Fingerprinting
❗This article is a stub. You can help by expanding it.
#appeals channel in either Zulip or Discord to request removal.An article may be flagged as a stub when it is missing major elements needed to make it useful to a reader. You can help by adding missing sections, verifiable sources, relevant company policies and communications, etc. to make the article more complete.
❗This article uses tone or wording inconsistent with the editorial guidelines.
#appeals channel in either Zulip or Discord to request removal.The wiki's voice should remain neutral and avoid loaded language or unnecessary offence. Direct attacks on individuals or companies are not permitted; malice may only be attributed through quotation and citation, never in the wiki's voice. In theme articles argumentation is allowed but should be clear, formal, and never inflammatory.
A device fingerprint is a collection of information about a device's hardware and configuration. Unlike an IP address, which is a singular piece of data that users can manipulate for privacy and security (such as using a VPN service or resetting network connections), a device fingerprint holds a series of specified data that can be uniquely attributed to a device or user (or a group thereof), and are therefore much harder to protect from tracking and abuse of privacy.
How it works
Fingerprinting works by getting one or more data items and turning them into a much shorter bit string that uniquely identifies itself (typically by applying a hash-function). Such data points include device hardware, web browser, browser plugins and configuration, screen resolution, installed fonts, and many other methods.[1] Even the lack of data can be used to build a fingerprint, as certain data is unlikely to be missing.
Because of the many different variables used to generate a fingerprint, adding extensions and changing settings intending to increase privacy may have the opposite effect.
Why it is a problem
While there are some benefits from a security perspective (e.g. trusted-device recognition and fraud prevention), fingerprinting allows websites to identify individuals even while masking their IP address, flagging privacy concerns and letting companies do things like targeted advertising, selling personal data and more. It also allows another avenue for tracking across websites as services implemented on many different sites on the web will be able to follow device browsing from one website to another. [2]
Remedies
Device fingerprinting is difficult to avoid due to the aforementioned data points available. Notable remedies include using privacy-focused browsers such as Mullvad, Brave, or the Tor browser which either randomizes certain data points to hide unique attributes or modifies identifiers to make all users appear to be the same in an effort to reduce the uniqueness of the system (AKA spoofing). [3]
For those looking to test browser protection against web fingerprinting, the Electronic Frontier Foundation has a tool called Cover Your Tracks to display unique hardware and software fingerprints.
References
- ↑ "How does device fingerprinting work?". crossclasiffy.com. Archived from the original on 7 Sep 2025. Retrieved 31 August 2025.
- ↑ "Browser Fingerprinting: What It Is and How to Block It". techreviewadvisor.com. Archived from the original on 21 Nov 2025. Retrieved 10 October 2025.
- ↑ "Anti-fingerprinting". tb-manual.torproject.org. Archived from the original on 29 Oct 2025.