pwnsycybersecurity + privacy community
Read in this tab

Browser Fingerprint Test

This browser fingerprint test reads up to 19 signals any website can collect from your browser without a cookie, scores how identifying they are together, and checks your clock and language against your VPN exit.

This tool sends none of the signals it measures. Only your exit address is fetched from the pwnsy VPN API, and nothing measured here is sent to it.

Reading this browser

Canvas, audio, GPU, fonts and the rest are read here, in this tab.

Identifiability score
Strong signals
Combined hash
Exit address

Every signal read

Tap a row for why it identifies you and the points it scored.

SignalValueRarityPoints

How the browser fingerprint test works

The page runs the same reads a tracking script would, in this tab, and lists the answers. It draws a hidden canvas and renders a short audio clip offline, each twice, and hashes the result. It reads the GPU name and WebGL limits, checks which of 72 common fonts are installed by measuring text width, and reads the screen size, display and accessibility preferences, timezone, languages, regional formats, CPU threads, memory, touch points, platform, high-entropy client hints, user agent, connection estimate, installed speech voices, the count of cameras and microphones, Do Not Track and Global Privacy Control, storage settings and a few floating-point results from the JavaScript engine.

It then asks the pwnsy VPN API for your exit address, the one value a tunnel changes, and compares your clock and language regions with the exit's timezone and country.

How to read the result

  • Points per signal: strong 3, moderate 2, weak 1. A blocked signal scores 2, since a missing API is rarer than a common answer. A signal randomised per read (two reads differ) scores 0, because it cannot link two visits.
  • Identifiability score is the sum, shown against 3 points for every signal read. 70% or more reads red, 45% or more amber, below that green.
  • Strong, moderate and weak are our judgement of how identifying each signal usually is. They are not measured against a population of visitors: that would mean storing everyone's fingerprint, which this page does not do.
  • Combined hash covers every signal that read cleanly (state ok), leaving out the connection estimate and any signal that was blocked or randomised. Same as last visit compares it with the copy kept in this browser's localStorage only, which shows what a site can do with no cookie at all.
  • Agrees or mismatch under the tiles compares your clock and language regions with the exit. A mismatch is something a site can see while you use a VPN.

A VPN changes only the exit address. Tor Browser makes every user look alike, which works best. Firefox resistFingerprinting does some of the same, and Brave randomises canvas and audio per site and session. Blocking one signal often makes you rarer.

Browser fingerprint FAQ

Does a VPN hide my browser fingerprint?

No. A VPN changes only the exit address. Canvas, audio, GPU, fonts, screen, timezone and language are read from your device, so they stay the same with the tunnel on or off.

Is my fingerprint sent to pwnsy?

No. Every signal is read in this tab. The page asks the pwnsy VPN API for your exit address only, and sends it nothing measured here. The combined hash is kept in this browser's localStorage so your next visit can compare against it.

Why does a randomised signal score zero?

The page reads the canvas and audio hashes twice. When the two reads differ, the browser is adding noise, so that value cannot link two visits and scores 0 points.

Why does a blocked signal still score 2 points?

A missing API is rarer than a common answer, so blocking one signal can make a browser stand out more.

What actually reduces a browser fingerprint?

Tor Browser makes every user look alike, which works best. Firefox resistFingerprinting does some of the same, and Brave randomises canvas and audio per site and session.

Every value is read by this page in your browser. Only the exit address comes from the pwnsy VPN API, and nothing measured here is sent to it.

Report copied