RN
The ranking this page used to carry put Google Chrome's Incognito window at number one and Tor at number three. That ordering is not a matter of taste — it is the wrong way round, and the reason it is wrong is the only thing worth understanding before you pick anything.
Private windows are a furniture feature
A private or incognito window does one job: it stops your own browser writing history, cookies and form data to your own disk. That is genuinely useful, and it is the thing most people actually want. It is also the entire feature.
Here is what it does not touch.
- Your network sees the connection. Your ISP, and the administrator of any managed or workplace network, sees which servers you connected to and when. Encryption hides the contents of a page, not the fact that you fetched it.
- DNS gives away the domain. Unless you have specifically enabled encrypted DNS, the lookup that turns a site name into an address travels in the clear, and it is a plain-text list of everywhere you went.
- Your IP address goes to every site you visit. Private mode does nothing about this. It is not a proxy.
- The site can still recognise you. Browser fingerprinting works on the characteristics of your setup, not on stored cookies, and if you sign into anything the question is settled anyway.
So: a private window hides your evening from your partner, your flatmate and whoever borrows your laptop. It hides nothing from anyone further away than the front door. Any list that ranks browsers on privacy by which one has the nicest incognito button is ranking them on the wrong axis.
Decide who you are hiding from
There are three separate problems and they need three different tools. Mixing them up is how people end up feeling protected while being logged.
Other people with access to your device. A private window, no account sync on that browser, a device passcode, and a look at what your browser has saved. This is a solved problem and it is the common case.
The sites and the ad networks. Tracker and script blocking, cookie partitioning so a tracker on one site cannot recognise you on the next, and a browser that resists fingerprinting. Being signed out matters more than the browser does.
Your ISP or the network you are on. Neither a private window nor a tracker blocker helps. Encrypted DNS narrows the leak; a VPN moves the visibility from your ISP to the VPN operator, which is a transfer of trust rather than a removal of it; Tor is the only one of the three that meaningfully breaks the link, and it pays for that in speed.
Two things not to install
Torch. It appears on almost every list of this kind, and it should not be on any of them. It has had no update since September 2020, its own downloads were withdrawn in 2022, and the last build is a Chromium from 2018. A browser that stopped receiving security patches six years ago is the single worst place to load pages full of third-party ad script. Whatever installer is being offered for it today is not coming from a maintained project.
Anything whose last release you cannot find. This is the general form of the same rule, and it is the only test you need for the long tail of niche forks. Some of them are perfectly healthy — Pale Moon and GNU IceCat both still ship stable builds. SeaMonkey is repeatedly described as trailing Firefox on patches, which for this particular use is the wrong trade. Look up the release date before the reputation. Adult sites are among the most ad-dense on the web, and an unpatched engine is exposed there before it is exposed anywhere else.
What is actually worth using
Sorted by what they are for rather than into a league table, because they are not competing at the same thing.
- Firefox — the strongest mainstream default for the site-tracking problem: cookies are partitioned per site out of the box, and containers let you keep one browsing context genuinely separate from your logged-in life without running a second browser.
- Brave — Chromium underneath, with blocking switched on by default rather than bolted on. Sensible if you want Chrome's compatibility without doing the configuration yourself.
- Safari — the reasonable default on Apple hardware. Its tracking prevention is real, and it is already there.
- Tor Browser — the only option that addresses the network layer. Slow, occasionally blocked, and it works because everyone's fingerprint looks alike — so do not customise it, do not resize the window, do not add extensions, and do not log into anything through it.
- Chrome — perfectly fine as a browser. Just be clear that its incognito window is a local convenience and that the company shipping it is an advertising company.
The thing that changed since this article was written
The original was published in 2023, and the ground has moved underneath it.
Since 25 July 2025 the UK's Online Safety Act has required services publishing pornography to use effective age assurance, with Ofcom able to fine up to £18 million or ten per cent of qualifying worldwide revenue. A large number of US states have passed their own verification statutes. Faced with those, the largest operator has withdrawn service from many of those states rather than implement checks, and elsewhere visitors now meet an ID upload, a card check or a facial age estimate at the door.
No browser choice affects any of this, and that is precisely why it belongs in a browser article. The privacy question in this category is no longer mainly about local history. It is about whether you are willing to attach a government ID or a face scan to a request to view a website, and about which company ends up holding that record. That is a decision made before the browser opens, and nothing in the settings menu will make it for you.
The unglamorous checklist
Most real leaks are not exotic.
- Turn off password saving and autofill for these sites, or use a password manager that is locked.
- Deny notification permission. A site that gets it can put its own name on your screen later, in front of anyone.
- Check what your browser syncs. History synced to an account is history on every device signed into it.
- Keep extensions to the minimum. Every extension can read the pages you load, and this is a category where extension permissions are worth being unfriendly about.
- Remember downloads land in a folder and stay there.
If you want the network layer covered as well, our VPN guide is the companion piece to this one; the browser is only half the answer and it is the smaller half.