Chrome brings real time phishing checks to Incognito browsing

Google is expanding Safe Browsing protections to Chrome’s private modes, bringing real-time threat checks to Incognito and Guest windows. The upgrade aims to help users spot emerging phishing sites and malicious downloads more quickly, and to counter threats that could surface between updates to local blacklists. In practical terms, private browsing will receive the same rapid protection as standard browser sessions.

The implementation relies on real-time cloud queries rather than solely on locally cached data. Acknowledging historic latency, where phishing domains can appear and disappear within minutes, the Chromium team merged a patch into the main codebase to enable real-time checks in Incognito. To address privacy concerns, the system uses truncated cryptographic hashes so destination addresses are converted to hashed strings before any transmission.

Queries are routed through privacy-preserving, independently operated proxy servers, designed to prevent threat verification services from linking user IPs with visited sites. Private sessions initiate an isolated, ephemeral checking instance, with temporary cryptographic keys kept only in volatile memory; when the session ends, the OS purges related data.

The article notes that the patch (referenced in a Chromium code review) will be included in upcoming public releases for both desktop and mobile, delivering these capabilities without compromising user confidentiality. The piece frames this as a balance between real-time phishing protection and strict privacy safeguards.