Browser Fingerprint Test |
Reading…
Built in your browser from the … signals below. Try a private window: the same ID shows that private mode does not hide it.
Browser Fingerprint Test — Detect the Signals Websites Use to Track You
Browser fingerprinting is a stateless tracking technique that identifies a browser by collecting hardware and software attributes — screen resolution, color depth, user agent string, rendering engine, and system timezone — and combining them into a persistent unique identifier. Unlike cookies, a fingerprint cannot be deleted, because it is derived from device configuration, not stored data. Research from the EFF's Panopticlick project found that 83.6% of tested browsers produced a unique fingerprint across a basic attribute set.
| Signal | What It Reveals | Tracking Risk |
|---|---|---|
| Screen Resolution | Monitor pixel dimensions and color bit depth | High — rare resolutions narrow the candidate pool significantly |
| User Agent String | Browser name, version, OS, and layout engine | High — full UA string is unique across most browser and OS combinations |
| Browser Engine | Rendering engine: Blink, Gecko, or WebKit | Medium — narrows to browser family |
| System Timezone | IANA timezone identifier from OS clock | High — timezone mismatch with VPN location is a direct tracking signal |
| Language / Locale | navigator.language — primary browser locale | Medium — narrows geographic origin and keyboard layout |
| CPU Threads | navigator.hardwareConcurrency — logical CPU thread count | Medium — distinguishes device class (mobile vs workstation) |
| Fingerprint Hash | Combined hash of all detected signals | High — consistent across sessions, cannot be cleared |
How to Use the Browser Fingerprint Test
The browser fingerprint test runs automatically on page load — no input required.
Inspect your user agent string
Note your system timezone
Compare your fingerprint ID
How Browser Fingerprinting Works
Browser fingerprinting reads attributes via JavaScript APIs standardized in the
W3C HTML Living Standard and ECMA-402. The Screen API (window.screen)
exposes width, height, and colorDepth without
any user permission grant. The Navigator API (navigator.userAgent) returns
the full UA string sent with every HTTP request. Note that the User-Agent Client Hints
API (navigator.userAgentData), introduced in Chrome 90 and defined in the
W3C UA-CH draft, is replacing the legacy UA string in Chromium-based browsers; both
are read by production tracking scripts.
System timezone is obtained via Intl.DateTimeFormat().resolvedOptions().timeZone
(ECMA-402), which returns the IANA timezone identifier directly from the OS clock —
independent of the browser's locale setting and unaffected by VPN connections.
Hardware concurrency (navigator.hardwareConcurrency) returns the number
of logical CPU threads, distinguishing mobile devices from workstations. Touch support
(navigator.maxTouchPoints) further separates device classes.
Production fingerprinting systems extend beyond these basic signals to include
Canvas API rendering output (HTML5 Canvas, using toDataURL() to hash
pixel-level GPU rendering differences), WebGL vendor and renderer strings, and
installed system fonts — each adding several bits of entropy. The EFF's Panopticlick
study demonstrated that combining 8 basic attributes produces a fingerprint unique
for 83.6% of browsers. All detection on this tool runs client-side — no data is
transmitted to any server.
Why Incognito Mode Does Not Help
Incognito mode isolates cookie storage and clears browsing history after the session.
It does not modify window.screen, navigator.userAgent,
navigator.hardwareConcurrency, or Intl.DateTimeFormat
output. Every fingerprint signal read by this tool returns identical values in
incognito and in normal browsing. Google's own documentation for Chrome confirms
this explicitly.
Common Uses for a Browser Fingerprint Test
VPN configuration verification. A privacy-conscious user enables
a VPN routed through a Frankfurt server. The fingerprint test shows system timezone
America/New_York — a direct mismatch. Tracking systems detect this
IP-timezone inconsistency as a strong VPN signal, partially defeating the privacy
goal. The user corrects this by setting the OS timezone to match the VPN server
location before any browsing session begins.
Anti-detect browser profile testing. A security researcher configuring a test browser profile needs to verify that screen resolution and user agent match the intended spoofed values before logging into a test account. The tool surfaces the exact values the target platform will receive, allowing configuration corrections before any account activity exposes the profile.
Browser compatibility audit. A QA engineer receives a visual regression report that only reproduces at specific screen dimensions. The fingerprint test confirms the reporter is on a 1440×900 display at 32-bit color depth — a configuration absent from the test matrix — allowing the engineer to reproduce the bug without guessing the environment.