
Loading

Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.

Google is working on a security update that could make Chrome’s Incognito and Guest modes better at spotting scam websites, addressing a gap that has left private browsing reliant on older threat information.
Summary
The proposed change was found in Chromium code and reported by Android Authority. It would extend Google Safe Browsing’s real-time checks to both modes, helping Chrome warn users about phishing pages, malware and other online threats sooner. Why Incognito Needs an Update Chrome’s regular browsing mode can check websites against Google’s latest threat information.
Incognito, however, can fall back on a list of unsafe websites stored on the device. That list is refreshed every 30 to 60 minutes. The delay matters because Google has said many malicious websites remain active for less than 10 minutes.
A new scam page could appear and disappear before the stored list is updated. The proposed change would allow private sessions to benefit from fresher security checks. Reports indicate that the feature is being developed for both Standard and Enhanced Safe Browsing settings.
Privacy Remains a Key Consideration Adding online checks to private browsing raises questions about whether Incognito activity could become more visible to Google. The development reportedly includes safeguards to limit data stored on the device. Temporary security information generated during an Incognito session would remain in memory rather than being written to storage.
Chrome may still contact Google’s servers to verify dangerous websites, but the system is being designed to preserve privacy protections. Incognito does not make users anonymous. It prevents browsing history, cookies and site data from being retained locally after the session ends.
Websites and network administrators may still observe activity. The feature remains under development and is not enabled by default. Google has not announced a release date, so it is unclear when users will receive the protection.
KazaSec's take
Phishing and credential-based attacks succeed because they target people, not just infrastructure, technical controls like SPF, DKIM, and DMARC only ever close part of that gap. The rest comes down to whether a team can actually spot the fake, and whether a compromised credential can still be reused anywhere else.
Coverage details
We've archived 1436 other articles touching the same topic (technology, news) , see the full security news archive.
Related security advisories
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.