On this page
Closing a tab is not the same as signing out of an account. On a shared computer, a website session, browser profile, downloaded attachment, or connected application can remain after the page disappears. A short exit routine helps you check the specific traces your session created.
Use a trusted personal device for sensitive work whenever possible. Private or guest browsing changes how some local browsing data is handled; it does not establish that a public computer is free of monitoring or malicious software. If you do not trust the device, avoid entering sensitive credentials or documents on it.
Choose the session boundary before signing in
On an authorized shared computer, a guest or private browsing session can help separate temporary activity from the owner's normal profile. Check the browser's actual mode indicator rather than assuming a new window is private.
Chrome's guest mode separates browsing from other Chrome profiles. Edge's InPrivate mode clears specified local data when all InPrivate windows close, but Microsoft explains that downloaded files and favorites remain. These are useful distinctions to understand before deciding what to open or save.
Do not sign the browser itself into your personal sync account merely to access one website. Browser sign-in can introduce bookmarks, passwords, history, or other synchronized information depending on its settings. Website sign-in and browser-profile sign-in are separate choices.
Keep a simple mental inventory of what you used
Notice which websites you signed into, whether a separate app opened, and whether you downloaded, printed, or uploaded anything. The exit check should follow the work you actually performed rather than clear every setting on someone else's computer.
For example, opening a document from webmail may involve the mail session, a local PDF download, and a desktop viewer. Signing out of mail addresses only one part of that sequence. A file may remain in the downloads folder after the viewer closes.
Avoid adding shortcuts, saving passwords, enabling automatic sign-in, or selecting “remember this device” on a shared machine. If an application asks to stay connected, choose the temporary option appropriate to the task or stop if the consequences are unclear.
Sign out of each website deliberately
Use the account menu's sign-out action and wait for the site to show a signed-out state. A closed tab, blank page, or browser crash is not confirmation that the server-side session ended.
Where the account is especially important, open its known home page again in the same temporary session and check that it requires sign-in. Do not enter the password again just to test the exit. If the account immediately reappears, investigate whether another connected session or identity provider is still active.
For work or school systems, follow the organization's shared-device procedure. A managed sign-on environment can behave differently from an ordinary personal website, and clearing unrelated browser data may interfere with the next authorized user's work.
Close connected applications and account panels
If the task launched a desktop application, check whether that application signed in separately. Signing out of the browser may leave a document editor, messaging client, or storage application connected.
Do not disconnect or delete the device owner's account. Focus on the account you added and use the application's supported sign-out or remove-account process. If you cannot distinguish your account from an existing managed setup, ask the device administrator for help.
The online privacy checklist provides broader account and device considerations. This exit routine concerns the access created during one session and should not become an unplanned reset of the shared machine.
Deal with files you intentionally created
Locate your own downloaded attachments, exports, screenshots, and temporary working copies. Confirm that any necessary document has been saved to an approved destination you can access later before removing your task's local copy.
Use the normal deletion process permitted on that computer, and remember that a recycle bin or trash folder may retain deleted files. Removing a local copy is not a guarantee against recovery, backups, monitoring, or copies created elsewhere. That is another reason to avoid opening highly sensitive material on an untrusted machine.
Never clear a whole downloads folder or empty a shared recycle bin indiscriminately. Other people's files may be there. If the computer uses a managed cleanup process, follow that process and ask staff how your files are handled.
Check printing and other physical traces
Collect the pages you printed and check for duplicate output or a failed job still waiting in the queue. A printer can produce a delayed copy after you leave. Use the supported cancel action for your own unfinished job when appropriate.
Remove papers, notes, and removable storage you brought. If you used a clipboard for sensitive text, avoid assuming that closing the source page clears every clipboard history or synchronized clipboard feature. Follow the device's approved procedure and minimize copying sensitive information in the first place.
These checks should remain proportionate. You are accounting for your own session, not inspecting another user's files, history, or private activity.
End the temporary browser session completely
Close all windows belonging to the guest or private session. In Edge, the documented cleanup occurs when all InPrivate windows close, so leaving a second window open matters. A minimized window still counts as an open window.
If you accidentally used a normal browser profile, sign out of your websites and inspect only the data you introduced, with the owner's or administrator's guidance when needed. Do not erase the owner's saved accounts or browsing history to compensate for the mistake.
The browser privacy settings guide explains the broader controls. Treat those settings as tools with specific effects, not a promise of anonymity or complete removal of every trace.
If you have already left, use account-side controls
From a trusted device, review the affected account's active devices or sessions and use its supported remote sign-out process where available. Identify the session carefully using the provider's information; locations and device labels can be approximate.
If you may have exposed a password, saved access on an untrusted device, or noticed activity you did not perform, use the provider's recovery and security steps. The access review after a password reset explains why changing a password may not address every existing session or connected application.
Contact the shared computer's responsible staff if a local file or print job needs attention. Ask them to handle the specific item rather than giving anyone your password. A useful exit check ends with a clear account state and an honest understanding of what the device may still retain.
Sources and further reading
Primary and contextual sources used to verify definitions or give readers a relevant next resource.
- Google: Browse Chrome as a guest Guest browsing separates the session from other Chrome profiles; Google advises signing into sensitive sites only on trusted devices.
- Microsoft: Browse InPrivate in Edge Closing all InPrivate windows clears specified local browsing data, while downloaded files and favorites remain.