Browser Fingerprint and What It Reveals
An online tool for testing your browser fingerprint: it shows which signals your browser exposes to websites — canvas and WebGL rendering, audio processing, installed fonts, hardware, timezone and supported features. Each signal gets an entropy estimate from published research, the result is compared with today's scans, and a defense test checks whether your anti-fingerprint protection really changes the values. Free, instant.
How to test your browser fingerprint
The tool scans 8 vectors in your browser: Canvas, WebGL, Audio, Fonts, Hardware, Math, Timezone, and Features. Each is hashed with SHA-256.
The grade combines estimated bits with the channels your browser closes: a default browser usually lands in D (26–35 bits), F starts at 36 bits with no protection, and closed channels move you towards A.
See how many of today's scans on this page produced exactly the same fingerprint. With a few dozen scans a day it shows collisions, not how rare you are on the web.
If you have CanvasBlocker, Brave Shields, Firefox RFP, or Tor — click "Test my defenses" and we run scans twice to detect whether protection is actually randomizing output.
Save the current fingerprint locally; return later to see which vectors drifted. Fingerprints are not actually static — installing a font, updating a driver, even changing screen resolution moves the hash.
Scan canvas, WebGL, audio and fonts, then check whether your defenses change them
An add-on that changes a single signal is often visible in itself — the trust panel above flags exactly that kind of mismatch. What holds up: values that change from site to site, or a browser that looks like every other one of its kind.
Defense Test
What the A–F grade means
The grade combines two things: how many bits of identifying data the scan managed to collect, and how many collection channels your browser closed off. Closing a channel moves the grade more than shaving off a couple of bits.
| Grade | When you get it | What it means in practice |
|---|---|---|
| A | Four or more channels closed (two privacy signals count as one closed channel) | Your browser looks like many others of its kind — picking you out by fingerprint is hard. |
| B | Two or three channels closed, or under 18 bits with at least one closed | Protection is working, though part of the data still gets through. |
| C | Under 18 bits with no protection, or 18–26 bits with one channel closed | The fingerprint is blurred: enough browsers match yours for you not to stand out immediately. |
| D | 26–35 bits, no protection | The normal state of a default browser — a baseline, not a failure. |
| F | 36 bits or more, no protection | The combination of traits is rare enough to point at a single device. |
Reading the numbers
- A bit is a doubling: each additional bit halves the crowd of browsers that look like yours.
- Blocked and randomized channels are counted separately from bits — that is why a browser with fewer bits can still score lower than one with active protection.
- The scale is calibrated against our own scans: a browser with no extensions almost always lands in D, so D is the starting point rather than a verdict.
What else recognizes you besides the fingerprint
This page measures one channel. It is not the only one and not the strongest, and it answers a different question than an IP address does.
IP address
Every site you open sees it. It is often shared — a household, an office, a mobile carrier — it changes, and a VPN replaces it, so on its own it recognizes a browser poorly. But a provider can usually match an address and a time to a subscriber under a legal request; a fingerprint cannot do that.
Cookies and a signed-in account
The direct route: a cookie or a logged-in session tells a site who you are without any guessing. Fingerprinting matters mostly when these are gone — cleared cookies, a private window, no account.
Fingerprint (this page)
Recognition without cookies: the same browser configuration looks the same after cleared cookies or a new IP address. It points at a browser, not at a person, and it drifts with updates and new fonts — which is why trackers combine it with the IP address.