What Is Browser Fingerprinting?

Every time you visit a website, your browser silently shares dozens of details about your device, software, and settings. Combined, these details create a unique identifier — your browser fingerprint — that can track you across the web without ever storing a cookie on your machine.

How Browser Fingerprinting Works

When your browser loads a webpage, it automatically sends information through HTTP headers: your User-Agent string, accepted languages, encoding preferences, and more. JavaScript on the page can then query dozens of additional properties — screen resolution, installed fonts, WebGL renderer, audio processing characteristics, timezone, and hardware specs.

Individually, each piece of data is shared by millions of people. But the combination of all these signals is often unique. Research by the Electronic Frontier Foundation found that browser fingerprints can uniquely identify over 90% of browsers.

How many data points does your browser leak?

Browser Inspector detects 80+ signals that any website can collect — without asking permission. Try it now →

What Data Gets Collected

Network & Location

IP address, approximate city, ISP, connection type, VPN detection

Browser & Engine

Name, version, rendering engine, user agent, client hints, language preferences

Device & Hardware

Operating system, CPU cores, device memory, architecture, touch support

Screen & Display

Resolution, pixel density, color depth, dark mode, HDR support, orientation

Graphics & Media

WebGL renderer, GPU vendor, canvas rendering, audio fingerprint, codecs

Privacy & Security

Do Not Track, incognito detection, ad blocker status, tracker blocking

Cookies vs. Browser Fingerprinting

FeatureCookiesFingerprinting
Stored on deviceYesNo
User can deleteYesNo
Blocked by incognitoPartiallyNo
Requires consent bannerYes (GDPR/ePrivacy)Often bypassed
Works cross-browserNoPartially

Who Uses Browser Fingerprinting?

  • Advertising networks use it to track users across sites without cookies, especially as third-party cookies are phased out.
  • Fraud prevention systems use it to detect bots, account takeovers, and payment fraud.
  • Analytics platforms use it as a fallback identifier when cookies are blocked.
  • Content protection services use it to enforce paywalls and licensing restrictions.

How to Protect Yourself

  1. 1Use a privacy-focused browserFirefox and Brave both include built-in fingerprint resistance that randomizes or blocks certain signals.
  2. 2Install an ad blockeruBlock Origin blocks fingerprinting scripts before they can run. It also blocks trackers and ads.
  3. 3Use a VPNA VPN masks your IP address, removing the most visible tracking signal.
  4. 4Enable Global Privacy ControlGPC signals websites to opt you out of data selling. Supported by major browsers.
  5. 5Keep your browser updatedNew browser versions add privacy protections and patch known fingerprinting techniques.
  6. 6Reduce unique extensionsEach browser extension can subtly alter page behavior in detectable ways.
  7. 7Audit your fingerprintUse Browser Inspector to see exactly what your browser exposes and verify your protections work.

Want to see how well your protections are working? Run Browser Inspector →

More Tools

Further Reading