Skip to main content

Your digital fingerprint is tracked everywhere online. Brave wants to change that

Westend61/Getty Images

We have more tools to secure our identity online than ever before. You can ban cookies — the little pieces of information websites deposit in our browsers to identify us — block invasive trackers from tailing our machines, switch to incognito mode, opt out of cross-app tracking with Apple’s latest iOS update, or even go as far as to surf the web only through highly encrypted virtual private networks.

But there’s a tracking method that can still slip past these defenses and it’s growing in popularity: Fingerprinting.

The anatomy of a fingerprint

What makes fingerprinting so elusive and difficult to defend against is the fact that the data it exploits is essential to the web’s foundational functions.

Apps and websites look to collect all sorts of information from us (GPS coordinates, our personal details, etc.) that we pay attention to and usually have the option to keep to ourselves. But a cursory review of just about any tech company’s privacy policy will tell you that they also gather a range of other miscellaneous data that you don’t pay attention to and that you can’t easily stop them from tracking — such as what software your device runs on and to which network operator you subscribe.

“Fingerprinting is a threat to user privacy because it enables a nontransparent way for companies to track and identify users and devices.”

There’s a legitimate reason behind why companies need this data and why they can get it without even asking for your explicit permission. You see, all of us web users access the internet from a wide variety of different means, and in order to ensure that a website or app loads as intended for every user, no matter what browser or app or phone or computer they’re using, these sites need to know certain details about your method of access. But this seemingly innocuous data collection is also what powers fingerprinting.

Trackers stitch together your device’s properties like its display size, its operating system, your language preferences, and more to form your unique fingerprint. They match this pattern across sites and apps to identify you and target you with relevant ads.

Once a website captures your fingerprint, it’s possible for it to track you for up to 100 days — no matter how many safeguards you’ve put up on your browser.

Since all this takes place quietly in the background as you surf the internet, you can’t trace fingerprinting, nor is it possible for you to delete your fingerprints — like how you can in the case of third-party cookies. As your device’s fingerprint will always remain the same, this tracking method also can’t be limited through typical boundaries such as switching to a private window or clearing your browser’s cache.

“Fingerprinting is a threat to user privacy because it enables a nontransparent way for companies to track and identify users and devices,” says Patrick Jackson, the chief technology officer of Disconnect, a privacy app for iOS and Mac.

Finding a fix

There’s currently no great way to stop fingerprinting, but internet companies have started addressing the threat and looking for potential ways to deal with it. The Chromium-based browser Brave takes the most compelling shot at thwarting malicious fingerprinting that we’ve seen so far.

Brave’s solution is simple: Whenever a website requests the kind of data that could potentially enable fingerprinting, the browser obliges — but it also mixes in just enough noise or random information that it doesn’t end up crippling your web experience. This allows you to have a unique fingerprint for every session and every webpage. Therefore, trackers can no longer capture one single fingerprint of yours and match it across websites to follow you because your device will signal a different fingerprint every time.

Image used with permission by copyright holder

In our tests, Brave was the only mainstream browser that passed the Electronic Frontier Foundation’s Cover Your Tracks test, which determines how effectively your browser can protect against practices like fingerprinting.

Other browsers including Safari, Google Chrome, and Mozilla Firefox have had limited success with their existing anti-fingerprinting mechanisms. Unlike Brave, which takes a more dynamic approach to tackle fingerprinting, these apps have a one-size-fits-all implementation that attempts to limit how much information your device’s data websites can access and relies on a list of known fingerprinting domains to block them.

Hitting a moving target

The reason these outdated efforts are no longer effective is that fingerprinting is a broad, evolving concept. It’s a practice that has gotten increasingly more complex with the internet’s advancements and that becomes more sophisticated every year.

Some trackers, for instance, force your browser to draw on an invisible canvas on a web page. When your computer does that, it releases information like its screen’s resolution. Similarly, trackers can determine your fingerprint by how your device processes acoustic signals when it plays an audio file online.

Benoit Baudry, a software technology professor at the KTH Royal Institute of Technology, Stockholm, believes it’s hard to mitigate fingerprinting “since its boundaries are fuzzy and keep changing.”

“A cookie has one single, specific purpose: To identify a user,” Baudry adds. “Meanwhile, browser fingerprinting ‘repurposes’ technology that is meant for something else. This is why it is much more difficult to grasp than cookies: there is not one specific script, object, or packet to intercept.”

In addition to capitalizing on essential web data, the other aspect that prevents browser makers from outright banning fingerprinting is because it’s also employed for positive purposes like fraud detection. When websites detect a user is attempting to sign in from a new fingerprint (which essentially means a new machine), they request additional data for authentication to make sure the source isn’t malicious.

However, experts like Zubair Shafiq, an associate computer science professor at the University of California, Davis, argue fingerprinting is “overkill for fraud detection use cases.”.

Several companies are, at the moment, working toward this exact goal — including Google, which is actively researching ways to curb fingerprinting.

Fingerprinting has largely flown under the radar so far since advertisers and tracking firms have had reliable and direct channels to profile users. Now, as the web’s biggest gatekeepers, including Google and Apple, crack down on traditional tracking frameworks like cookies, fingerprinting has been pushed into the spotlight and, if its adoption goes widespread, it might end up being the most significant threat to our privacy ever. And that’s where it seems to be headed.

The presence of fingerprinting trackers has doubled in websites since 2014 and Disconnect’s Jackson also mentions that in anticipation of cookie and Apple’s cross-app tracking ban, companies are “collecting vast amounts of device data to either compute (and collect) a fingerprint on the device or doing the computation on their servers with the raw data.”

Pierre Laperdrix, a researcher at the French National Centre for Scientific Research who’s been studying fingerprinting for over a decade, believes it will always remain a whack-a-mole game for internet companies. All they can do is stay a step ahead of trackers.

“In my opinion,” Laperdrix said, “I don’t think we can completely put an end to fingerprinting without a reengineering of the way browsers and servers work.”

Editors' Recommendations

Shubham Agarwal
Shubham Agarwal is a freelance technology journalist from Ahmedabad, India. His work has previously appeared in Firstpost…
Quest Pro 2: What we know about Meta’s next premium VR headset
From a side view, you can see how glasses can be worn along with a Quest Pro.

While Meta’s Quest Pro is one of the best VR headsets available, it never reached its full potential as a laptop replacement for spatial computing. Meta hasn’t given up on making a work-centric solution, and rumors suggest a Meta Quest Pro 2 is still in development. Here’s what we know so far about Meta's answer to Apple's Vision Pro.
Meta Quest Pro 2 release date speculation
It’s difficult to make a solid prediction on when Meta will launch the Quest Pro 2. Meta CTO Andrew “Boz” Bosworth made it clear in an Instagram AMA that Meta is continually prototyping new VR headsets to find out what’s possible with current technology. That gives Meta more flexibility than manufacturers that research for years before doing hardware testing.

If Meta is satisfied with the performance of the Snapdragon XR2+ Gen 2 and LG can deliver enough micro-OLED displays, the Quest Pro 2 could arrive as early as this October at Meta Connect 2024.

Read more
Does RAM speed matter for PC performance?
Installing RAM sticks in a motherboard.

RAM is one of the primary components in a PC, and it's important that you have at least a certain amount of RAM depending on what you want to do with your PC. However, there are more things to RAM than just capacity: Frequency and latency are important considerations, too.

The question of whether RAM speed matters is especially important now that we have two generations of RAM available, both DDR4 and DDR5 -- and they have vastly different speeds. The official maximum clock speed for DDR4 was 3200MHz, while DDR5 starts at 4800MHz, an increase of 50%; however, you'll easily find RAM kits reaching above 7000MHz. Although latency significantly went up, from CL14 on most 3200MHz DDR4 kits to CL40 on most 4800MHz DDR5 kits, DDR5 is still found to be faster.

Read more
The 6 best 2-in-1 laptops for drawing in 2024
Portal RTX running on the Surface Laptop Studio 2.

Whether you're a seasoned professional or enjoy drawing as a hobby, investing in a 2-in-1 laptop is a great idea for all sorts of artists. Drawing on a laptop makes it easy to quickly share your creation with others, which is especially useful if you're doing it as a professional–negating the need to upload your pen-and-paper sketch to the computer before sending it to a client. Moreover, working on a laptop lets you undo mistakes, zoom in to better handle small details, and quickly change utensils.

There are a lot of perks to drawing on a 2-in-1 laptop, but not all of them are great for creators. Some have unresponsive displays that can't register all your movements, while others might have a lackluster resolution or color spectrum that turns most images into a muddled mess. Because of that, it can be hard figuring out which laptop is best for your needs. And if you'll be spending a good chunk of change on the laptop, you'll want to make sure you get it right.

Read more