VPN, Incognito, Private DNS: What Actually Hides What

"Should I get a VPN?" is one of the questions we're asked most by readers over 60. Closely followed by "Isn't that what Incognito mode is for?" and, increasingly in 2026, "What on earth is Private DNS?"

Three features. Three very different jobs. And most online explanations lean on jargon that hides what they actually do. Here is the plain-English version, with real-world analogies to make each one stick.

The 30-second version

• VPN — hides what you're doing from your internet provider and the Wi-Fi network you're on.
• Incognito / Private browsing — doesn't save your history on your own computer.
• Private DNS — hides the list of website names your phone looks up.

Each hides one specific thing, from one specific audience. They are not interchangeable. If you use the wrong one for the wrong problem, it won't help.

Now let's expand — with pictures in words.

VPN — the encrypted tunnel

A VPN is short for "virtual private network." A better way to think of it: a secret tunnel between your phone and a trusted friend's house somewhere else in the world.

Normally when you visit, say, bbc.co.uk, your traffic goes:

Your phone → Your Wi-Fi router → Your internet provider (Comcast, BT, Telstra, etc.) → BBC's servers

Your internet provider sees every website name you visit. The Wi-Fi network you're using can see it too. Even if they can't read the exact content (most sites are encrypted now with "https"), they see the labels — which websites, in which order, for how long.

With a VPN turned on, your traffic goes:

Your phone → Encrypted tunnel → VPN company's server → BBC's servers

Your internet provider sees only "traffic going to the VPN." They cannot see the individual sites anymore.

When a VPN actually helps a senior

• You're using public Wi-Fi — a cafe, hotel, airport. You're protected from anyone nosy on the same network.
• You're travelling and want to watch UK or US services from abroad (BBC iPlayer from Spain, Netflix from overseas). A VPN can make you appear to be in your home country.
• You genuinely don't want your internet provider logging your browsing history — which some providers sell to advertisers.

When a VPN is overkill

• You're at home, on your own Wi-Fi, signed into your bank. Your bank traffic is already encrypted with https. A VPN adds very little.
• You think it will "protect you from scams." It won't — scams come through texts, emails, and phone calls, not your internet connection. Our scam message checker tool is more useful for that.

Important — you are trusting the VPN company

Turning on a VPN means the VPN company sees what your internet provider used to see. So the VPN company must be genuinely trustworthy. Use a paid VPN from a known publisher. We wrote a full review guide: best VPN for seniors in 2026.

Do not install "free" VPN apps from publishers you haven't heard of. Several free VPN apps have been caught selling the very data they claimed to protect.

Incognito / Private browsing — a clean slate on your own computer

Incognito is the feature in Chrome, Safari, Firefox, and Edge that opens a fresh browser window. It is named "InPrivate" in Edge, "Private" in Safari and Firefox.

What Incognito actually does:

• It does not save your browsing history on your own device
• It does not save cookies (small files websites store on your device) after you close the window
• It does not auto-fill your name, address, or passwords

That's the whole list.

What Incognito does not do:

• It does not hide your activity from your internet provider
• It does not hide your activity from the Wi-Fi you're on
• It does not hide your activity from the websites you visit (they still know who you are if you log in)
• It does not make you anonymous

The best analogy

Incognito is like using a library computer and clearing the browser history before you leave. The library's internet provider still knows what you did. The websites still know who you were (if you logged in). You just haven't left notes for the next person who sits down.

When Incognito is actually useful for a senior

• Logging into a second Google or Facebook account without logging out of your main one
• Buying someone a gift online without the item showing up in your history or your targeted ads
• Using a shared family computer without your search history being visible to others
• Testing whether a suspicious website loads differently — useful for spotting fake bank login pages

It is not a privacy shield against the outside world. If that's what you need, that's what a VPN is for.

Private DNS — hiding the phone book

DNS stands for "Domain Name System." You can think of it as the phone book of the internet. Every time you type "google.com," your phone has to ask, "What's the actual numerical address of google.com?" That lookup is done through a DNS server.

By default, your phone uses your internet provider's DNS — and your provider gets a list of every website you look up.

Private DNS (sometimes called "DNS over HTTPS" or DoH, or "DNS over TLS") encrypts those lookups. Your internet provider no longer gets a tidy list of every site name you visited.

The best analogy

Regular DNS: you shout across a crowded room, "What's John Smith's phone number?" Everybody hears.

Private DNS: you whisper to a specific person you trust, who whispers back.

When Private DNS helps

• You want to stop your internet provider cataloguing your browsing history
• You're using a network you don't fully trust (a hotel, a rental property) and want the list of sites you visit kept private
• You want to block most advertising and scam domains automatically — providers like 1.1.1.1 (Cloudflare) and 9.9.9.9 (Quad9) block known malicious sites for free

How to turn on Private DNS

On Android:

1. Settings → Network & internet → Private DNS
2. Tap Private DNS provider hostname
3. Type: one.one.one.one (Cloudflare's, free, reputable)
4. Tap Save

On iPhone: There's no built-in setting, but Apple's own iCloud Private Relay (for Safari only) does a similar job for iCloud+ subscribers. Settings → your name → iCloud → Private Relay → turn on.

On Windows and Mac home computers: Download the 1.1.1.1 app from Cloudflare. It's free, no account needed.

Private DNS is invisible once turned on — you'll notice nothing different. It is the quietest of the three privacy tools and the easiest to leave on all the time.

So — which do you actually need?

Most seniors need none of them at home. The regular internet with https-encrypted websites (the little padlock in your address bar) is reasonably safe for banking, email, and shopping.

That said:

• If you use public Wi-Fi more than once a month, a VPN is worth £3-4 a month ($4-5, A$7). See our VPN review guide.
• If you share a computer with family and occasionally want a clean slate, Incognito is free and built-in. Just remember it's only a clean slate on your own device.
• If you'd rather your internet provider didn't log every site you visit, Private DNS (1.1.1.1) is free and takes two minutes to set up. Every modern Android phone supports it natively.

None of them protects you from scams. For that, our scam message checker and password checker are free tools you can use anytime.

Two quick myths to retire

"Incognito mode keeps my employer from seeing what I look at." No. Your employer sees what your company network sees, just like your home internet provider sees what you do from home. Incognito only hides it from the computer itself.

"A VPN hides me from hackers." Kind of, but not in the way most ads suggest. It protects you on public Wi-Fi. It does not protect you from phishing emails, scam texts, or weak passwords.

For general guidance on internet privacy, the US FTC's consumer privacy page and the UK National Cyber Security Centre both publish short, plain-English guides.

Bottom line

• VPN = encrypted tunnel to a trusted friend's house.
• Incognito = clean slate on your own computer.
• Private DNS = whispered phone-book lookups.

Three tools. Three different jobs. Understand what each one does, and you can choose the right one — or, often, decide you don't need any of them.

✅ Reviewed by Eleanor Shaw — techfor60s editorial desk, last verified 2026-04-18.