Incognito Mode vs VPN: What Each One Actually Hides
A private window forgets for you. A VPN hides for you. Neither makes you invisible.
"Go incognito" is one of the most misunderstood pieces of privacy advice. The name suggests invisibility, but the feature was designed for a narrower job: leaving no trace on the computer you are using. This guide shows what each tool hides and from whom, so you can use the right one, or both, for the situation in front of you.
What private browsing actually does
When you open a private window, your browser starts a temporary session. When you close the window, it discards that session. In practice that means:
- Pages you visit are not added to your local history.
- Cookies and site data from the session are deleted when you close it.
- Searches and form entries are not saved for autofill.
- You start without being signed in to anything, and without the cookies from your normal session.
That is useful if you share a computer, are shopping for a gift, or want to check a site without existing cookies influencing what you see. Exact behavior differs slightly between browsers, so check your browser's own description of its private mode.
What private browsing does not do
- It does not hide your IP address. Every site you visit still sees where the request comes from.
- It does not hide your activity from the network. Your ISP, school, employer or Wi-Fi operator can still see the connections you make, and DNS lookups can reveal site names. See our guide on what your ISP can see with and without a VPN.
- It does not protect you once you log in. If you sign in to an account, the site knows who you are for the rest of the session.
- It does not stop fingerprinting. Sites can recognize your device from details such as browser version, fonts and screen size.
- It does not remove what you download or save. Files and bookmarks you create stay put.
- It does not stop malware or phishing. A private window is as vulnerable as a normal one.
What a VPN does and does not do
A VPN encrypts your connection to the VPN server. Websites see the server's address, and the local network sees only that you are connected to the VPN. It is the right tool for hiding browsing from a shared network and for avoiding your real IP address on sites you visit.
But a VPN does not clean up your browser. Cookies still follow you from one site to the next, a logged-in account is still logged in, and fingerprinting still works. The VPN provider can see your traffic metadata, so your trust moves from the network to the provider. Our VPN myths guide lists other misconceptions, and the guide to when you do not need a VPN helps you decide whether you need one at all.
Who can see what
| Who is watching | Normal window | Private window only | VPN only | Both |
|---|---|---|---|---|
| Someone using your device later | Can see history | Hidden | Can see history | Hidden |
| Websites (your IP address) | Visible | Visible | VPN address shown | VPN address shown |
| Wi-Fi operator or ISP | Sees destinations | Sees destinations | Sees only the VPN link | Sees only the VPN link |
| A site you are logged in to | Knows you | Knows you once you log in | Knows you | Knows you once you log in |
| The VPN provider | Not involved | Not involved | Can see traffic metadata | Can see traffic metadata |
When to use which
- Shared computer, gift shopping, checking a page without your cookies: private window.
- Cafe, hotel or airport Wi-Fi: VPN. Our public Wi-Fi guide explains why.
- Keeping your home ISP from seeing your destinations: VPN, noting the trust shift to the provider.
- Researching something sensitive on a family computer: both, so the browser leaves no local trace and the network sees only the VPN link.
- Staying anonymous from a determined adversary: neither is enough on its own. See VPN vs Tor.
Pairing them well
If you use both, start the VPN first, then open the private window. Check for leaks if you rely on the VPN for anything important, and read our explainer on DNS leaks. Do not log in to personal accounts if the point is to appear as an unidentified visitor. Consider browser settings that block third-party cookies and trackers, since those protect you in a way that neither a VPN nor a private window does by itself.
Settings that help more than either one
If your real goal is less tracking, a few ordinary browser settings do more than a private window ever will. Block third-party cookies, turn on your browser's tracking protection, and review which extensions can read the pages you visit. Use a password manager and two-factor login so a leaked password is not enough to take over an account. Sign out of accounts you do not need to stay signed in to. None of this is glamorous, and none of it requires a subscription, but it addresses the things advertisers and sites actually use to follow you around.
Common myths, quickly
- "Incognito makes me anonymous." It makes your browser forget. Others can still see you.
- "A VPN makes me invisible." It changes who sees what, but you can still be recognized by logins and fingerprints.
- "If I clear history, nobody can see it." Your ISP, network and the sites themselves keep their own records.
The basics of what VPNs are and how they differ from other privacy tools are covered in our beginner's guide. For the layered picture of tools that complement each other, see VPN vs proxy as well.
Want a VPN to cover the network side?
Compare NordVPN and Surfshark on the providers' own pages and test during the refund window. Affiliate links; see the disclosure at the top.