What Is Browser Fingerprinting? How Sites Track You Without Cookies

Most people think they're tracked by cookies — little files a site stores in your browser. Delete the cookies, the thinking goes, and you're a stranger again. Browser fingerprinting breaks that assumption. It identifies you from the characteristics of your browser and device themselves, so there's nothing to delete and nothing to clear.

This guide explains how it works, why it's so effective, and how to measure how identifiable your browser is.

The core idea: you're a combination of small details

No single detail about your browser is unique. Plenty of people use the same browser version, the same screen size, the same operating system. But stack enough details together and the combination becomes rare — often unique.

A fingerprint is typically built from signals like:

Your user agent (browser and OS)
Screen resolution and color depth
Time zone and language settings
Installed fonts
Graphics hardware, exposed through canvas and WebGL rendering
Audio-processing quirks, available sensors, and dozens more

Each one narrows the crowd. Researchers measure this in bits of entropy — each bit roughly halves the number of people who share your profile. At around 33 bits, you're unique among everyone on the internet. Many ordinary browsers get there without trying.

Why it defeats "private" browsing

Fingerprinting works because it doesn't store anything on your device:

Clearing cookies doesn't help — there were no cookies involved.
Incognito/private mode doesn't help — your fingerprint is the same.
A VPN doesn't help — it changes your IP, not your screen size or fonts.

That last point surprises people most. You can hide your network identity completely and still be re-recognized on your next visit by your fingerprint alone. (For what a VPN does cover, see our guide on what a VPN is.)

The paradox: hardening can backfire

Here's the counter-intuitive part. Installing exotic privacy extensions, spoofing your user agent, or using a rare browser configuration can make you more identifiable, not less — because now you stand out from the crowd instead of blending into it. The most fingerprint-resistant setups are the ones that look exactly like everyone else's.

So what actually helps?

Use a mainstream browser in its default configuration — you blend in.
Browsers like Tor Browser deliberately make many users look identical.
Some browsers now randomize or block canvas and WebGL fingerprinting.

But the honest first step is to measure before you change anything. The whole point of fingerprinting is that you can't feel it happening — so see exactly which signals your browser exposes, and how unique they make you, below.