Can Your Internet Provider See Your Browsing History?

Everything you do online passes through your internet provider’s network first. So it’s fair to wonder how much your ISP (internet service provider, the company you pay for home internet or mobile data) can actually see.

Can my ISP see my browsing history? Mostly, yes. Your ISP can generally see which websites you connect to, when, and how much data you use. On HTTPS sites, though, it can’t see the individual pages you read, the full web addresses or anything you type.

Below, you’ll find how ISPs see what they see, why incognito mode doesn’t change it, what providers may do with the data, and the practical steps that limit it.

What can my ISP see?

Think of an HTTPS connection as a sealed envelope. Your ISP can’t read the letter inside, but it can read the address on the outside, see when it was sent and tell how thick it is.

In practice, your ISP can typically see:

• The domains you visit. For example, that you visited a health information site, but not which condition you read about.
• When you’re online. Which services your devices connect to, at what times and for how long.
• How much data moves. Volume hints at activity: a long, heavy stream looks a lot like video.
• Who you are. Your ISP assigns your IP address, so it can tie activity on its network to your account.

On sites that use HTTPS, which now covers most of the web, your ISP generally can’t see:

• The full URL, including the specific page and any search terms in it
• The content of pages, messages and videos
• Passwords, form entries and payment details

On older sites that still use plain HTTP, none of that is hidden. Our plain-English guide to what encryption is explains how HTTPS scrambles data in transit.

How your ISP sees the sites you visit

Even when every site you use is encrypted, four things give your browsing away.

DNS lookups

Before your browser can load a site, it asks a DNS (Domain Name System) server to translate the site’s name into an IP address, the numeric address computers use to find each other. By default, those lookups usually go to your ISP’s own DNS servers. Traditional DNS isn’t encrypted, so even if you switch to a different DNS provider, your ISP can still read your lookups as they cross its network. A log of them is close to a list of every site your devices visit.

The server name in the TLS handshake

HTTPS connections are secured by TLS (Transport Layer Security). Each one starts with a “hello” message from your browser, which usually includes the site’s name in a field called Server Name Indication (SNI). The server needs it because one server often hosts many websites. On most connections today, that name is still sent unencrypted, so your ISP can read it even if your DNS lookups are private.

Destination IP addresses

Every piece of data you send is addressed to a server’s IP address, and your ISP needs that address to deliver it. Many sites share servers through content delivery networks (CDNs), so an IP address doesn’t always reveal the exact site. Often, though, it narrows things down considerably.

Timing and volume

Your ISP also sees when your devices are active and how much data flows in each direction. Patterns alone can say a lot: a video call, a large download and an evening of streaming each look different, even when every byte is encrypted.

What your ISP sees: HTTP vs HTTPS vs HTTPS + VPN

Here’s how the picture changes as you add layers of encryption:

With a VPN, your ISP can usually also tell that you’re using one: it sees a steady encrypted connection to a single server, and some VPN protocols have recognizable traffic patterns.

Can my ISP see my incognito history?

Yes. Incognito mode, called private browsing in some browsers, only changes what your browser stores on your device. When you close the window, it discards that session’s history, cookies and form entries. It doesn’t encrypt anything or change the route your traffic takes, so your ISP, the network you’re on and the websites you visit see exactly what they would otherwise.

Clearing your browsing history works the same way: it erases your device’s copy, not anyone else’s. For a closer look at what each tool hides, see incognito mode vs a VPN.

What do ISPs do with your browsing data?

It depends on your provider and where you live. Common uses include:

• Running the network: troubleshooting, planning capacity and blocking known malicious sites.
• Responding to legal demands: for example, a court order to identify which customer was using an IP address at a particular time.
• Advertising and marketing: some providers use customer data, which can include browsing activity, to target ads or build marketing profiles, as described in their privacy policies.

The rules on ISP tracking vary widely. In the US, Congress repealed the FCC’s broadband privacy rules in 2017, before they took effect, so what ISPs may do with browsing data depends largely on their own policies and on broader privacy and consumer-protection laws. In the European Union, data-protection law such as the GDPR sets stricter limits. Some countries, including the UK and Australia, have data-retention laws that require internet providers to keep certain records about customers’ connections for a set period.

That’s general information, not legal advice. Laws change, so check your provider’s privacy policy and current local law for what applies to you.

How to hide your browsing history from your ISP

No single setting hides everything, but each of these closes a gap. The first two are free and take minutes.

Turn on encrypted DNS

DNS over HTTPS (DoH), standardized in 2018, and DNS over TLS (DoT) encrypt your lookups so your ISP can’t read them in transit. Most major browsers have a “secure DNS” or “DNS over HTTPS” setting, Windows 11 supports encrypted DNS in its network settings, and on most Android phones you’ll find a Private DNS option in the network or connection settings.

What it fixes: your ISP can no longer read your DNS lookups. What it doesn’t: the server name and IP addresses still give a lot away, and your chosen DNS provider now sees your lookups instead.

Use HTTPS-only mode

Most sites support HTTPS, but some links and old bookmarks still point to unencrypted pages. An HTTPS-only setting makes your browser upgrade every connection it can and warn you before loading a page without encryption. Firefox calls it HTTPS-Only Mode; in Chrome, look for Always use secure connections in the security settings.

Keep your browser updated for Encrypted Client Hello

Encrypted Client Hello (ECH) is a newer addition to TLS that encrypts the hello message, including the site’s name. Recent versions of Chrome and Firefox support it, but it only works when the website’s host supports it too, and it only helps if your DNS lookups are encrypted as well. It’s rolling out, not universal, and IP addresses stay visible either way. Beyond turning on encrypted DNS, there’s usually nothing to configure.

Use a VPN

A VPN (virtual private network) wraps all your traffic, including DNS lookups and server names, in an encrypted tunnel to a VPN server. Your ISP then sees only that you’re connected to that server, when, and how much data moves. Websites see the VPN server’s IP address instead of yours.

The trade-off is trust. Your VPN provider can now see roughly what your ISP used to see, so choose carefully; our guide to whether free VPNs are safe covers what to look for. Also make sure your DNS lookups go through the tunnel, because a DNS leak can hand your ISP a list of the sites you visit even while you’re connected.

Try Tor Browser for sensitive browsing

Tor Browser sends your traffic through three volunteer-run relays, encrypted in layers, so no single relay knows both who you are and where you’re going. Your ISP can usually see that you’re using Tor, but not which sites you visit. Expect slower speeds, some sites block or challenge Tor connections, and it only protects what you do inside Tor Browser itself.

Can your mobile carrier see the same things?

Yes. On mobile data, your carrier is your ISP, and it sees the same kinds of information: DNS lookups, server names, IP addresses, timing and volume. Carriers also know your approximate location, because your phone regularly communicates with nearby cell towers.

On Wi-Fi, the picture shifts rather than disappears. Whoever runs the network, such as your employer, a hotel or a coffee shop, can see much of the same metadata, and so can the ISP behind it. Our guide to whether public Wi-Fi is safe covers those risks. The same fixes work on your phone: encrypted DNS, HTTPS and, on networks you don’t trust, a VPN.

The bottom line: can my ISP see my browsing history?

Mostly, yes. Your ISP can generally see the sites you visit, when you visit them and how much data you use, but not the pages you read or what you type on HTTPS sites. Incognito mode doesn’t change that, and deleting your history only clears your own device.

Start with the free fixes: encrypted DNS and HTTPS-only mode take a few minutes. To hide your destinations from your ISP, use a VPN or Tor Browser, and choose a provider you’re comfortable trusting. If you’d like a free option, OqusFreeVPN is built on WireGuard with no ads and no credit card required. Apps for Windows, macOS, Android, iOS and Linux are rolling out in Early Access, so check the download page for your device.