Browser Fingerprinting
IntermediateA tracking technique that identifies you by the unique combination of your device's traits — screen, fonts, GPU, time zone — even with cookies off and IP changed.
In depth
Browser fingerprinting identifies a visitor by measuring dozens of attributes a browser freely reveals: user agent, language, time zone, screen resolution, installed fonts, audio stack quirks, how its GPU renders a hidden canvas or WebGL scene, and more. Individually mundane, together these traits form a signature unique enough to recognize one browser among millions — no cookie required.
How it works
A script on the page (or signals on the network layer, like TLS handshake ordering — JA3) collects attributes and hashes them into an ID. Because the ID is derived from your device, it survives clearing cookies, private browsing and IP changes. Defenses like Cloudflare and PerimeterX score fingerprints to separate humans from automation; ad-tech uses them to track users across sites.
Why it matters in this industry
- It defeats naive proxying: a scraper that rotates IPs but presents the same headless-Chrome fingerprint is trivially clustered and blocked.
- Inconsistency is fatal: claiming a Tokyo IP while the browser reports a Paris time zone and French locale is itself a red flag — fingerprints must match the proxy story.
- It created a product category: antidetect browsers exist precisely to manufacture coherent, distinct fingerprints per profile.
Common mistake
Randomizing every attribute makes you more identifiable, not less — impossible combinations scream automation. Good fingerprint management aims for plausible, internally consistent profiles.
Examples
- Canvas fingerprinting: a hidden image is drawn and hashed; tiny GPU/driver differences make the hash near-unique per device.
- A bank recognizes a returning fraudster by fingerprint even though he cleared cookies and switched to mobile data.
- An anti-bot wall clusters 10,000 requests from different IPs because every one shares the same headless-browser fingerprint.
Common use cases
FAQs
You can blend in rather than disappear: Tor Browser and Firefox's resistFingerprinting make many users look alike, while antidetect browsers replace your fingerprint with a different coherent one. Ordinary incognito mode does nothing against it.
No. IP tools change where you connect from; fingerprinting reads what you connect with. Serious anonymity work pairs IP rotation with fingerprint management so both layers tell the same story.
Broadly yes, though privacy regimes like GDPR treat fingerprints as personal data requiring a lawful basis, and platform policies vary. Its legality as a tracking method does not depend on user consent in most jurisdictions today.