Ask ten people what “private browsing” means and you’ll get ten different answers. Some think it hides them from their boss. Others believe it blocks hackers. Most are wrong, at least in part. Incognito mode, encrypted DNS and network-level tools all sound like they do one job, yet each covers a separate gap.
Three Tools, Three Different Jobs
Picture a letter. Incognito mode shreds your own copy after it’s mailed. Encrypted DNS seals the address line so the mail carrier can’t read it. A network tool hides who is sending the letter in the first place. Same letter, three protections, and none of them replaces the others. Once you see that, most of the confusion around “private” browsing disappears.
What Incognito Mode Really Does
A private window is a local feature. When you close it, the browser forgets your history, cookies, site data and anything typed into forms. That’s all. It’s genuinely handy if you share a laptop with family, or if you’re hunting for a surprise gift and don’t want the ads to spoil it.
Nothing about your connection changes, though. Your internet provider still sees where you go, websites still see your IP address, and a school or office network can log everything. A VeePN desktop VPN works on a different level. It encrypts the connection itself instead of tidying up what the browser keeps.
Why the “Private” Label Causes Trouble
In late 2023, Google agreed to settle a class action that accused it of tracking people who thought they were browsing in private. The suit, filed in 2020, had asked for $5 billion.
The point isn’t that one company behaved badly. Incognito never promised anonymity, and Chrome’s own start screen says as much: websites, employers and providers can still see activity. People read “private” and heard “invisible.” With Chrome holding roughly two thirds of the global browser market (StatCounter), that misunderstanding is enormous.
Incognito hides your trail from the next person at your keyboard. It does nothing about everyone else along the way.
Encrypted DNS: The Phone Book Nobody Guarded
Whenever you type a site name, your device asks a DNS server for its numeric address. Encrypted DNS wraps the lookup in HTTPS (called DoH) or TLS (called DoT), and current versions of Chrome, Firefox, Edge and Android all support it.
Here’s the catch. Encrypted DNS hides the lookup, not the visit. Your provider still sees the IP address you connect to, and often the site name sent during the connection handshake. For a tiny blog on shared hosting, that reveals little. For a big service, it reveals everything. Newer standards such as Encrypted Client Hello are closing the gap, but rollout is patchy.
What Network-Level Privacy Adds
A VPN builds an encrypted tunnel between your device and a server run by the VPN company. Your provider sees a tunnel and nothing inside it. That matters on hotel, airport and café Wi-Fi, where strangers share the same network. Well over 90% of page loads in Chrome already use HTTPS, so page content is usually scrambled anyway. What HTTPS leaves exposed is the metadata: who you contacted and when.
Not every VPN deserves your trust, mind you. You are moving your browsing history from one company to another, so read the logging policy and look for independent audits. People who spend the day in Chrome can also add a browser extension for quick protection. It covers only that browser, so apps like email clients or games stay outside the tunnel, while a desktop client covers the whole device.
Side by Side: What Each One Hides
The easiest way to compare them is by who is watching.
- Incognito mode: hides history, cookies and form entries from other people using your device. Leaves your network traffic and IP address untouched.
- Encrypted DNS: hides domain lookups from anyone on the network path. Leaves the destination IP address visible.
- VPN: hides your traffic and real IP address from the local network and your provider, and masks your IP from websites. Doesn’t stop tracking when you log in to an account, and it asks you to trust the provider.
Three Myths Worth Dropping
Some beliefs just refuse to die, so here are the usual suspects.
- “Incognito keeps websites from knowing who I am.” It doesn’t. Your IP address and browser fingerprint are still on show.
- “Encrypted DNS makes me anonymous.” It only locks one door, the lookup.
- “A VPN makes me untouchable.” Not while you’re signed in to an account, since cookies and logins still point straight at you.
A Practical Setup You Can Finish in Ten Minutes
You don’t need to pick one tool. Layer them, because each one fixes what the others miss:
- In Chrome it sits under Privacy and security, then Security.
- Switch on a VPN whenever you use a network you don’t control: travel, cafés, coworking spaces.
- Keep Incognito for shared devices, one-off searches and logging into a second account.
- Block third-party cookies and sign out of accounts you don’t need open.
The Short Version
Incognito cleans up behind you. None of them makes you anonymous, but together they close most of the doors people leave open by accident.
So the next time a window turns dark and promises privacy, ask a simple question: private from whom? The answer decides which tool you actually need.
