Helping people with computers... one answer at a time.

Google Chrome offers Incognito mode, and IE8 offers InPrivate browsing. We'll look at how they work, and how private they really are.

Google Chrome promises Incognito mode. Is it true that no record of your web browsing is kept and in the future can not be recovered? I thought windows kept a log of everything you did as a matter of course. Scenario: could the law enforcement agencies find the web sites you have visited if you were using incognito mode?

Ah yes, "Incognito" in Chrome, and "InPrivate Browsing" in Internet Explorer 8.

Also known as "Porn mode" to the rest of us.

Let's review what these features do, and just how paranoid you should be when using them to surf porn whatever it is you want kept private.

First, let me address something from your question:

I thought windows kept a log of everything you did as a matter of course.

No.

Windows does not keep a log of everything you do. Period.

"Windows does not keep a log of everything you do. Period."

Now, that being said, Windows can be configured to log a lot of what you do, and the applications you use can often log a lot of what you do, and of course spyware can log a lot of what you do, but the statement "Windows logs everything" is simply untrue.

Let's look at what Google's Chrome says about Incognito browsing (IE8's "InPrivate" is similar in concept):

Pages you view in this window won't appear in your browser history or search history, and they won't leave other traces, like cookies, on your computer after you close the incognito window.

Read that carefully, because that's all that Incognito mode does:

  • It doesn't add sites to your browser history

  • It doesn't add searches to your search history

  • It doesn't leave cookies behind

That's a pretty short list. In fact, the list of what could still happen is longer:

  • Anything you download, like pictures, MP3's or video, remains.

  • Any bookmarks you create remain.

  • The websites you visit may still have your visits in their logs.

  • Your ISP can always see what you're doing if they elect to, unless you take additional steps such as using a VPN.

  • Malware can still collect everything you're doing.

I also like that Google mentions that Incognito Browsing will not prevent people from watching over your shoulder, or protect you from "Surveillance by secret agents". Smile

One thing Google does not mention explicitly in Chrome documentation is how Incognito affects the browser cache. I have to say that Incognito would be kinda pointless unless it also affects the cache (i.e. things that might be cached in an Incognito session should be removed on exit), but I've not seen confirmation on that.

So, let's get to the meat of your question: could someone still figure out where you've been going even if you've been using Incognito or InPrivate modes?

Maybe.

I'll leave aside the fact that all bets are off if there's spyware installed.

One of the most fundamental concerns, as I see it, is that even in an incognito mode the browser still keeps information in memory (RAM). That, in turn could be swapped to disk into the paging or virtual memory file under certain circumstances.

And yes, to a truly dedicated individual that could be found.

Easy? Nope. Possible? Yes. Likely? That's harder to say. It depends on a lot of things coming together. My gut says it's not very likely, but of course I could be wrong (and the technologies could change).

My advice is to look at it this way: Incognito and InPrivate are the equivalent to automatically clearing your private data when your done - clearing the cache (we think), cookies, your browsing history and the like.

And nothing more.

That's a fine level of privacy for many needs, most notably looking at, ah ... art images.

But if you're truly paranoid, or really, truly need much more security than that advice provides, you should not rely on these browser features, but should be taking additional steps that are more clearly understood, and more completely in your control.

Article C3739 - May 22, 2009 « »

Share this article with your friends:

Share this article on Facebook Tweet this article Email a link to this article
Leo Leo A. Notenboom has been playing with computers since he was required to take a programming class in 1976. An 18 year career as a programmer at Microsoft soon followed. After "retiring" in 2001, Leo started Ask Leo! in 2003 as a place for answers to common computer and technical questions. More about Leo.

Not what you needed?

Recent Comments
12 Comments
robin
May 27, 2009 8:06 AM

I think the real problem is not what is stored on my computer but what records the ISP retains about my surfing and downloading. I understand that there is now or is going to be a new UK law that requires the ISP to keep a record of everything we do including our emails. UK is now a proper police state brought about by what I believe are three antichrists: Blair, Brown and Mandelson.

Paul
May 27, 2009 5:16 PM

Would a better solution be if you use a virtual machine like VMWare for 'incognito' browsing and reverting back to a snapshot. Wondering if reverting leaves a previous state that could be revived. Can downloaded material within virtual OS transferred to thumb drive be recovered from hard drive?

It's a good approach, as it would make recovery more difficult, at least. Yes, you can transfer files between the VM and host if you like. If you want to be extra paranoid, I'd place the VM hard disk image on an encrypted TrueCrypt volume, so that it was completely unrecoverable when the volume wasn't mounted.
- Leo
28-May-2009

Zax
January 15, 2013 11:04 PM

My question, is why do you need more privacy? There's no absolute way to escape the government (if you go that far), and most people wondering about incognito, etc, have no idea how data is stored or what the cache is. I happen to understand; however, most people start getting confused with the mention of such. I think it should be made clear that this is perfectly fine for the average, and even slightly off average, consumer looking for privacy.

Zax
January 15, 2013 11:05 PM

Also, what about sync? Does it prevent history and such (not bookmarks, I know) from syncing with other connected devices?

Charles Bevitt
February 12, 2013 9:23 AM

What about temp files? (This is probably part of the larger issue of browser cache.) When you view an image or non-HTML document in the browser, normally this image has been saved to disk in a temp file location. Even if the browser is set to delete temp files on exit, we know that deleting files doesn't actually erase or overwrite the file data on disk - it just marks that area of the disk as no longer in use. The file or fragments of the file remain until all of the area it had occupied happens to get re-used. A good incognito mode would force all temp files to be stored in memory, with no chance of being swapped to disk, even if that caused out of memory errors. Then when the PC is turned off it all goes to data heaven.

Comments on this entry are closed.

If you have a question, start by using the search box up at the top of the page - there's a very good chance that your question has already been answered on Ask Leo!.

If you don't find your answer, head out to http://askleo.com/ask to ask your question.