Browser Fingerprinting
lastmod 2025-11-24created 2025-11-244 edits
Browser fingerprinting is a serious tracking technique that is hard to block even with cookie controls or a VPN; it combines information about the user's environment to generate a unique identifier
About
Fingerprinting is a practice in which websites identify a particular browser (and by extension, a particular user) by collecting and combining distinguishing features of the browser and the underlying operating system. Fingerprinting may include:
- Browser version
- Time zone and preferred language
- Set of video or audio codecs available on the system
- Fonts installed on the system
- State of browser settings
- Computer display size and resolution
A website can retrieve information like the above by executing JavaScript and CSS on the device, and by combining this data it can create a unique fingerprint for the browser, which can be used to track the user across the web. Web standards are designed in a way that minimizes the ability of websites to collect identifying information, and browsers typically add their own protections as well.
See also
Favorite site
- The privacy nightmare of browser fingerprinting | GeekNews
- [Original] Kevin Boone: The privacy nightmare of browser fingerprinting
- Browser fingerprinting is a serious tracking technique that is hard to block even with cookie controls or a VPN; it combines information about the user's environment to generate a unique identifier
- Various factors such as the operating system, browser version, language, time zone, fonts, extensions, and canvas rendering results combine to increase the likelihood of identifying individuals
- Simple defenses such as disabling JavaScript, browser spoofing, and canvas manipulation have side effects: they can leave identifying clues or break website functionality
- Some browsers such as Brave, Mullvad, and Librewolf have built-in fingerprinting resistance, but complete protection is impossible, and it brings inconveniences such as reduced usability and more CAPTCHAs
- Since the regulatory basis under existing laws such as the GDPR is unclear, the need for a new legislative response has been raised