Browser fingerprinting (or digital fingerprinting) is the practice of combining lots of small details about your device, browser and behaviour to create a unique profile that can recognise you across visits — often without using cookies or asking your permission.
What browser fingerprinting collects
A single piece of data — your IP address, screen size, or browser name — rarely identifies you. Fingerprinting works by joining dozens of those small signals until the combination is distinctive. Typical signals include:
- IP address and approximate location - Browser type and version, and the operating system - Screen resolution and device pixel ratio - Installed fonts and plugins - Time zone and language settings - List of supported media formats and audio/video capabilities - Canvas and WebGL rendering quirks (so-called canvas or GPU fingerprinting) - Available APIs and how they behave when asked to do innocuous tasks - Which features you grant permission to (microphone, camera, location)
Some of these come directly from server requests, others are detected by JavaScript or HTML5 APIs running in the page. Put together, the fingerprints can be surprisingly stable and identifying even when cookies are cleared or private windows are used.
Why ordinary protections often fall short
Many people rely on clearing cookies, using private or incognito windows, or switching browsers. Those steps help against cookie-based tracking, but they don’t stop a server from building a fingerprint: the information used for fingerprinting is gathered at the time you visit and stored on the server side, not only in your browser. A tracker can still recognise the mix of attributes your device presents each time.
Browsers also expose functionality you expect — playing audio, showing video, drawing to a canvas — and fingerprinting scripts can use those allowed actions to glean extra entropy. Mobile apps and installed software can add further unique signals that make you easier to recognise.
Practical steps to reduce fingerprinting
You can’t make yourself invisible, but you can make fingerprinting harder and less reliable:
- Use a browser with built-in anti-fingerprinting measures or a privacy-focused browser that aims to present you as part of a large crowd rather than a unique device. - Block or limit JavaScript and third-party scripts when practical. Script blockers and content blockers reduce the surface attackers can probe. - Use tracking-blocking extensions to stop known trackers and fingerprinting scripts from loading. Popular options include blocker and anti-tracker extensions — check reviews and choose well-maintained tools. - Keep your device and browser updated and avoid installing lots of unusual plugins or fonts that make your setup distinctive. - On mobile, review app permissions and limit unnecessary access to location, microphone and camera. App stores have added more requirements for apps to disclose their tracking, and you should use those controls where available. - Consider network-level protections such as a reputable VPN to mask your IP address, but be aware that VPNs don’t stop fingerprinting based on your browser/OS attributes. - Test yourself with a fingerprint-testing tool from a respected privacy organisation to see what a tracker could learn.
Fingerprinting is a persistent privacy challenge because it uses legitimate, everyday browser features. The best approach is layered: reduce unnecessary exposure, use privacy-minded tools and stay aware of the trade-offs between convenience and anonymity.
