What each signal reveals
No single line above identifies you — plenty of people run Chrome, plenty share your timezone. What identifies you is the combination: stack a dozen ordinary signals and the odds of an exact match drop to near zero. These carry the most weight.
CanvasDraws text off-screen and hashes the pixels. The result depends on your GPU, driver, font rasteriser and anti-aliasing — none of which you can casually change. One of the most stable signals there is.
WebGL vendor / rendererReports your GPU model as a literal string — “Apple M2 Pro”, “NVIDIA GeForce RTX 4070”. Startlingly precise, and hard to fake convincingly.
Timezone & languages🚩 Unremarkable alone — but the loudest red flag when they contradict your IP. A German IP paired with Asia/Shanghai is more suspicious than any single signal on its own.
Screen & viewportCommon resolutions (1920×1080) make you safer; unusual sizes or scaling factors make you stand out in the crowd.
CPU cores & memoryReveals your hardware tier. Cross-referenced with the GPU string, it narrows the field further.
User agentThe one signal that’s genuinely easy to change — which is exactly why it counts for little. Faking it badly is worse than not faking it: claiming Windows while shipping an Apple GPU is itself a marker.
Why changing your IP alone doesn’t work
Not one signal above comes from your IP address. That’s why the hash at the top of this page does not budge when you switch proxies or turn on a VPN — you changed your address, not your machine. This is where real linkage happens: two accounts on completely different IPs, sharing one canvas hash and one GPU string, get joined up anyway.
The converse is equally true: a pristine fingerprint behind a flagged datacenter IP fails just as fast. You need both sides, and they have to agree with each other.
How to make your fingerprint less distinctive
Honest framing first: you cannot remove a fingerprint. A browser that renders pages necessarily reveals how it renders them. What you can do is blend in — the goal isn’t invisibility, it’s being unremarkable.
Use an anti-detect browserTools like Camoufox, Multilogin or AdsPower spoof canvas and WebGL at the rendering layer and keep the whole signal set internally consistent. A user-agent switcher extension cannot do this.
Match timezone and locale to your IPThe cheapest fix and the most commonly skipped one. On a US IP, run a US timezone — don’t leave your real one showing.
One identity, one environmentSharing one browser profile across accounts actively ties them together. Isolate profiles, cookies and fingerprints alike.
Avoid exotic setupsA niche Linux distro with an odd resolution and WebGL disabled is more identifiable than stock Chrome. Conspicuous hiding is itself a signature.
Frequently asked questions
Does incognito mode hide my fingerprint?No. Incognito discards history and cookies; every signal above is identical inside a private window. Open one and load this page — the hash will not change.
Does a VPN or proxy change my fingerprint?No. They change your IP, not your browser. This is precisely why people still get linked — they assume a new IP means a new identity.
Can I be tracked without cookies?Yes — that is the entire point of fingerprinting. Clear every cookie and change your IP, and a sufficiently stable fingerprint still recognises you.
Is this test accurate?It reads the same APIs real sites read, computed entirely in your browser — we store nothing. But commercial anti-fraud systems use more signals than this: audio fingerprinting, font enumeration, behavioural timing. Treat this as a floor, not a ceiling.
My hash changes on every reload — is that normal?It means you’re running an anti-detect browser with randomisation, or a privacy shield. Randomisation does defeat naive matching — though presenting a brand-new identity on every reload is itself a detectable pattern.