A cookie banner appears, you click “Reject all”, and you assume the site has forgotten you. It hasn’t. Before you made that choice, a few lines of script ran, read a long list of details about your device — screen size, graphics chip, installed fonts, time zone, the way your browser renders a curve — and stitched them into a profile. That’s browser fingerprinting. There’s no file to delete and no setting labelled “off”. The good news is that it’s measurable, and the noisier parts of it can be dialled down.

What a fingerprint actually is

A fingerprint is any set of attributes a site can read about your browser and device that, added together, is specific enough to recognise you again. Each one alone is dull: millions of people run a 1920×1080 screen in Chrome. Combine ten of them and the crowd thins quickly. Your exact GPU, your font list, your time zone, your browser build — each narrows the field a little more.

Crucially, it’s rebuilt on every page load. Nothing is stored on your machine, which is why clearing cookies, switching to private mode and wiping your history don’t change it. The site doesn’t need to remember you. It can simply recognise you.

Fingerprinting isn’t always sinister. Banks and retailers use it to catch fraud, and plenty of sites use it to keep bots out. The problem is that the same technique, pointed at advertising and analytics, lets a company follow you across sites you never agreed to be followed across.

What actually goes into the mix

The list is longer than most people expect:

• Screen and window — resolution, pixel density, colour depth, available desktop space.
• Graphics — how your device draws a canvas image, plus the WebGL renderer string, which often names your exact GPU.
• Fonts — detected by measuring text widths; the odd font you installed for a design job is unusually identifying.
• Hardware and OS — processor cores, device memory, platform, touch support, battery status.
• Software — browser build, codecs, PDF viewer, plugin list.
• Settings — language, time zone, keyboard layout, zoom level, dark mode preference.
• Network — IP address, and details of how your browser opens a connection.
• Behaviour — typing rhythm, mouse movement, scroll speed.

Some of these shift constantly: window size, battery level, whether you’re on a train. A competent fingerprinter ignores the volatile ones and leans on the stable ones. That’s why “just resize your window” fixes nothing.

Check your own fingerprint first

Before you change a single setting, see what you’re currently giving away. A few free tools do this well.

Cover Your Tracks, from the Electronic Frontier Foundation, gives a uniqueness score and an estimate of how many “bits” of identifying information your browser leaks. BrowserLeaks breaks it down page by page — canvas, WebGL, fonts, headers. AmIUnique compares your setup against a database of other visitors. CreepJS is the blunt one: it tries to work out whether you’re already running anti-fingerprinting tools, which is useful in itself.

Run the same test twice — once in your everyday browser, once in a fresh profile or a different browser — and compare. If the first puts you at one in several hundred thousand and the second at one in a few thousand, you’ve just seen how much a default configuration is worth.

Treat the score as a starting point, not a verdict. A rare fingerprint proves nothing on its own. Note which attributes look unusual, then deal with those.

Settings and tools that genuinely reduce it

Choose a browser that standardises

Blocking or randomising one value at a time can make you more distinctive, because an odd mixture of normal and spoofed values is itself rare. The tools that work best make you look like lots of other people.

• Firefox has a hidden setting, privacy.resistFingerprinting in about:config, which reports standard values for screen size, time zone and more. It does break some sites. Total Cookie Protection is worth having regardless.
• Brave randomises certain fingerprint surfaces per session and blocks known fingerprinting scripts in its stricter modes, so you resemble a different ordinary visitor each time.
• Tor Browser aims for the opposite of uniqueness: everyone looks identical. It’s slow and some sites block it, but for anonymity it remains the yardstick.

Blend in rather than stand out

The goal isn’t invisibility, it’s joining a bigger crowd. Keep your browser close to default, keep the window at a common size, and resist an unusual zoom level or an exotic language preference. If your fingerprint has to be rare, rare-because-I-customised is the worst kind.

Block the scripts doing the asking

A content blocker such as uBlock Origin with an up-to-date filter list stops a large share of fingerprinting scripts before they run. Blocking JavaScript by default and allowing it site by site is stronger, and considerably more annoying. For most people, one good blocker plus strict tracking protection is the sensible middle.

Keep extensions few

Every extension adds readable details and changes how pages render. Five privacy add-ons can leave you more distinctive than none. Pick one good blocker rather than six.

Do your life in a second browser

Keep one browser, signed in and convenient, for banking, email and shopping — places where being known is the point. Use a separate browser or profile for reading, searching and anything you’d rather wasn’t joined up with your name.

What doesn’t help as much as people think

Private or incognito mode clears cookies and history when you close the window. It doesn’t touch your fonts, GPU or screen. A VPN hides your IP address and is genuinely useful for that, but the rest of the fingerprint travels with you untouched. The Do Not Track header is widely ignored. Clearing your cache between visits mostly makes you look erratic rather than anonymous.

Be sceptical of anything promising invisibility. The honest aim is a smaller, more common fingerprint — not an absent one.

A practical routine

1. Measure. Run one test in your daily browser and note anything unusual.
2. Simplify. Move to a mainstream browser with strict tracking protection, trimmed extensions and a standard window size.
3. Block. Add a single reputable content blocker and keep its filter lists updated.
4. Separate. Keep a second browser or profile for the sites you log into.
5. Re-check. Test every few months. Browser updates change the picture, usually for the better.

You won’t reach zero, and chasing it will ruin your browsing. But going from one in half a million to one in a few thousand is a real improvement, and it takes an afternoon. Start with the test.

Photo: Pexels / Pixabay