Can my internet provider see what I search? A 1-minute test

Short answer: no, your internet provider (your ISP) cannot see what you search, but it can see every website you visit, even on HTTPS, in incognito mode, and after you delete your history. It sees each domain, when you connected, for how long, and how much data moved. It cannot see the specific pages, your search terms, or what you type on encrypted sites. Encrypted DNS narrows what leaks, and a VPN or Tor hides the sites themselves.

There are two popular beliefs about internet providers, and both are wrong. One says your ISP reads everything, down to what you type into a search box. The other says the HTTPS padlock made your ISP blind. The truth sits in between, and knowing exactly where tells you which fixes are worth your time.

What your internet provider can and cannot see

Picture every web request as an envelope. HTTPS seals the letter inside. The address on the outside has to stay readable so the network can deliver it.

Hidden from your ISP on HTTPS sites: the full page address after the domain, your search terms, form entries, passwords, messages, and the content of the page.

Visible to your ISP: the domain you connected to, the time, how long you stayed, how often you come back, and roughly how much data you exchanged.

So your ISP does not know which article you read on a health site. It knows you visited that health site at 11:40pm, for twenty minutes, every Tuesday. That pattern is often more revealing than the article.

Can your ISP see what you search on Google?

Not the words. Every major search engine loads over HTTPS, so the text you type, the suggestions that pop up, and the results page all travel encrypted. Your ISP sees a connection to google.com and nothing about what you asked it.

What it can see is what happens next. Each result you click is a separate visit to a separate domain, and those domains are visible. Search for a symptom, then open three medical sites and a clinic's booking page, and the topic of your search is not hard to guess from the sites alone.

Your search history itself is stored by the search engine, not by your ISP. If you are signed in to Google, it lives in your Google account, and these are the settings that control it.

The three places the site name leaks

Most guides stop at "HTTPS hides content but not the domain." The useful part is where the domain leaks, because each leak has a different fix.

1. DNS lookups. Before loading a site, your device asks a DNS server to turn the name into an address. By default that question goes to your ISP's DNS server, unencrypted. It is a live list of every domain you visit.
2. The SNI field in the TLS handshake. The first message of an HTTPS connection names the site you want, in a field called Server Name Indication, and it has traditionally been sent in plain text. A newer standard, Encrypted Client Hello (ECH), hides it. Current Chrome and Firefox support ECH, and Cloudflare turns it on by default for sites on its free plan, but many sites still do not offer it.
3. The destination IP address. Packets have to go somewhere. On a big shared host the IP may cover thousands of sites, while on a dedicated server it points straight at one.

What your ISP sees at each layer of protection

Can your ISP see your history in incognito, or after you delete it?

Yes in both cases, and for the same reason. Incognito mode and the "clear history" button only act on the copy your browser keeps on your device. Your ISP never reads that copy. It sees your traffic as it crosses its network, at the moment it happens.

• Incognito or private browsing: your connections leave your device exactly as they would in a normal window, so the DNS lookups, site names, and IP addresses are all still visible. Our guide to what incognito mode actually hides covers the rest.
• Deleted history: clearing your browser history, cookies, or cache removes local records. Whatever your ISP's systems logged was made on its side and stays there for as long as it keeps such records. Nothing on your device can reach it.

The only thing that changes what your ISP sees is changing what leaves your device, which is what the layers in the table above do.

Can your mobile carrier see your history on data?

Yes. On mobile data, your carrier is your ISP, and it sees the same domain-level picture as a home provider: the sites and services your phone connects to, when, and how much data moved. On Wi-Fi the picture shifts to the home ISP behind that Wi-Fi, plus whoever runs the router.

Some carriers say plainly that they use this. Verizon's Custom Experience program uses "information about the websites you visit and the apps you use on your mobile device" Verizon says it uses only the first part of each web address and filters out sensitive categories, and that you are in the program unless you opt out (as of October 2026). You can opt out under privacy preferences in My Verizon. Carriers also hold something more sensitive than browsing: in April 2024 the FCC fined the largest US wireless carriers roughly $196 million combined for selling access to customers' real-time location data, as covered below.

To narrow what your carrier sees, turn on Private DNS on Android: Automatic uses encrypted DNS where the network supports it, or you can name a provider. On iPhone, encrypted DNS needs a configuration profile or an app. A VPN on the phone hides the site names from the carrier entirely.

Test your own browser in one minute

You can check two of those leaks right now.

• Is your DNS encrypted? Visit one.one.one.one/help. If you use Cloudflare's resolver, it reports whether you are connected over DNS over HTTPS or DNS over TLS. Many other resolvers have a similar check page.
• Is your SNI encrypted? Visit tls-ech.dev, a test page that supports ECH. If it says "You are not using ECH", your browser just told your ISP the site name in the clear. If it says you are using ECH, the name was hidden. If it still says you are not, turn on encrypted DNS first. The browser fetches each site's ECH key through a DNS lookup, and Mozilla describes ECH as relying on DNS over HTTPS to get it. A site that has not enabled ECH stays visible whatever you do.

Do ISPs actually look at your history?

Not in the sense of a person scrolling through your evening. The collection is automated, and the record gets used in three ways.

1. Advertising and marketing. In October 2021 the FTC published a staff report on six major ISPs covering about 98 percent of the mobile market. It found they had "access to all of their Internet traffic and real-time location data," combined personal, app-usage, and web-browsing data to target ads, and sorted some subscribers into sensitive categories such as race and sexual orientation, while "failing to offer consumers meaningful choices."
2. Running the network. Providers use traffic data to manage congestion and security on their own networks.
3. Legal demands. In the US, a subpoena is enough to make a provider hand over a subscriber's name, address, "records of session times and durations," and the IP address it assigned. More detailed records need a court order or a warrant, and the law does not require the provider to tell you.

So the honest answer to "does my ISP care what I search?" is that nobody there is reading it, but the record exists, it has commercial value, and it can be handed over.

Why your ISP keeps that record

Because it is valuable, and US law lets it. In 2016 the FCC adopted rules that would have required ISPs to get opt-in consent before using or selling sensitive data such as browsing history. Congress repealed them before they took effect: S.J.Res. 34 was signed on April 3, 2017.

Location shows how far this goes. In April 2024 the FCC fined the largest US wireless carriers roughly $196 million combined for selling access to customers' real-time location data: about $57 million for AT&T, $47 million for Verizon, $80 million for T-Mobile, and $12 million for Sprint, as Krebs on Security detailed. In June 2026 the Supreme Court sided with the FCC against AT&T and Verizon.

How long do internet providers keep your history?

In the US there is no general law requiring ISPs to keep a record of the sites you visit, and none requiring them to delete it, so it varies by company and is set out, loosely, in each privacy policy. Other countries mandate it. In the UK, the Investigatory Powers Act 2016 lets the government require providers to retain "internet connection records" for up to 12 months.

Can you see or request your own ISP history?

There is no page in your account that lists the sites you visited, and your bill does not show them. You can ask, though, and in some places the provider has to answer.

• In the EU and UK, the GDPR gives you the right to confirmation of whether a company processes your personal data and to "a copy of the personal data undergoing processing" (Article 15). Send a subject access request to your provider's privacy or data protection contact.
• In California, the CCPA gives you the right to know the "specific pieces of personal information collected" by businesses above its size thresholds, which covers the large ISPs. Most providers have a privacy request form for this.
• Elsewhere in the US, check your provider's privacy policy and your state's privacy law for a similar right of access.

What comes back depends on what the provider actually keeps. You may get account, billing, and usage data rather than a list of sites, which is itself a useful answer.

How to stop your internet provider from seeing your history

Work through these in order. Each closes a different leak.

1. Stay on HTTPS. Nearly every major site uses it, and current browsers upgrade to it automatically where they can. It already hides pages and content from your ISP. It does not hide domains.
2. Turn on encrypted DNS. In Chrome, Edge, and Firefox, look for "Secure DNS" or "DNS over HTTPS" in the privacy or security settings and pick a resolver you trust. On Android, use the "Private DNS" setting. On iPhone, encrypted DNS needs a configuration profile or an app. This removes the plain-text list of lookups your ISP was receiving. Then run the SNI test above to see whether ECH is kicking in.
3. Use a VPN when you want the site names hidden too. A VPN wraps everything in one encrypted tunnel to the VPN's server, so your ISP sees only that you are connected to a VPN and how much data moves. The catch: the VPN company is now the one in a position to see where you go. That makes the operator the whole question, and it is why a sketchy free VPN can be worse than none (here is how to tell them apart).
4. Use Tor Browser for the highest bar. Tor routes traffic through several relays so no single one knows both who you are and where you are going. It is slower, and some sites block it, but it hides your destinations from your ISP without asking you to trust one operator.

None of these hide you from the website itself. Once you arrive, the site sees your visit, and its trackers see what they are built to see.

A VPN built to have nothing to hand over

If you move your trust from your ISP to a VPN, move it to one that is designed not to keep what your ISP was keeping. Secria VPN keeps no activity logs: we do not record browsing, DNS queries, or traffic contents. While a session is live we hold the account and device it belongs to, the server in use, and the time it started, and that record goes when the session ends. DNS is resolved on our own servers rather than handed to a third-party resolver, servers keep their state in RAM, and every WireGuard tunnel carries an ML-KEM-1024 post-quantum key, which matters because your ISP is exactly the kind of party that can store encrypted traffic today and try to decrypt it later. It is $7.99 a month on its own or included with Pro.

FAQ

Can my ISP see my browsing history if I use a VPN? No. With a VPN on, your ISP sees that you are connected to a VPN server, when, and how much data moves, but not the sites you visit. If the VPN leaks DNS, some site names can still slip through, so test for leaks.

Does Tor hide my browsing history from my ISP? Yes. Your ISP sees that you are connected to the Tor network, when, and how much data moves, but not the sites you reach through it. Only traffic inside Tor Browser is covered; other apps on the same device still connect normally.

Can my ISP see what I download? On an HTTPS download it sees the site and roughly how big the file is, not the file name or its contents. Peer-to-peer apps such as BitTorrent are different: they connect you to many other computers that all see your IP address, and their traffic pattern is easy to recognize.

Can the Wi-Fi owner see my history too? They can see the sites and apps your device connects to through their router, at the same domain level as your ISP, but not pages or searches on HTTPS. Whether they keep a record depends on the router. Our guide to what the Wi-Fi owner can see goes router by router.