Use a separate standard or guest account when another person needs a shared computer. Protect the owner's session, files, browsers, password manager, cloud sync, and administrator privileges before access begins, then review downloads, accounts, sharing, and updates after the guest leaves. Browser guest mode alone does not isolate the entire operating system.
Choose the right account boundary
For recurring users, create a separate standard operating-system account with its own password and files. For a short supervised session, use the platform's guest account when its behavior is understood. Avoid sharing the owner's login because it can expose saved browser sessions, local documents, email, cloud drives, messaging, payment details, and password autofill.
Microsoft's Windows account guidance explains that multiple accounts give users separate settings, documents, and applications. It recommends limiting administrators and using standard accounts for everyday activity because administrators can install software, change settings, and access files.
On a Mac, review the available account type instead of assuming every temporary login behaves the same. Apple's Users and Groups guidance distinguishes administrator, standard, sharing-only, and guest access, and warns against automatic login for an administrator.
Protect the owner account and files
Sign out of the owner session rather than merely switching windows. Require a password after sleep, disable automatic administrator login, and confirm disk encryption and current backups according to the device's normal security plan. Close private applications and unmount removable or encrypted drives that are not needed.
Review shared folders, network shares, printer access, remote desktop, media libraries, and application data. Grant only the folders and devices required for the visit. Do not place a shortcut to a private folder inside the guest profile. If the computer connects to work or school resources, follow the organization's device-sharing rules before allowing another person to use it.
Set up the browser deliberately
Use a separate browser profile or browser guest session inside the separate operating-system account. Google's Chrome Guest mode guidance says a guest cannot see or change other Chrome profiles, and local browsing history, cookies, and site data are removed when the session closes. It also warns that websites, networks, service providers, and device owners may still be able to observe activity.
Do not sign the guest browser into the owner's sync account. Disable owner autofill and extensions that expose private data. Ask the guest not to save passwords, payment methods, recovery codes, or personal downloads on a device they do not control. Sensitive accounts should be used only on a trusted device.
Limit software and device access
Keep the guest as a standard user unless there is a documented need for an administrator action. Have the owner enter an administrator credential for a specific approved installation rather than sharing the password. Restrict access to cameras, microphones, location, Bluetooth devices, removable media, and local-network discovery to what the task requires.
Apply system and browser updates before the session. Use current endpoint protection, but do not promise that a temporary profile makes unsafe downloads harmless. For children, use the platform's family controls and a supervised account rather than treating a general guest session as parental control.
Clean up and verify afterward
Ask the guest to sign out of websites, close the browser guest session, and move required files to an agreed location. Sign out of the operating-system account. Review the Downloads folder, installed applications, startup items, browser profiles, connected accounts, and removable devices. Run the normal security scan if untrusted files were opened.
For a one-time account, verify needed files have been transferred before removal. Windows notes that removing an account from the device also removes that account's device data, even though it does not delete the person's Microsoft account. Preserve only authorized material, then remove the local account through the supported settings.
Finish by confirming the owner can access normal files and services, no new administrator exists, automatic login remains off, sharing settings are unchanged, and the guest no longer appears in active sessions. Record any exception that must remain for the next visit.
Sources
- Manage user accounts in Windows — Microsoft Support
- Change Users and Groups settings on Mac — Apple Support
- Browse Chrome as a guest — Google Chrome Help