Private Browsing in 2026

Incognito mode (or "private browsing" in Firefox and Safari) is the most commonly misunderstood privacy feature in any browser. Surveys consistently find that a meaningful fraction of users believe it hides them from websites, their employer, their ISP, or even their government. It does none of those things. What it actually does is useful, but narrow.

This article explains what private browsing does in 2026, what it does not, and how to combine it with the rest of your privacy stack for a result that actually matches what most users were hoping for. Companion reading: privacy online and block trackers.

What incognito actually does

When you open a private window, the browser does the following:

• Starts with an empty cookie jar. No third-party cookies from your normal browsing carry over.
• Starts with an empty cache. No previously-cached files inform what the site sees.
• Discards browsing history, downloads list and form autofill at the end of the session.
• Discards any cookies set during the session at the end of the session.
• Isolates the session from other private windows of the same browser brand (in modern Chrome and Firefox).

That is the promise. Notice what is not in it.

What incognito does not do

• It does not hide your IP address from the sites you visit.
• It does not encrypt your traffic in a way that hides it from your ISP, employer, school or anyone else on the network beyond what HTTPS already does.
• It does not prevent the site itself from logging your visit and tying it to other visits via fingerprinting.
• It does not hide what you do from the operating system, parental controls or any installed monitoring software.
• It does not stop downloads you complete from being saved to disk.

If you needed any of the things in this list, incognito alone will not do it.

What it is actually useful for

Incognito has a few genuinely good uses:

• Shared devices. A friend wants to log into their email on your laptop. Open a private window; their session does not stick around.
• Buying gifts. You do not want the recommendation engine on a shopping site to spoil the surprise. A private window prevents the visit from polluting your normal session.
• Quick logged-out comparison. You want to see the page as a logged-out user without logging out of your own account.
• Testing. Developers use private windows to validate first-visit behaviour.

For each of these, incognito is a fine tool. None of them are "privacy from surveillance".

Combining incognito with a real privacy stack

For browsing where you actually want privacy:

1. Block trackers. Install NovaBlock and allow it in private windows from your extension settings. By default, most browsers disable extensions in incognito, which means a normal browser window with a blocker is often more private than a private window without one.
2. Block third-party cookies. Browser-level setting.
3. Use a private-friendly DNS resolver. Cloudflare 1.1.1.1, Quad9, AdGuard DNS, NextDNS.
4. Use a VPN if you need to hide your IP. Pick a reputable one.
5. Use Tor for sensitive activity. Only for users with a real threat model.

A normal window with this stack is usually more private than an incognito window without it.

How to enable NovaBlock in private windows

Chrome and Edge

1. Open chrome://extensions.
2. Find NovaBlock, click Details.
3. Toggle "Allow in Incognito" on.

Firefox

1. Open about:addons.
2. Find NovaBlock.
3. Under Run in Private Windows, choose Allow.

Brave

Brave's "Tor in private windows" mode runs traffic through the Tor network. This is meaningful additional privacy, with a real performance cost.

Comparison

Pros and cons of relying on incognito

Pros

• Useful for the specific scenarios above.
• Built in, no setup.
• Zero performance cost.

Cons

• Almost universally misunderstood.
• Often used for tasks it cannot actually protect against.
• Creates a false sense of security.

What about "guest" mode?

Chrome and Edge offer a separate "guest" mode that goes further than incognito: no extensions, no profile data, no carry-over of any kind. It is intended for shared devices, not for daily browsing.

A quick word on the "incognito mode does not protect you" lawsuits

There have been multiple class-action settlements in the US around the gap between what browsers said incognito did and what users believed it did. The settlements clarified the language; they did not change what incognito does. If you remember the headlines, this is what they were about.

Conclusion

Incognito mode is good at the small thing it does. It is not a privacy upgrade. For most users who want a more private daily browsing experience, the real answer is to harden the normal window: install NovaBlock and allow it in private windows too, block third-party cookies, point your DNS at a clean resolver, and pick a sensible browser. Private windows have a place. Just do not ask them to do something they were never designed for.