How to Browse Anonymously: A Practical Guide

To browse anonymously, you need to do four things at the same time: hide your IP address, block trackers and fingerprinting, stay logged out of accounts that carry your name, and stop your browser from keeping a local history. No single tool does all four. Tor Browser comes closest on its own, but it is slow. For daily use, most people combine a trustworthy VPN, a browser that blocks trackers, a search engine that does not profile them, and careful habits. Incognito mode does none of the first three.

This guide shows how to browse anonymously in layers. It explains how each layer works, what it hides, and what it leaves exposed. Many of the best-known guides on this topic are written by companies that sell VPNs or security software. When a point comes from a vendor, we name the vendor in the sentence so you can weigh it. When something is our own judgment, we say so. We did not run lab tests for this guide, and nothing here is presented as a test result.

This is general information, not legal or security advice. If your physical safety or legal position depends on staying anonymous, talk to a qualified professional first. Technical terms used below are defined in the Anonymous Browsing Glossary.

The short version

Incognito or private mode keeps your history off your own device. Google’s own help page says websites, your school or employer, and your internet provider may still see your activity.
A VPN hides your real IP address from websites and hides the sites you visit from your internet provider. The VPN company can still see your traffic, so you are moving trust, not removing it.
Tor Browser sends your traffic through three relays. It is the strongest widely available option for anonymity, and it is slower and breaks some sites.
A hidden IP address does not stop browser fingerprinting, cookies or logins from identifying you.
You can check your setup in minutes: your visible IP, DNS requests, WebRTC, IPv6 and your browser fingerprint.
Complete anonymity is not realistic. Treat it as risk reduction and pick the level that matches who you are hiding from.

Anonymous, private and incognito: what each one means

People use these words as if they mean the same thing. They do not. Mixing them up is the main reason people think they are protected when they are not.

Anonymity and privacy are different goals

Windscribe describes the goal of anonymous browsing as unlinkability. An observer might see that someone visited a site or downloaded a file, but cannot connect that action to your name, home address or device. Surfshark gives two simple examples. Posting under a pseudonym is anonymous: the post is public and your identity is hidden. Banking over an HTTPS connection is private but not anonymous: the content is protected, but the bank knows who you are.

In short, privacy controls who can read what you do. Anonymity controls whether what you do can be tied to you. You can have one without the other.

What Incognito actually does

Google’s Chrome help page is the clearest primary source on this. It says Incognito limits what is saved to your device, which helps on a shared computer or when you are shopping for a gift. Chrome starts a separate session. It does not automatically sign you in to your Google Account or other sites. When you close all Incognito windows, Chrome does not keep a record of the sites you visited or the site data from that session. Third-party cookies are blocked by default in Incognito.

The same page lists what Incognito does not do. It does not change how the websites you visit and the services they use collect data, including Google’s. Bookmarks you save and files you download stay on your device. And it does not make you invisible: websites, and the organizations that run your network, such as your school, employer or internet provider, may be able to see your activity.

TechTarget adds some context. It reports that Google settled a lawsuit over tracking people who believed they were browsing privately, and that the company agreed to delete billions of data records. We are not repeating a dollar figure here because we could not confirm the amount from a primary source.

How the three approaches compare

In Time Tec compares incognito mode, privacy tools and full anonymous browsing in a table. Here is the same idea in our own words:

Approach	What it does	Who can still see your activity
Incognito or private window	Stops your browser saving history and cookies on your device	Websites, your internet provider, your employer or school network
Tracker-blocking browser and a search engine that does not log queries	Blocks trackers and limits data collection	Websites can still see your IP address
Tor, or a VPN with a privacy browser	Hides your IP address and blocks tracking	Very little, if you also stay logged out of personal accounts

Windscribe makes a related point about stacking tools. It says adding an incognito window on top of a VPN adds little, because the VPN does almost all of the work. We agree with the logic: a local cleanup feature does not change what the network sees.

Where to read more on these differences

If you want a full side-by-side, see Private vs Anonymous Browsing. Chrome also offers guest browsing, and we compare it with Incognito in Guest Mode vs Incognito. Other browsers use different names and bundle different features. For example, TechTarget’s 2024 article notes that Opera includes a free built-in VPN, and Opera’s own blog says that feature does not route traffic from other applications, so it covers the browser only. Features like this change, so check the current version. We cover those differences in Private Browsing in Edge and Opera.

Incognito does have real uses. If you want to wipe what a browser has already stored, see Delete Browsing History Completely. If you are on a computer you cannot install software on, such as a work or school machine, In Time Tec suggests a private window plus a search engine that does not profile you, and a web proxy for a single site. It warns that free proxies are slow and can see what you do. Our guide to Shared and Public Computers covers the extra risks on borrowed machines.

How websites and networks identify you

In Time Tec makes a point that shapes this whole guide: websites identify you from several signals at once, so hiding one signal rarely makes you anonymous. Windscribe lists five kinds of trace. TechTarget and Avira add more. Together they give a useful map.

Your IP address

Your IP address shows your approximate location and which internet provider you use. Windscribe points out two complications. Mobile IP addresses change often, and carrier-grade NAT means you may share an IP address with hundreds of other people. Even so, if you do not mask it, you reveal your location to every server you contact. The What Is My IP Address page shows exactly what a website sees from your connection.

Cookies

First-party cookies remember things like your login or your cart. Third-party cookies follow you across sites and build a picture of your interests, according to Windscribe. Clearing cookies helps, but Windscribe calls it a temporary fix, because collection starts again on the next site.

Browser fingerprinting

A fingerprint is built from details your browser shares by default. Windscribe lists screen resolution, installed fonts, timezone, language, canvas rendering and WebGL hashes. Avira adds browser type and version, operating system, active plugins and other settings. Avira also notes that websites can use these details to identify you even if you clear cookies or use a private browsing mode.

Your browser announces its type and version in what is called the user agent. Our What Is My User Agent tool shows what yours reports. On its own it is only one signal, but it is part of the combination.

Accounts and logins

Windscribe says that if you are signed in to Gmail, Facebook or a Google account in Chrome, the other layers stop mattering, because you have tied the session to your real identity. Surfshark makes the same point about cross-site tracking: logging in to other sites with a Google or social account makes it easier. This is why almost every guide, including In Time Tec, tells you to stay logged out of personal accounts.

Behavior

Windscribe describes behavioral biometrics as the newest area of tracking: typing rhythm, mouse speed and scroll velocity. It says these are often used for fraud detection but can also build a profile that follows you even after you change hardware or hide your IP address. We could not find a second source for how widely this is used, so treat it as one vendor’s description of a real technique.

Other tracking methods

TechTarget lists several more methods. JavaScript can monitor clicks, form submissions and device details in ways a simple cookie cannot. HTTP headers can carry your IP address, browser type and the page you came from. Third-party trackers from ad networks and analytics providers collect data across sites. Servers can store visitor activity to build profiles. Search engines save search history even for people without an account.

Avira adds tracking pixels, which are tiny invisible images in pages and emails. When one loads, it sends a request that records your IP address and the time. Avira also names analytics tools such as Google Analytics as a way sites learn how long you stay, what you read, and details such as age range, location and language. Surfshark lists social media widgets as another route, because interactions with them can be linked back to you.

Proton VPN makes a separate point about files you share: a photo can carry the GPS coordinates of where it was taken unless location tracking is off.

For a longer breakdown of these signals, see How Websites Identify You.

Who can see what

Party	What they can typically see	Source
The website you visit	Your IP address, browser details and anything you type or do while logged in	Windscribe, TechTarget, In Time Tec
Your internet provider	The sites you visit, unless you use a VPN or Tor	In Time Tec, Windscribe, Surfshark
Your school or employer network	Your activity on their network, even in Incognito	Google Help, In Time Tec
Monitoring software on a managed device	Activity that a VPN or Tor does not hide from the device itself	In Time Tec
Your VPN provider	The same kind of data your internet provider could see	Proton, In Time Tec
Search engines	Your searches, even if you have no account	TechTarget, Proton

The question people ask most is whether the provider is watching. Can Your ISP See Your Browsing answers it in more detail. In short, In Time Tec says yes, even in incognito mode, and that Tor or a VPN hides the sites you visit from your provider.

Choose your level before you choose tools

The right setup depends on who you are hiding from. Hiding from advertisers is a different job from hiding from a government. Windscribe’s guide organizes this into three tiers by threat level. We have adapted that idea below. The tiers are a framework, not a standard, and Windscribe sells a VPN, so we have kept to the points that are also supported elsewhere.

Level	Who it suits	Typical stack	What it still leaves exposed
Level 1: cut down tracking	Anyone tired of being followed by ads and data brokers	A VPN running on your devices, Brave or Firefox with fingerprint resistance turned on, a tracker blocker such as uBlock Origin, and a search engine other than Google	Anything you do while logged in, advanced fingerprinting by determined trackers, and state-level surveillance
Level 2: hide from your provider and most trackers	Privacy-aware professionals who want strong unlinkability	Level 1 plus an anti-fingerprinting extension, a firewall that blocks traffic outside the VPN, encrypted DNS through the VPN, a privacy-focused email service with aliases, a password manager and Signal for sensitive chats	Adversaries with access to your VPN provider’s infrastructure, and state-level actors who can correlate traffic across networks
Level 3: high risk	People whose safety depends on anonymity	Tor Browser for sensitive sessions, a dedicated device or virtual machine, a live operating system such as Tails, Monero instead of Bitcoin for payments, and strict separation of identities	Human error, targeted physical surveillance, and observation of large parts of the internet

Our view: most readers belong in Level 1 or the lighter half of Level 2. Level 3 carries real operational cost, and Windscribe itself says that for most people Tor is more headache than help. If you work in a setting where exposure has serious consequences, read Anonymous Browsing for Journalists and Activists. If you are protecting a company, not just yourself, see Anonymous Browsing for Businesses.

The layers that make up anonymous browsing

Think of the setup as layers. Each layer hides a different signal. For a ranked look at specific products across all of them, see Best Anonymous Browsing Tools. Here we explain how each layer works so you can judge any product yourself.

Layer 1: hide your IP address

There are three common ways to do this: a VPN, Tor and a proxy. They are not equal.

VPN: how it works and how to judge one

Ghostery says a VPN hides your IP address and encrypts your traffic, which sends it through a secure tunnel to the VPN server before it reaches websites. Surfshark adds that sites see the VPN server’s IP address instead of yours, and your internet provider sees only an encrypted connection. Security.org notes that, unlike Tor, a VPN encrypts traffic from all your apps, not just the browser. Ghostery points to public Wi-Fi in cafes, airports and hotels as a case where this matters, because unencrypted traffic is easier to intercept there.

The catch is trust. Proton says that when you connect to a VPN, the provider can see the same kind of data your internet provider could, including your activity and your IP address. Windscribe calls this the trust shift problem. A VPN does not remove trust. It moves it from your internet provider to the VPN company. In Time Tec says the same thing from another angle: a VPN improves privacy, but the provider can see your traffic, and for real anonymity you should use Tor.

That raises the question of whether a VPN is enough by itself. Does a VPN Make You Anonymous gives the long answer. The short answer from the sources is no. Windscribe says a VPN alone often does not stop browsers from fingerprinting you or cookies from following you. Security.org says VPNs are not invisibility cloaks and are just one step among many.

How do you judge a VPN? Windscribe and McAfee both publish checklists. We have combined them, and since both companies sell security products, check each point yourself:

An independent audit of the no-logs claim. Windscribe says it should come from a reputable outside firm and be recent, within about the last 24 months. An audit by the company’s own team does not count.
RAM-only servers. Windscribe says these keep no data on disk, so a reboot wipes everything.
Jurisdiction. Windscribe says to check whether the company is subject to data retention laws or sits in a country that belongs to the Five Eyes, Nine Eyes or Fourteen Eyes intelligence-sharing alliances.
Transparency reports and a warrant canary, which is a notice that no secret subpoena has been received. Windscribe lists both.
Clear ownership. Windscribe says many VPN brands share a few parent companies, and an About page with real names is a good sign.
Strong protocols. McAfee names WireGuard and OpenVPN.
Leak protection. McAfee lists preventing IP leaks, including through IPv6 and WebRTC, as a requirement.

Windscribe also argues that a kill switch is a reactive fix. In its description, a kill switch waits to detect a dropped connection and then closes apps, which leaves a gap in which packets can leak. A firewall rule that blocks all traffic outside the VPN tunnel, it says, fails closed. This is a vendor’s view of its own feature, so read it as one argument, not settled fact. We think the useful takeaway is simple: find out what your VPN does when the connection drops.

Free VPNs are a separate worry. Avira warns that free providers may sell your data. Surfshark goes further and says you cannot be anonymous with a free VPN, and that millions of user records leak from free VPNs each year. We could not find a source for that figure, so we do not repeat it. Both companies sell paid plans. Our view is that a free service has to earn money somehow, so read its privacy policy before you rely on it.

For a product-by-product comparison, see Best VPN for Anonymous Browsing. For how VPNs, Tor and proxies differ in practice, see VPN vs Tor vs Proxy.

Tor: how it works and when you need it

Windscribe describes Tor as onion routing across three encrypted hops. The entry node sees your real IP address but not what you are looking at. The middle node sees neither. The exit node sees where you are going but not who you are. Proton describes the same idea: your traffic is encrypted three times and each relay removes one layer. TechTarget adds that Tor is free, open source, built on Firefox and run through volunteer-operated servers.

Tor Browser has a security level setting, and the Tor Project documents it. The default level, Standard, leaves all features on. Safer turns off JavaScript on sites that do not use HTTPS, disables some fonts and math symbols, and makes audio and video click to play. Safest allows only the features needed for static sites and turns JavaScript off by default on all sites. The Tor Project warns that higher levels may break sites. So the claim that Tor Browser disables scripts by default is only true at the Safest level.

Tor Browser also aims to make its users look alike, which is what makes it hard to single one out. A Tor Project issue tracker comment goes further and says making all users identical is impossible and was never the aim, so treat this as a strong defense and not a guarantee.

The trade-offs are consistent across sources:

It is slower. Surfshark says streaming on Tor is likely to be painful.
Some sites block it. In Time Tec lists this as a con, and Windscribe mentions frequent CAPTCHAs.
It can break features. Proton says it does not work with all website features.
It only covers traffic inside Tor Browser. Windscribe says apps such as Spotify, Zoom or your email client still use your normal connection. Security.org says the same, which is one reason it pairs Tor with a VPN.
It opens the dark web. Surfshark says Tor is the main browser used to reach .onion sites, and warns that engaging with illegal pages, even by accident, can have consequences.

Does Tor need a VPN? Order matters, and the labels are confusing. Windscribe recommends connecting to the VPN first and then opening Tor Browser. In that order, your internet provider sees only a VPN connection, and the Tor entry node sees the VPN’s IP address and not your home address. Windscribe also says this helps in places where using Tor itself might attract attention. We could not verify that claim independently.

The reverse order sends traffic through Tor first and then through a VPN. Windscribe says this is mainly for sites that block Tor exit nodes. It also means the VPN provider sees what comes out of Tor, so Windscribe advises most people to skip it.

Be careful with the names. Windscribe calls the VPN-first order “VPN over Tor”. Proton uses “Tor over VPN” for its one-click feature that connects to Tor through its own VPN, which is also VPN first. Read the order, not the label.

When do you actually need Tor? Windscribe lists three cases: you are a high-risk user such as a journalist, whistleblower or activist; you need sites that exist only on the Tor network; or you are in a restrictive place where your internet provider scrutinizes or blocks ordinary VPN traffic. Outside those, it says a VPN, browser extension and firewall give plenty of anonymity without the speed cost. For setup and a closer look at use cases, see Tor Anonymous Browsing.

Proxy: a weaker way to change your IP address

TechTarget describes a proxy server as an intermediary that masks your IP address and makes it look as if you are connecting from another location. In Time Tec says a proxy changes your IP for a single site or app, usually does not encrypt, and that free proxies may log or sell your data. Avira agrees that proxies are generally less secure than VPNs because they do not encrypt your data or connection.

If you use a proxy, confirm that it actually changes the address sites see. Our Proxy Checker does exactly that. Web-based proxy sites that open pages for you are a common starting point, and they carry the free-proxy risks above. We cover them in Free Anonymous Browsing Sites.

Layer 2: harden your browser

Hiding your IP address does not hide your browser. In Time Tec explains that privacy browsers take one of two approaches to fingerprinting: they either make every user look the same or randomize the details. Windscribe describes both. Tor Browser uses a herd model, in which window size is locked and fonts are generic so that users blend into the crowd. Anti-fingerprinting extensions go the other way and change values such as canvas, WebGL, fonts, timezone and user agent. Windscribe says the goal is not to hide a fingerprint but to make it inconsistent between sessions so a tracker cannot link two visits.

The browsers named across the sources:

Tor Browser: strongest anonymity, with the speed and compatibility costs above.
Brave: In Time Tec calls it the best everyday choice, and says it blocks ads, trackers and fingerprinting by default. Windscribe credits its Shields feature. Brave’s support pages say the Shields fingerprint blocking is on by default and adds a small amount of randomness to details that could identify you. They also say it can occasionally break a site.
Mullvad Browser: In Time Tec describes it as Tor-level anti-fingerprinting at normal speed, designed to pair with a VPN. Mullvad’s own page says it has the same fingerprinting protection as Tor Browser, is meant to be used with a trustworthy VPN, and does not use the Tor network. It also advises against installing many extensions, because they could be the detail that identifies you.
Firefox: Mozilla says Enhanced Tracking Protection blocks a list of known fingerprinters in normal browsing, and also limits what suspected fingerprinters can see in Private Browsing and in the Strict setting. Windscribe describes a stricter Resist Fingerprinting mode, switched on in about:config. Mozilla says that mode is not recommended for normal use because it is very strict and often breaks pages, and points most people to its Fingerprinting Protection feature instead. Proton also credits Enhanced Tracking Protection.
Epic Privacy Browser: TechTarget names it as a privacy-focused option, alongside Firefox and Brave. We did not review it in depth.

In Time Tec says Chrome, Edge and Safari need extra setup to match these. Surfshark makes a similar point: many privacy browsers also need manual settings changes before they help. For side-by-side differences, see Best Anonymous Browsers and Tor Browser vs Mullvad Browser vs Brave.

Extensions for the browser you already use

Extensions can add tracker blocking to a browser you already use. Proton describes Privacy Badger, from the Electronic Frontier Foundation, as a tool that blocks services that are trying to track you. The EFF says that since 2020 Privacy Badger no longer learns locally by default. It uses a pre-trained list instead, because local learning could itself be turned into a unique fingerprint. Local learning is still available as an opt-in setting. Proton also describes uBlock Origin as thorough and fast, and NoScript as a way to let only trusted sources run plugins. Ghostery says its extension blocks trackers, cookies and many fingerprinting attempts, and shows which companies are on a page. Proton’s article dates from 2019, so check current features before you rely on its descriptions.

NoScript has a cost. Proton says it takes trial and error to avoid breaking websites. Security.org makes the same point about disabling JavaScript, which it recommends but says may break sites that depend on dynamic content.

Our view: keep the extension list short. Avira warns that overloading a browser with extensions can slow it, and In Time Tec advises avoiding unknown extensions. More tools are not always more privacy. See Anonymous Browsing Extensions for a closer look.

Layer 3: change how you search

Ghostery says your search history can reveal more about you than almost anything else online. Proton says Google records every query to build a profile, and that even without an account it can use your IP address, device and location to single you out. TechTarget agrees that Google, Microsoft and Yahoo save search history for every visitor.

The alternatives named across the sources are DuckDuckGo, Startpage, Brave Search, Qwant and Searx. Avira says DuckDuckGo, Brave Search and Startpage do not track you, share data with third parties or log IP addresses. TechTarget and Proton say DuckDuckGo does not collect personal information. These are the companies’ own descriptions or the sources’ summaries of them, and we did not audit them.

There are trade-offs. Surfshark and Avira both say you may get less personalized, and sometimes less complete, results. Surfshark adds that these engines still run on servers, browsers and connections that could expose data, so they are not risk-free. For more options and caveats, see Private Search Engines.

If you still use Google, Surfshark suggests logging out and using a separate browser profile for Google tasks, so searches, YouTube, Maps and Chrome are not tied to one identity. Security.org also says a VPN hides your YouTube history from your internet provider. Google and YouTube Anonymously covers those services specifically.

Layer 4: separate your identity from your browsing

The best technical setup fails if you sign in with your real name. In Time Tec’s advice is to stay logged out of personal accounts, keep one browser for logged-in activity and a different one for anything you want to keep anonymous, and use an email alias when a site requires sign-up. Surfshark gives similar advice on separate browser profiles.

Email, passwords and messages

Aliases and disposable email: Ghostery says a throwaway address lets you receive messages without exposing your main inbox. Avira points to Apple’s Hide My Email for Apple users. Security.org mentions Temp Mail for free disposable addresses.
Privacy-focused email: Proton says Proton Mail does not require personal information to set up a free account. Avira says services like it generally do not ask for personal information at sign-up, and warns that secure email can occasionally be blocked by sites that only accept mail from well-known providers.
Password managers: Security.org says reusing one password across accounts makes anonymity very hard, and recommends a unique password for each. If you are unsure about an existing one, our Password Strength Checker shows how it holds up.
Messaging: Security.org, Avira and Windscribe point to Signal for encrypted messages. Avira notes you cannot back up message history and that the small user base can make it hard to find contacts.

Payments

Security.org says Bitcoin payments are fully transparent and recommends Monero for anonymous payments. Windscribe lists masked cards for the middle tier and Monero for the highest tier. Proton says cash is the most anonymous way to buy anything. Avira reminds readers of a basic limit: your internet provider has your billing details, and so does a VPN provider if you pay for one. Our view: for most people, payments are the last layer to worry about, and the first place identity leaks if you skip them.

Social media

Surfshark says no tool can protect you from data you share yourself. It suggests not using your real name on accounts, avoiding reactions to posts, and not grouping friends and family in contact lists. Security.org goes further and recommends staying off social media. We think that is unrealistic for most readers, so a more practical rule is to keep any account you want to stay anonymous completely separate from your real one.

Layer 5: encrypted connections and DNS

TechTarget advises using the HTTPS version of a site, not the plain HTTP version, so that communication with the site is encrypted. Security.org explains that HTTPS uses SSL to encrypt the communication between your browser and the websites you visit. Avira says never to enter personal details on a site without HTTPS. To look at a site’s certificate yourself, try our SSL Certificate Checker.

DNS is the system that turns a site name into an address. Windscribe explains that each time you type a URL, your computer asks a server where to go, and that those requests can bypass a VPN. When they do, your internet provider can still see which domains you visit. Windscribe’s higher-level setup routes encrypted DNS (DNS over HTTPS or DNS over TLS) through the VPN. McAfee also lists encrypted DNS as part of a secure setup. Our DNS Lookup shows how a name resolves to an address.

A step-by-step setup you can follow today

This is our suggested order, built from the advice in the sources above. Start at the top. Stop when you reach the level you decided on. Each step names where the advice comes from.

Decide your level. Use the three levels above. If you are not sure, start with Level 1.
Pick a browser built for privacy. For everyday use, In Time Tec points to Brave. For stronger fingerprint protection at normal speed, it points to Mullvad Browser. For the highest anonymity, use Tor Browser. If you prefer Firefox, use Enhanced Tracking Protection and read Mozilla’s guidance before you turn on stricter settings.
Set your cookie rules. Block third-party cookies and clear the rest. The table below shows the paths Security.org gives. Menus change between versions, so check your browser’s help page if a path does not match.
Add a tracker blocker, and keep the list short. uBlock Origin, Privacy Badger and Ghostery are the ones the sources name.
Change your search engine. Switch from Google to an option that does not build a profile from your searches, and log out of Google when you use it.
Hide your IP address. Use a VPN you have vetted with the checklist above, or Tor Browser for sessions that need it. Find out what happens when the VPN connection drops, and turn on the kill switch or firewall if there is one.
Use encrypted DNS if your setup supports it. Windscribe recommends routing it through the VPN at the higher levels.
Keep identities separate. Use one browser or profile for logged-in accounts and another for anything you want kept anonymous. Use aliases for sign-ups.
Tidy your devices. Security.org advises checking app permissions, and notes that recent iOS and Android updates give you finer control, including one-time access. TechTarget and Proton both advise turning off location services.
Keep software updated. Surfshark warns that outdated software can be exploited to steal information that identifies you. In Time Tec adds that you should avoid unknown downloads and extensions and watch for phishing.
Test, then test again. The next section shows how.

Cookie settings by browser

Browser	Path given by Security.org
Chrome	Settings, then Privacy and security, then Third-party cookies, then Block third-party cookies
Firefox	Menu, then Settings, then Privacy & Security, then Cookies and Site Data, then tick the option to delete cookies and site data when Firefox is closed
Edge	Settings, then Privacy, search, and services, then Clear browsing data, then Choose what to clear every time you close the browser
Opera	Settings, then Privacy and security, then Cookies and site data, then turn on clearing cookies and site data when you quit Opera
Safari	Settings, then Advanced, then tick Block all cookies

TechTarget points out the cost of all this. With no cookies and no autofill, you re-enter logins, shipping details and card details on every visit. Anonymous browsing trades some convenience for some safety.

Test your setup

Windscribe’s advice is blunt: a stack is only as good as its weakest leak, so verify it instead of assuming it works. We did not run these checks for this page, so we cannot give you results. What follows is what each check is for and what Windscribe says a clean result looks like. For a longer walkthrough, see How to Test Your Anonymity Online.

Check 1: your visible IP address

Use the IP check from earlier in this guide with your VPN on. Windscribe says that if the VPN is working you should see the IP address and city of the server you picked. If you see your real city or your internet provider’s name, your network layer is exposed.

Check 2: DNS requests

Even with a hidden IP address, DNS requests can go outside the VPN. Windscribe says a clean result shows only your VPN provider’s servers. Even one entry belonging to Google, Comcast or your local provider means a leak, and your provider can still see the domains you visit. Run our DNS Leak Test with the VPN on.

Check 3: WebRTC

WebRTC is the browser feature used for voice and video chat. Windscribe says it can reveal your real IP address by asking your hardware for it. A clean result shows only your VPN’s public IP. If the private or public IP fields show your real address, your browser is leaking. The WebRTC Leak Test shows what your browser exposes.

Check 4: IPv6

Windscribe notes that an IPv6 request can route around a tunnel, and McAfee lists IPv6 protection among its VPN requirements. If your connection uses IPv6, check it separately with our IPv6 Leak Test.

Check 5: your browser fingerprint

Windscribe points to the Electronic Frontier Foundation’s Cover Your Tracks, which shows how trackers see your browser and the most identifying details it gives away. Our Browser Fingerprint Test is our own check of this kind. We have not compared its results with Cover Your Tracks. If you use an anti-fingerprinting tool, Windscribe suggests running the check, restarting the browser and running it again. Do not panic if you look unique. Windscribe says you almost always will on the open web. The point is whether the identifying details change between sessions. A fingerprint that changes cannot be used to track you over time.

A quick overall read

For a general summary after the individual checks, you can run our Privacy Score Checker. Our view: repeat the checks whenever you change VPN servers, update your browser or install a new extension, since each of those can change what leaks.

Where anonymity ends

Every source we read, including the vendors, says full anonymity is not guaranteed. Surfshark says to treat anonymous browsing as risk reduction. Security.org says it is not possible to use the internet without leaving some trace, and that determined adversaries with enough resources can often get through layers of protection. Proton calls privacy a continuum. Windscribe lists the specific limits:

Long-term pattern correlation. Your daily habits, the mix of sites you visit and even how you move your mouse form a pattern. Windscribe says that with enough data over a few months, someone can often link it to you.
State-level adversaries. Windscribe says Tor itself admits limits against an adversary able to watch both where your data enters and where it leaves the network.
Human error. Windscribe says a hardened setup is wasted if you log in to a personal account or reuse an old username.

Avira adds a plain point: your internet provider has your billing details, and a VPN provider will too if you pay for one. Even a fake-name email account paid for with PayPal leaves a trail.

If you came here wanting a guarantee, our honest answer is that there is none. Completely Anonymous Browsing explains what the closest practical setups look like and where they still fail.

Common mistakes

Believing one tool is enough. In Time Tec calls this one of the biggest misconceptions it sees.
Logging in to personal accounts inside an anonymous session. Windscribe says this ends the anonymity at once, even on Tails.
Reusing a username or mentioning personal details in a thread. Windscribe lists both.
Trusting Incognito to hide you from your network. Google’s own page says it does not.
Using free proxies or free VPNs without reading their policies. In Time Tec and Avira both warn about data being logged or sold.
Skipping the tests. A tool that is running is not the same as a tool that is working.

Our longer list is in Anonymous Browsing Mistakes.

Safety and legality

Tor is generally safe for normal browsing, according to Surfshark, but it also says that using Tor does not mean your data is always protected. The dark web, which Tor can reach, hosts illegal activity, and Surfshark warns that engaging with the wrong pages can have legal consequences. For the broader safety question, see Is Anonymous Browsing Safe.

We did not find a source we could use to state what the law says about anonymous browsing tools, so this guide gives no legal view. Rules differ by country. See Is Anonymous Browsing Legal for what we can support, and check your local law if it matters to you. As above, none of this is legal advice.

Guides by browser, device and platform

The steps above work on any device. These notes cover the points that differ.

Chrome

Google’s help page says to open an Incognito window with Ctrl + Shift + N on Windows, Linux and Chrome OS, or Command + Shift + N on a Mac. In Time Tec says Incognito does not save history, cookies or form entries after you close the window, and blocks third-party cookies by default. It does not make you anonymous. In Time Tec’s suggestions for making Chrome more private are to use a VPN, stay signed out, add a tracker-blocking extension and switch to a search engine that does not profile you. For the full walkthrough, see Chrome Anonymous Browsing.

Firefox

Firefox gives you more built-in room to tighten privacy. Proton credits its Enhanced Tracking Protection. Mozilla describes its stricter Resist Fingerprinting setting as not recommended for normal use. Security.org shows how to clear cookies when Firefox closes. Firefox Anonymous Browsing puts those settings in one place.

Phones and tablets

Phones add a few points of their own. Windscribe notes that mobile IP addresses change often. TechTarget and Proton both advise turning off location services. Security.org advises reviewing app permissions. Avira mentions Apple’s Hide My Email for Apple users and Signal for messages. Steps differ by system, so see iPhone and Mac Anonymous Browsing and Android Anonymous Browsing.

Windows, Linux and Tails

Windows users can follow every step in this guide, and Browse Anonymously on Windows covers the Windows-specific settings. At the other end, Security.org says an open-source operating system such as Linux walls off each user, and lists Tails, Whonix and QubesOS as secure options. Proton says Tails can run on any computer without leaving a trace, and Windscribe describes it as a live system that leaves nothing on the hardware. Windscribe also warns that logging in to a personal Gmail account from a Tails session identifies you immediately. Linux and Tails Anonymous Browsing goes deeper.

Public Wi-Fi

Ghostery says public Wi-Fi in cafes, airports and hotels is a place where unencrypted traffic is easier to intercept, and that a VPN helps there. In Time Tec says HTTPS and VPNs encrypt your data so other people on the same network cannot read it. Anonymous Browsing on Public Wi-Fi covers the details.

Social media and logged-in services

Anonymous browsing and social platforms do not mix easily, because most of these services work by knowing who you are. Surfshark and Security.org both say the biggest leaks are the things you share yourself. For platform-specific advice, see Social Media Anonymous Browsing. We also have separate pages for Instagram Anonymous Browsing and X (Twitter) Anonymous Browsing.

Two examples from In Time Tec show how limited the built-in controls are. LinkedIn has a Private mode, found under Settings, then Visibility, then Profile viewing options. It hides your name and headline when you view someone’s profile, so they see “LinkedIn Member”. It does not stop LinkedIn recording your activity, and on a free account it also hides who viewed your own profile. See LinkedIn Anonymous Browsing for more.

In Time Tec also reports that the official Reddit app has a mode that keeps your activity separate from your account, but that many users say it is missing or not working in their version. It adds that Reddit has been restricting logged-out access on the web, and that Reddit can still see what you view even while you are logged out. For the full walkthrough, see Reddit Anonymous Browsing. If you only want to read without an account, see Browse Reddit Without Account.

Prices and personalized ads

In Time Tec lists avoiding price changes based on browsing history as one reason people browse anonymously. Avira gives an everyday example of tracking: a search for flights to Spain, followed by ads for hotels, guidebooks and beachwear. We have not found evidence in these sources that anonymity lowers prices, so read Does Anonymous Browsing Get You Cheaper Flights for what we can and cannot support.

Go deeper

Some topics sit outside a basic how-to. Antidetect Browsers is a separate subject from the privacy browsers covered here. Several statistics we came across in competitor guides did not name their sources, so we kept figures out of this page and put what we can support in Anonymous Browsing Statistics.

Frequently asked questions

Is it possible to browse anonymously at all?

Partly. Surfshark says total online anonymity is not realistically possible, but tools and habits can reduce what others can link to you. In Time Tec says no tool makes you completely anonymous, and that Tor Browser comes closest.

Is a VPN enough on its own?

No. A VPN hides your IP address from websites and your browsing from your internet provider. Windscribe says it does not stop browser fingerprinting or cookies. And the VPN company can see your traffic.

Is Tor 100% untraceable?

No source we read says so. Windscribe says Tor cannot protect you from an adversary powerful enough to watch both ends of your connection. Surfshark says using Tor does not mean your data is always protected.

Can my employer or school see what I browse in Incognito?

Google’s help page says organizations that manage your network, such as a school or employer, may be able to see your activity in Incognito. In Time Tec says a VPN or Tor hides the sites you visit from the network, but not from monitoring software installed on the device.

Does DuckDuckGo track me?

TechTarget and Proton both say DuckDuckGo does not collect personal information or build a profile from searches. Those are descriptions of the company’s stated approach, and we did not audit it. Surfshark adds that no search engine is risk-free, since it still runs on servers and connections that could expose data.

Can I be anonymous with a free VPN?

Avira warns that free VPN providers may sell your data. Surfshark says you cannot be anonymous with a free VPN. Both sell paid plans, so read the privacy policy of whichever provider you use.

How do I browse privately without installing anything?

In Time Tec suggests a private window with a search engine that does not profile you. For extra protection on a single site, a web proxy can hide your IP address, though free ones are slow and can see what you do.

Why do I still look unique after using a VPN?

Because a VPN changes your IP address, not your browser. Windscribe says your browser keeps sharing details such as screen resolution, fonts and timezone, which together form a fingerprint.

What is the easiest first step?

Our view: switch to a browser that blocks trackers, change your search engine, and stay logged out of personal accounts when you want to keep browsing anonymous. These steps need no new subscription. Then add a vetted VPN if you also want to hide your activity from your internet provider.

The bottom line

Anonymous browsing is a set of habits and tools, not a single switch. Hide your IP address, deal with fingerprinting and cookies, keep your identity out of the session, and test the result. Pick the level that fits who you are hiding from, and be honest with yourself about the limits. This article is general information, not legal or security advice. Last reviewed on 5 November 2026. Tools, prices and browser settings change, so check current versions before you rely on any detail.