A Secure Private Browser is Not as Private as it Sounds

Q: What is private web browsing, and how does it work?

Private browsing 'incognito” mode' allows users to surf the internet without saving their browsing history, cookies, site data or form inputs. It enables the browser to create a temporary session that is isolated from the main session. Once the private window is closed, all local data from that session is deleted.

Business owners must be keenly aware of the need to secure both their personal and company data, as well as the potential risks associated with weak cybersecurity. Fortunately, there are many tools available to add different layers of security to your online presence, but you need to understand the function of each tool and what protection it provides.

What Is Private Browsing?

Private browsing is a setting on a browser, and it’s best employed when different users are sharing the same device. It is an automatic “eraser” that wipes your browsing history — temporary browsing data, cookies or your search queries — once you log off. If people share computers in their home or office, private browsing affords each user an anonymous web browser. Once a user logs off, the next user cannot view their online activities.

The most popular search engines, such as Chrome, Safari and Firefox, have versions of private browsing associated with their brands, complete with user-friendly settings to enable the function. Private browsing, or as Google calls it, “incognito mode,” offers a layer of security and is useful:

If you wish to log on to one of your accounts using someone else’s computer
When traveling and using a device on a public network at airports, restaurants, hotels or libraries
When accessing a website using more than one account
For accessing multiple email accounts on the same device
For removing and disabling autofill data in online forms
For clearing browser history containing personal, private or sensitive information

Q: What is private browsing, and how does it work?

A: Private browsing "incognito” mode allows users to surf the internet without saving their browsing history, cookies, site data or form inputs. It enables the browser to create a temporary anonymous web browser session that is isolated from the main session. Once the private window is closed, all local data from that session is deleted.

Is Incognito Mode Safe?

The Small Business Administration reports that cyberattacks are an increasing threat to small and midsized businesses (SMBs). It’s imperative to protect your business with multiple layers of IT security. Secure private browsers using incognito mode are generally safe. Logging on through such a setup is a simple way to ensure you clean up your digital footprints when using a public computer or a shared computer, which reduces the risk of unwanted snooping or collecting login information.

While private browsing keeps your data from being stored on a particular device, it’s a local fix. Your data is still vulnerable through whatever network you are logged into, your company’s IT administrator, your internet service provider (ISP), government departments and whatever websites you’ve visited recently. Criminals can still hack browsers in private mode, and your personal information and valuable business data are at risk.

Cybersecurity professionals can evaluate your risks and make recommendations for installing more robust cyber defenses. More powerful tools, such as virtual private networks (VPNs), can more effectively hide your identity, location and internet activities while protecting your data and affording you a greater level of privacy.

Q: When should you use private browsing, and is incognito mode safe?

A: It’s best when you or your employees are using a shared or public computer and don’t want to leave behind a trail of your activity. It's also helpful for signing into multiple accounts at once, testing websites as a new user or shopping for items like flights and hotels to avoid price manipulation based on cookies.

Case Studies

A medical director at a clinic in Atlanta had used private browsing for many years because she dealt with sensitive patient data and often shared her computer with other doctors and office administrators. But she was misled by the name “private.” Her company used commercial virus protection software, and they thought it was sufficient protection. One morning, the practice found that a hacker had breached the company’s system, and the practice could not access patient records, emails or their scheduling software. An integrated cybersecurity plan could have limited the spread of malware.
The managing partner of a law firm in New York City routinely used “Incognito mode” when browsing on Google Chrome while working from home. To him, using a secure private browser was a simple measure to ensure privacy for his clients. He worked from home more than half the time. His home WiFi was not secure, and several of his firm’s passwords were stolen. Proprietary information had been breached, and he had to notify clients and his cybersecurity insurance provider. He learned the hard way that he needed to take cybersecurity on his home computer as seriously as he does on his office network and that significant data breaches could have devastating financial and reputational consequences for his firm.

Q: What are the common misconceptions about private browsing?

A: People often think that private browsing makes them completely anonymous online, hiding their activity from all parties, including their employer, school, ISP or even law enforcement, which is not true. Another myth is that it protects against malware or phishing attacks, which it does not. Private browsing only offers limited privacy by not saving local browsing data. It is not a security feature and should not be treated as such.

Is Incognito Mode Safe, and What’s the Best Way to Protect Private Data Online?

Statistics show that it’s a matter of time before a small or midsized business is hit with a cybercrime. As your business adds more devices such as smart controls, wireless access and remote access, your network surface attack area grows, too. So, what is private browsing within the larger question of cybersecurity? It’s an anonymous web browser that’s a useful tool in limited circumstances but not something that provides robust privacy.

Companies regulated by strict compliance and privacy laws (such as legal, medical and financial services) must apply additional data protection measures. For any company, cyberattacks can have devastating consequences – even putting many out of business in the year after an attack. Reach out to us to discuss affordable managed cybersecurity services. We can perform a risk assessment that will identify your vulnerabilities and offer a plan that helps ensure your confidential data has the best protection possible. A properly protected network can limit the scope and damage of an attack and make recovery possible. Protect client, patient and employee data and reduce the risk of a cyberattack on your business network.