Your Browser Is Telling on You

I came across this Lifehacker article about browser fingerprinting and figured it was worth talking about. I turned on Brave's fingerprinting protection about two or three years ago on both my Mac and my phone, so I'm already covered. But most people have no idea this kind of tracking even exists.

Every time you visit a website, your browser hands over a bunch of small details about your setup. Screen resolution. Timezone. Installed fonts. Your graphics card. Even how your device renders a tiny hidden image on the page. None of that seems like a big deal by itself. But put all those pieces together, and they create a profile that is almost always unique to you.

Imagine walking into a room full of people. You might share the same hair color with someone. Same height with someone else. But the combination of your hair, height, shoes, the way you walk, and the watch on your wrist? That narrows things down fast. That's what fingerprinting does with your browser.

Here's the part that should bother you. You can't delete a fingerprint the way you delete a cookie. There's nothing stored on your device to clear. The tracking happens on their side, based on what your browser reveals just by showing up. Private browsing mode? Doesn't help. VPN? Doesn't help either. Neither one changes what your browser is sharing about itself.

And with third-party cookies getting phased out across major browsers, fingerprinting has become the go-to replacement for advertisers and tracking networks. It works without your permission and without any notification.

The EFF's Panopticlick study found that 84% of browsers had a unique fingerprint, and that was back in 2010, using just eight data points. Today's fingerprinting techniques collect dozens more, including things like scroll speed and how you type.

What can you do? You can't stop it completely, but you can make it a lot harder to track you.

The biggest move is using a browser that fights fingerprinting by default. Brave randomizes your fingerprint data so every site gets a slightly different version of your browser profile. Firefox blocks known fingerprinting scripts. Safari added Advanced Tracking and Fingerprinting Protection starting with Safari 17. All three are solid options.

Chrome? No built-in fingerprinting protection at all. There are third-party extensions that try to fill the gap, but Chrome's own extension framework now prevents them from kicking in before a page finishes loading. That gives fingerprinting scripts just enough of a head start to grab what they need. If fingerprinting matters to you, Chrome is working against you.

If you want to check how trackable your browser is right now, the EFF's Cover Your Tracks tool runs a quick test. Worth a look.