이 페이지는 아직 사용하시는 언어로 제공되지 않습니다. 영어 원문을 읽고 계십니다.
Glossary
Canvas fingerprint
A canvas fingerprint is an identifier a site builds from how your machine draws a picture.
How a site takes it
A canvas is created off screen and never shown. Text and shapes are drawn on it, most often a short string in a named font.
- 1
Draws off screen
Nothing appears on the page and there is no permission prompt.
- 2
Reads the pixels back
The image comes back as text or as raw bytes.
- 3
Collapses it to one value
That short value is the fingerprint, and on an untouched machine it is the same on every visit.
Your canvas right now
These values are read in your browser on this page. The hash is what a site would store about this machine.
지금 이 순간의 기기
- Canvas hash
- 사용 중인 기기에서 측정하는 중
- Graphics renderer
- 사용 중인 기기에서 측정하는 중
- Platform
- 사용 중인 기기에서 측정하는 중
- Device pixel ratio
- 사용 중인 기기에서 측정하는 중
브라우저에서 읽어 여기에 표시합니다. 어디에도 전송하지 않습니다.
Why noise is not protection
Almost every tool in this category adds random noise to the canvas. The question is not whether noise is added but whether it behaves like a machine.
Three ways it fails. All three were measured on our own engine before we closed them, and the numbers are in the check block below.
One pixel reads two ways
Noise tied to the position in the returned buffer makes the same strip disagree with itself. A real machine disagrees on nothing.
5 bytesTransparent pixels come back coloured
Colour under full transparency means nothing, and no real driver produces it.
6 pixelsThe mask can be subtracted
If the offsets never change, a site learns them from a solid fill and removes them anywhere. The defence becomes the mark.
7 of 7
What our engine does
The noise comes from the profile seed, so one profile is stable to itself and two profiles are unrelated. It is applied where the pixels are made, not where they are handed back.
Two runs of the same self-test: the build before the fingerprint patches, and the build shipping today.
| Measurement | Before, 25 Aug 2026 | Shipping, 2 Sep 2026 |
|---|---|---|
| Same pixel through two rectangles | 2 bytes differ | 0 bytes differ |
| Transparent pixels with colour | 15 | 0 |
| Mask transfers from a solid fill | 1 of 97 | 0 of 103 |
Often confused with
WebGL fingerprint
The picture is drawn by the graphics card, not by the 2D canvas. Different surface, different values, separate defence.
Cookies
A cookie is stored on your machine and can be deleted. A canvas fingerprint is computed on demand and there is nothing to delete.
User agent
The browser reports it, so it can be set to anything. The canvas is produced by hardware and drivers, so it has to agree with the rest.
How to check your own
The self-test lives in the app, not on this website. Open a profile, open the fingerprint self-test, and the four canvas rows are the ones named below.
It runs in the profile you are looking at, against the engine you launched. A third party checker in a frame on a marketing page tells you about that page.
What this does not do
- It does not make you anonymous. Behaviour, address reputation and account history are separate problems, and they close more accounts than fingerprints do.
- It does not give each site a different canvas. The seed belongs to the profile, and a value that changes between two tabs of one session is itself a signal.
- It does not block canvas. A blank image in reply is rarer than any fingerprint and marks the browser at once.
- It does not undo a link that already exists. Two accounts opened from one profile stay linked whatever the canvas does afterwards.
Check it
Every number above comes from a file you can open.
- The four canvas checks the self-test runs
- apps/desktop/src/lib/fpAudit.js
- The before and after numbers
- docs/замеры/приёмка-до-заплат-25-08.log · docs/замеры/приёмка-windows-02-09.log
- A build is not accepted until these hold
- engine/scripts/engine-invariants.js · engine/scripts/accept-engine.js
- The checks run in a real browser
- apps/desktop/test/fp-audit.js · apps/desktop/test/audit-on-builtin.js
Questions
- Can I just turn canvas off?
- You can, and it makes you easier to spot. A browser that refuses to draw is rarer than any particular fingerprint, so refusing becomes the identifying trait.
- Does a VPN change my canvas fingerprint?
- No. A VPN changes the address your traffic comes from. The canvas is produced on your machine and does not travel through the network at all.
- Is a canvas fingerprint unique to me?
- On its own, rarely. It is a strong signal because it combines with a dozen others, and the combination is what identifies a machine.
- Does incognito mode help?
- No. Incognito clears storage when you close the window. The canvas is computed fresh each time and comes out the same.
- How do I see mine?
- The panel above shows it for the browser you are reading this in. For a profile, the fingerprint self-test inside the app shows all 29 measurements.
See what your own profile answers
The self-test runs inside a profile and shows all 29 measurements, green and red alike.