A website can recognize you and follow you around even after you block every cookie and switch to private mode. No login, no tracking file, nothing saved. You open a fresh tab, load one page, and within a split second the site can tell it's the same device it saw last week.
This trick is called browser fingerprinting (a way to build a near-unique profile of you from your device's little quirks). Cookies got all the headlines and the annoying consent popups. Fingerprinting just kept getting better in the background, quietly. Honestly, it's the bigger privacy story.
What gets fingerprinted
A fingerprint isn't one piece of data. It's dozens of tiny ones that, stacked together, point at exactly one browser on exactly one device. Each clue is boring by itself.
Screen size 1920x1080. Timezone set to Chicago. Chrome 142 running on Linux. A specific list of installed fonts. Yawn, right?
None of that matters alone. But combine 15 to 30 of those clues and the EFF's Cover Your Tracks project keeps finding that roughly 80 to 90 percent of browsers are one of a kind. Companies like FingerprintJS sell this exact capability to fraud teams, because the fingerprint sticks better than any cookie. A person can wipe cookies, reinstall the browser, hop on a VPN, and the fingerprint still matches.
The really sneaky tricks
The indirect clues are where it gets weird. Canvas fingerprinting (a trick that makes your browser draw a hidden image whose tiny differences identify you) is the classic one. The site asks the browser to draw an invisible picture, then turns the result into a short code. Small differences in your graphics chip, drivers, and fonts make that picture render a little differently, so the code is basically unique to your machine.
Audio fingerprinting pulls the same stunt with sound. The page generates a tone you never hear, measures exactly how your device processed it, and turns that into a code. WebGL fingerprinting does it with 3D graphics (WebGL is the browser feature that draws 3D images).
Then there's the genuinely strange stuff. Battery level. Phone motion sensors. Even how long your processor takes to crunch certain math.
Researchers keep digging up new fingerprinting tricks faster than browsers can plug the old ones. This has been going on for over a decade now.
Why most privacy tools don't help
Cookie blockers were built to fight cookies. Ad blockers block known ad domains. Neither one stops a site you actually want to use from running fingerprinting code inside its own page. uBlock Origin can block some known fingerprinting libraries, but that catches maybe half of the obvious ones and none of the homemade stuff.
VPNs help even less. A VPN swaps your IP address. It doesn't change your fonts, timezone, screen size, or audio quirk. So a site that fingerprints you over a VPN gets the same fingerprint it would get on your real connection; it just sees a different IP next to the same person.
And private mode? Mostly for show here. It clears cookies and history when you close the window, sure. But the fingerprint is identical. Visit a site in incognito, and a site you hit last week recognizes the same browser right away.
What actually works
The strongest defense in 2026 is Tor Browser, and it works by making every Tor user look the same. Same fonts, same screen size (Tor adds black bars around the page so everyone reports one size), same canvas output. The catch? Pages run slower and some things look a little broken. For everyday browsing, that's a lot to give up.
For a more livable option, Brave turns on fingerprint defense by default. Instead of hiding your quirks, it scrambles them, adding tiny random noise to the most-fingerprinted features like canvas, audio, and WebGL on every session. The fingerprint shifts around instead of staying put. Note that Brave dropped its older Strict mode back in 2024, so the default protection is what you get now.
Firefox has its own switch called resistFingerprinting. Worth clearing up a common myth: it isn't new. Actually, Mozilla added it way back in Firefox 41 in 2015, pulled straight from the Tor Browser project. You flip it on manually in a hidden settings page, and most of the time you barely notice it's running.
Want Tor-grade protection without the slow connection? Mullvad Browser. It's a Tor-based build that skips the Tor network entirely, so you get the same hardened, look-like-everyone-else fingerprint at normal speed.
The honest answer
You can't fully escape fingerprinting on today's web. Frankly, the tools to track you exist because the fingerprint is more reliable than any cookie a site could set. If your worry is ad networks and data brokers, a fingerprint-resistant browser cuts your trackability way down. If you're up against a determined, well-funded adversary, none of this is enough. That's just the honest take.
