What Is Browser Fingerprinting?

Browser fingerprinting is a tracking technique that collects unique technical details about your browser and device to create a digital "fingerprint." Unlike cookies, it works silently in the background, cannot be cleared by deleting your history, and continues tracking you even in incognito mode.

How Browser Fingerprinting Works

When you visit a website, your browser automatically shares certain parameters so the page displays correctly. Tracking scripts gather dozens of these signals — operating system, browser version, screen resolution, timezone, installed fonts, GPU details — and combine them into a unique identifier.

While millions of people might share one trait (like using Windows), the exact combination of all your settings is mathematically unique to you. The result is converted into a single hash — a tracking ID that follows you across sites.

Common Fingerprinting Techniques

Canvas fingerprinting. A script instructs your browser to draw a hidden image — text, shapes, subtle color gradients — that is never shown on screen. Because every combination of GPU, graphics driver, and operating system renders the image with tiny differences, the resulting pixels form a stable identifier. It is one of the most widely used techniques because it requires no permission and produces consistent results.

WebGL & WebGPU probing. These browser APIs exist so websites can run 3D graphics, but the way your hardware completes a rendering task reveals details about your specific GPU model and drivers. A script can request a small 3D scene, measure how it comes out, and read vendor strings directly from the API. The result narrows you down considerably, since GPU and driver combinations vary widely between devices.

Font & plugin enumeration. Scripts can test which fonts are installed on your system by measuring how text renders in each one, and can probe for the presence of browser extensions. Your particular set of installed fonts — shaped by the software you have installed over the years — is often distinctive on its own.

Audio fingerprinting. The Web Audio API lets a script generate and process a sound signal entirely in the background, without ever playing anything through your speakers. Small differences in audio hardware and software processing produce measurably different output from the same input. That output becomes another stable component of your fingerprint.

Media & device APIs. Browsers expose information about connected monitors, supported audio and video codecs, and in some cases battery status. Each of these queries returns a small amount of information, but combined they add meaningful detail to the overall profile of your device.

Why Websites Use Fingerprinting

The most common use is advertising and profiling. Ad tech companies use fingerprints to recognize you across unrelated websites and build a behavioral profile — the pages you read, the products you look at, the times you browse — which is then used to target ads. This is the use case privacy regulations are most concerned with, because it happens without any visible indication.

Fingerprinting also has genuinely protective uses. Banks and security platforms use it for fraud and bot prevention: if a login attempt arrives from a device whose fingerprint has never been seen on your account, that is a useful signal that something may be wrong. The same techniques help distinguish real visitors from automated bots.

Finally, services use fingerprints for preventing abuse — detecting when one streaming account is being shared across many households, or re-identifying banned cheaters in online games who create fresh accounts. It is worth being honest about this: fingerprinting is not purely a surveillance tool. The technique is neutral; what varies is who is using it and why.

How to Protect Yourself

Because fingerprinting targets inherent characteristics of your device rather than stored data, it is harder to stop than cookies. You cannot delete a fingerprint — you can only change what your browser reveals, or make it blend in with others.

Brave Browser randomizes canvas, WebGL, audio, and font fingerprinting signals on every session, so the fingerprint a tracker records today will not match the one it sees tomorrow. It is the best mainstream option — protection is on by default with no configuration required.

Firefox with resistFingerprinting is a good everyday alternative. Go to about:config and toggle privacy.resistFingerprinting to true. Firefox will then report standardized values for many of the signals fingerprinting scripts rely on, at the cost of occasionally breaking sites that depend on those values.

Tor Browser and Mullvad Browser take the strongest approach: instead of randomizing signals, they standardize everything so that every user looks identical. If your fingerprint matches thousands of other people exactly, it cannot single you out. This is the right choice for high-sensitivity use, with the trade-off of slower speeds and stricter defaults.

Minimize extensions. Paradoxically, installing many privacy extensions can make your fingerprint more unique — each one changes how your browser behaves in detectable ways, and the unusual combination becomes an identifier in itself. A stock browser configuration blends in better than a heavily customized one.

One common misconception is worth stating clearly: a VPN does not affect your browser fingerprint. A VPN changes your IP address, which is one signal among dozens — your canvas rendering, fonts, GPU details, and everything else stay exactly the same. VPNs and fingerprinting protection solve different problems.

Check Your Own Fingerprint

You can see exactly what your browser reveals right now — no signup required.