Blog
Articles on browser fingerprinting and bot detection from browserscan.in.
What Browser Fingerprinting Actually Measures
What Browser Fingerprinting Actually Measures. A practical look at browser fingerprinting — the signals a site reads from your browser.
Canvas Fingerprinting Explained in Plain Terms
Canvas Fingerprinting Explained in Plain Terms. A practical look at canvas fingerprinting — how rendering differences identify a device.
WebGL Fingerprinting and GPU Identification
WebGL Fingerprinting and GPU Identification. A practical look at WebGL fingerprinting — why your graphics stack is identifying.
How Headless Chrome Gets Detected
How Headless Chrome Gets Detected. A practical look at headless Chrome detection — the tells that separate headless from real.
TLS Fingerprinting: The Signal Below the Browser
TLS Fingerprinting: The Signal Below the Browser. A practical look at TLS fingerprinting — why the handshake reveals the client.
Understanding JA3 and JA4 Fingerprints
Understanding JA3 and JA4 Fingerprints. A practical look at JA3 fingerprint — how TLS hashes classify clients.
Why Your Proxy Does Not Make You Anonymous
Why Your Proxy Does Not Make You Anonymous. A practical look at proxy detection — what leaks even behind a proxy.
Residential vs Datacenter Proxies: How Sites Tell
Residential vs Datacenter Proxies: How Sites Tell. A practical look at residential proxies — the network signals that separate them.
WebRTC Leaks and Your Real IP Address
WebRTC Leaks and Your Real IP Address. A practical look at WebRTC leak — how a local IP escapes the VPN tunnel.
Font Enumeration as an Identifying Signal
Font Enumeration as an Identifying Signal. A practical look at font fingerprinting — why installed fonts narrow you down.
Screen Resolution and Device Pixel Ratio Signals
Screen Resolution and Device Pixel Ratio Signals. A practical look at screen fingerprinting — what display metrics reveal.
Timezone and Locale Mismatches That Flag Automation
Timezone and Locale Mismatches That Flag Automation. A practical look at timezone mismatch — when the clock contradicts the IP.
AudioContext Fingerprinting and How It Works
AudioContext Fingerprinting and How It Works. A practical look at audio fingerprinting — sound processing as an identifier.
Anti-Detect Browsers: What They Fix and What They Miss
Anti-Detect Browsers: What They Fix and What They Miss. A practical look at anti-detect browser — the gaps these tools leave open.
Navigator.webdriver and Other Automation Flags
Navigator.webdriver and Other Automation Flags. A practical look at navigator.webdriver — the properties that announce a bot.
Why Puppeteer Gets Blocked and Playwright Sometimes Does Not
Why Puppeteer Gets Blocked and Playwright Sometimes Does Not. A practical look at Puppeteer detection — differences in automation footprints.
Browser Extensions That Change Your Fingerprint
Browser Extensions That Change Your Fingerprint. A practical look at extension detection — how add-ons alter your signature.
Incognito Mode and What It Does Not Hide
Incognito Mode and What It Does Not Hide. A practical look at incognito mode — the privacy gap most users assume away.
Client Hints Versus the User Agent String
Client Hints Versus the User Agent String. A practical look at client hints — the modern replacement for UA sniffing.
Entropy: Why a Rare Configuration Identifies You
Entropy: Why a Rare Configuration Identifies You. A practical look at fingerprint entropy — how uniqueness is measured.
Cookie-Free Tracking Techniques in Use Today
Cookie-Free Tracking Techniques in Use Today. A practical look at cookieless tracking — identification without stored state.
How CAPTCHA Systems Decide You Are Suspicious
How CAPTCHA Systems Decide You Are Suspicious. A practical look at CAPTCHA scoring — the risk signals behind the challenge.
Rate Limiting Signals and Behavioural Analysis
Rate Limiting Signals and Behavioural Analysis. A practical look at behavioural detection — how timing patterns expose scripts.
Mouse Movement and Interaction Fingerprints
Mouse Movement and Interaction Fingerprints. A practical look at interaction fingerprinting — why human input looks different.
Battery Status and Sensor APIs as Identifiers
Battery Status and Sensor APIs as Identifiers. A practical look at sensor fingerprinting — hardware telemetry leakage.
Why Two Browsers on One Machine Can Look Identical
Why Two Browsers on One Machine Can Look Identical. A practical look at device fingerprint — shared hardware level signals.
Detecting Virtual Machines From the Browser
Detecting Virtual Machines From the Browser. A practical look at VM detection — the artifacts a hypervisor leaves.
Mobile Emulation and Why It Rarely Passes
Mobile Emulation and Why It Rarely Passes. A practical look at mobile emulation — the mismatch between claim and capability.
User Agent Spoofing and Its Consequences
User Agent Spoofing and Its Consequences. A practical look at user agent spoofing — why changing the string is not enough.
HTTP Header Order as a Fingerprint
HTTP Header Order as a Fingerprint. A practical look at header order — the sequence that identifies a client.
Accept-Language Headers and Geographic Inference
Accept-Language Headers and Geographic Inference. A practical look at Accept-Language — what language preferences disclose.
Do Not Track: A Signal That Backfired
Do Not Track: A Signal That Backfired. A practical look at Do Not Track — how an opt-out became identifying.
Privacy Budgets and the Future of Fingerprinting
Privacy Budgets and the Future of Fingerprinting. A practical look at privacy budget — proposals to cap identification.
How Ad Fraud Detection Uses Fingerprints
How Ad Fraud Detection Uses Fingerprints. A practical look at ad fraud detection — identifying invalid traffic.
Account Takeover Prevention Through Device Recognition
Account Takeover Prevention Through Device Recognition. A practical look at device recognition — fingerprints as a security layer.
Why Banks Fingerprint Your Browser at Login
Why Banks Fingerprint Your Browser at Login. A practical look at fraud prevention — risk scoring during authentication.
Bot Traffic Categories: Good, Bad and Grey
Bot Traffic Categories: Good, Bad and Grey. A practical look at bot traffic — classifying non-human visitors.
Googlebot Verification Done Correctly
Googlebot Verification Done Correctly. A practical look at Googlebot verification — confirming a crawler is genuine.
Scraping Detection Without Blocking Real Users
Scraping Detection Without Blocking Real Users. A practical look at scraping detection — balancing security and access.
The Cost of False Positives in Bot Detection
The Cost of False Positives in Bot Detection. A practical look at false positives — when real users get blocked.
Fingerprint Stability Over Time
Fingerprint Stability Over Time. A practical look at fingerprint stability — why signatures drift.
Browser Updates and Fingerprint Churn
Browser Updates and Fingerprint Churn. A practical look at browser updates — how versions reshape signals.
Private Relay, VPNs and Detection Accuracy
Private Relay, VPNs and Detection Accuracy. A practical look at private relay — network obfuscation and its limits.
GDPR, Consent and Fingerprinting Legality
GDPR, Consent and Fingerprinting Legality. A practical look at GDPR fingerprinting — the regulatory position.
Testing Your Own Fingerprint: A Practical Method
Testing Your Own Fingerprint: A Practical Method. A practical look at fingerprint test — how to audit your exposure.
Reducing Your Fingerprint Without Breaking Sites
Reducing Your Fingerprint Without Breaking Sites. A practical look at fingerprint reduction — practical hardening steps.
Tor Browser and Uniform Fingerprints
Tor Browser and Uniform Fingerprints. A practical look at Tor Browser — the anonymity-set strategy.
Why Blocking JavaScript Is Not a Complete Answer
Why Blocking JavaScript Is Not a Complete Answer. A practical look at JavaScript blocking — passive signals that survive.
Server-Side Versus Client-Side Detection
Server-Side Versus Client-Side Detection. A practical look at server-side detection — where checks actually run.
Building a Detection Strategy That Ages Well
Building a Detection Strategy That Ages Well. A practical look at detection strategy — designing for a moving target.