Can My Employer See My Browsing History? Incognito Included

Yes, if you browse on a work laptop, through the company VPN, or on the office Wi-Fi. The network sees the name of every site you visit, such as reddit.com, and when. If the laptop has a company certificate for HTTPS inspection, or runs monitoring software, your employer can see full addresses and page content too. Your Google searches are browsing too, so the same applies to search history. Incognito mode does not change any of that. It only stops the browser from saving history on the device, and Chrome's own Incognito page says your activity "might still be visible to" your employer or school.

On your own phone or computer, on mobile data or your home Wi-Fi with no company VPN, your employer cannot see your browsing.

We ran each check on this page on our own Mac on 1 October 2026, and show the output we got. The full list of what employers can see is in how do employers monitor remote workers.

What each layer shows your employer

Site names from the network

Almost every site uses HTTPS, which encrypts the page. The site name usually still travels in the clear, in the DNS lookup and in the first message of the connection. We checked the second part with Python's own TLS library, which builds the same opening message (the ClientHello) that apps send:

import ssl
ctx = ssl.create_default_context()
incoming, outgoing = ssl.MemoryBIO(), ssl.MemoryBIO()
tls = ctx.wrap_bio(incoming, outgoing, server_hostname="www.reddit.com")
try:
    tls.do_handshake()
except ssl.SSLWantReadError:
    pass
hello = outgoing.read()  # the first bytes a laptop sends to the site
print(len(hello), "bytes; site name readable:", b"www.reddit.com" in hello)

It printed:

1519 bytes; site name readable: True

So anyone on the path, such as the office Wi-Fi, the company firewall or the VPN, can log that you visited youtube.com at 14:03 for 40 minutes without seeing which video. Recent Chrome and Firefox versions can hide the name with Encrypted Client Hello, but only for sites that publish the keys for it, and a company network can block that. Which video can still show up through a proxy or a monitoring agent; see can my employer see what I watch on YouTube.

Full pages from HTTPS inspection

Many companies run a security proxy such as Zscaler, Netskope or Palo Alto that decrypts HTTPS traffic from company laptops. It works because IT installs the company's own certificate on the laptop. With that in place, the proxy sees full addresses, search terms and page content. Banking and health sites are often excluded by policy, and the policy is the company's choice.

Monitoring software

An employee monitoring agent on the laptop records the sites you visit and how long you stay, often with screenshots. It sees Incognito windows like any other window. How to spot one is in can my employer see my screen.

A managed browser

If Chrome or Edge is managed by your company, IT sets its policies. One of them, IncognitoModeAvailability, can switch off Incognito entirely. Managed browsers can also send reports to the admin console and, with some security add-ons, report the sites you visit. What the Google Admin console shows, including Chrome Sync, is in what can a Google Workspace admin see.

Can my employer see my Google Incognito searches?

On a work laptop or network, yes: the network sees that you searched, and an inspection proxy or monitoring agent can see the words. Incognito only stops the browser from saving history on the device. What it hides, how IT can turn it off, and how to check your laptop are in can my employer see my Incognito history.

Can my employer see my browsing history on my phone?

• • Your own phone on mobile data: no.
• • Your own phone on the office Wi-Fi: the Wi-Fi sees site names, not pages.
• • Your own phone with a work profile (Android) or work enrollment (iPhone): IT manages the work apps and profile. They do not see browsing in your personal apps.
• • A company phone: treat it like a work laptop.

The details by phone setup are in can my employer see what I do on my phone.

Check what your work browser reports

Four checks show which layers apply to your laptop. Below each one is what our own, unmanaged Mac returned, so you can compare.

1. Open the management page. Type chrome://management in Chrome or edge://management in Edge. A managed browser says "Your browser is managed by your organization" and lists what the administrator can see. Ours, a Chromium-based browser, said the opposite:



Read the second sentence too: a monitoring agent or an inspection proxy does not show on this page, so "not managed" here does not rule them out.

2. Check who issued a site's certificate. In Terminal on a Mac:

echo | openssl s_client -connect www.reddit.com:443 -servername www.reddit.com 2>/dev/null | openssl x509 -noout -issuer

issuer=C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1

DigiCert is the public authority Reddit uses, and www.youtube.com showed Google Trust Services. If the issuer is your company, Zscaler, Netskope or a similar name, an inspection proxy is decrypting your traffic. In a browser, click the icon left of the address and open the certificate to see the same field.

3. Check the proxy. On a Mac, scutil --proxy; on Windows, netsh winhttp show proxy in Command Prompt. Ours listed only local exceptions and no proxy server. A line such as HTTPProxy, or a ProxyAutoConfigURLString with a .pac file, means your web traffic goes through a company server.

4. Check device management. On a Mac, profiles status -type enrollment:

Enrolled via DEP: No
MDM enrollment: No

Yes on either line means IT manages the Mac and can install certificates, browser policies and agents on it. Also look for a monitoring app in System Settings, Privacy & Security, Screen & System Audio Recording; on Windows, in Task Manager.

Does deleting browsing history help?

It clears the history on the laptop only. Network logs, proxy logs, VPN logs and monitoring records stay on company systems, and you cannot delete them. On a managed browser, IT can also stop you from clearing history.

Keep personal browsing personal

• Use your own phone on mobile data, or your own computer on your own network. A work laptop on your phone's hotspot is a different case; see can my employer see what I do on my hotspot.

• Turn off the company VPN before personal browsing on a work laptop only if your policy allows it. Many do not.

• Assume anything on a work device is visible, Incognito or not. The same applies to webmail; see can my employer see my personal email on my work computer.

Is it legal?

In the US, monitoring a company-owned device and network is broadly legal, and New York, Connecticut and Delaware require written notice of electronic monitoring. In the EU and UK, monitoring must be necessary, proportionate and disclosed under data protection law. Your contract and IT policy set the details.

FAQ

Can my employer see my browsing on the work laptop at home? Not from the network while the VPN is off, because your home router carries the traffic. The laptop itself can still record it: a monitoring agent or a managed browser logs sites wherever the laptop is. The checks in check what your work browser reports show which applies.

Can my employer see what websites I visit on the work Wi-Fi? Yes, the site names, even from your own phone. Not the pages, unless your device trusts a company certificate.

Can my employer see my history if I use my own laptop at home? No, unless the company VPN or company software is running on it. What each kind of company software sees on a personal computer is in can my employer monitor my personal computer.

Can my employer see my browsing on the company VPN from home? Yes, the site names for all traffic that goes through the VPN. What a personal VPN hides, and what it does not on a work laptop, is in can my employer see my browsing if I use a VPN.