Origin active in private windows, most tracking pixels and third-party scripts that identify returning visitors across sessions (even without cookies) are blocked.
- Firefox’s Enhanced Tracking Protection (Strict mode): in Firefox private windows, ETP in Strict mode blocks known trackers, fingerprinters, and cryptomining scripts by default. Firefox private browsing with Strict ETP provides meaningfully stronger tracking resistance than Chrome’s Incognito in most scenarios.
- Privacy Badger (EFF): available for Chrome and Firefox, extends learning-based tracking prevention to private windows when allowed. Complements private mode’s cookie isolation with content-level blocking.
In Firefox: about:preferences → Privacy & Security → History → “Always use private browsing mode” makes every session private by default without a separate private window. Appropriate for users who want no local browsing record ever and who manage logins through a password manager rather than relying on the browser to remember credentials. The trade-off: no browsing history for revisiting sites, and every session starts fresh — requiring login to services that expect a remembered session.
The one scenario most guides overlook
Testing whether a website works correctly without your account’s specific configuration. When a web application behaves differently for you than for other users, opening it in a private window reveals the default experience — without your account’s saved preferences, custom settings, or potentially corrupted session cookies. This diagnostic use helps isolate whether a problem is account-specific (visible when logged in as you, not in private mode) or site-wide (visible even in private mode, affecting all users). Web developers, IT support staff, and technically-minded users find this particularly valuable for debugging without needing a second account or a completely clean browser installation.
Private browsing mode is genuinely useful for its defined purpose — local session isolation — while being genuinely insufficient for broader anonymity. Both things are true simultaneously, and holding both in mind is what correct use of the tool looks like. Neither dismissing it as useless nor over-relying on it as comprehensive privacy protection reflects how it actually works.
Quick reference — opens, shortcuts, and what’s isolated
| Browser | Shortcut (Windows) | Shortcut (Mac) | Visual indicator |
| Chrome (Incognito) | Ctrl+Shift+N | Cmd+Shift+N | Dark header, Incognito icon (top-left) |
| Firefox (Private) | Ctrl+Shift+P | Cmd+Shift+P | Purple mask icon (top-right) |
| Edge (InPrivate) | Ctrl+Shift+N | Cmd+Shift+N | Blue InPrivate label (top-right) |
| Safari (Private) | N/A | Cmd+Shift+N | “Private” in Smart Search field |
Tab locking in mobile Chrome
Chrome for Android includes a tab-locking feature that goes beyond what desktop private browsing offers. When Chrome for Android is sent to the background and reopened, it can require fingerprint or PIN authentication before revealing open Incognito tabs — protecting them from anyone who picks up an unlocked phone while Chrome is backgrounded. Enable this in Chrome Android Settings → Privacy and security → “Lock Incognito tabs when you close Chrome.” It’s off by default and uses the device’s existing biometric or PIN authentication with no separate setup required.
This is one of the most useful private browsing mode enhancements on mobile — the scenario it protects against (someone picks up your phone while you’re away from it with a private browsing session open) is far more common in mobile contexts than on desktop. Enable it once and it applies to every subsequent Incognito session automatically.
Private browsing for developer and QA workflows
Beyond personal privacy, private browsing mode is a standard tool in professional web development and QA workflows:
- Testing authentication flows: a fresh private window simulates a new user without any prior session — essential for testing login, registration, and session handling
- Testing cookie and cache behaviour: no prior state means the test reflects what a first-time visitor experiences
- Replicating user-reported issues: when a user reports a problem you can’t reproduce while logged into your account, a private window as a fresh logged-out session often reveals account-specific vs. site-wide issues quickly
- A/B testing verification: a private window in a fresh session receives the same assignment logic as a genuinely new visitor, allowing manual verification that experiment assignment is working correctly
The combination of private browsing mode (fresh session state), multiple browsers (different rendering engines), and browser DevTools (network and console inspection) covers the majority of front-end debugging scenarios that developers encounter day-to-day. Private mode’s role in this toolkit is specifically the fresh session state — reproducible, quick to open, and requiring no cleanup after the test is complete. See also Chrome Reading Mode for a related case.
Private browsing mode is a mature, well-understood browser feature that earns its place in everyday use for the scenarios it genuinely addresses. The key is understanding its scope clearly enough to know when to reach for it and when to reach for something that provides different protection for a different threat model. You might also run into Chrome Incognito Mode.
