Esta página ainda não está no seu idioma. Está a ler o texto em inglês.
Academy
Checking your own setup
Lição 10 de 14
What a check reads
A check asks your browser questions and prints the answers. Every row belongs to your machine rather than to the page asking.
None of it is a decision. A platform decides from the same answers plus what it knows about your other accounts, and publishes neither.
The values
Screen, graphics card, fonts, clock, languages, and the drawings your machine makes.
What goes out unasked
The addresses the browser hands to any site by itself, with nothing asked of it.
The exit
The address a site sees, which is the proxy's only while the proxy carries traffic.
Not your other profiles
One page sees one browser, and the linking signal lives between two of them.
A score is its own recipe
An outside checker weighs its rows the way its author chose and prints a number. Another checker on the same browser prints a different one.
So the number describes the checker. The rows underneath describe your machine, and only those are worth reading twice.
The order to check in
Each step answers something the one before it cannot. Run all of them inside the profile you are checking.
Read the values
Open the free check in the profile and start with the rows marked as telling you apart.
Ask about leaks
The leak test shows which addresses the browser gives out itself, and a proxy has no say there.
Compare your own profiles
Take the short code the check prints in each profile and count the repeats.
Then an outside checker
The profile start page keeps links to the ones this trade uses, opened through the profile's own proxy.
Contradictions inside one set
A single odd value rarely gets an account looked at. A pair of values that cannot both be true does.
This is what a check is good at: it holds one set of answers next to itself and shows where the set argues.
| What disagrees | How it reads | What it usually means |
|---|---|---|
| Address and clock | A German exit next to an American time zone | The clock came from your computer, not the exit |
| Address and language | An Italian exit next to an English only list | The language list was never pinned to the country |
| Page and background thread | The page names one machine and a worker another | The substitution reaches only the top document |
| Promise and window | A phone screen next to a desktop window | The window never took the size the profile claims |
| Exit and your own address | The exit address equals the one you have at home | The proxy is not carrying this profile's traffic |
The most telling rows
Most rows repeat what any page could show you. A few are what actually separates one browser from the next, and a good check marks those.
They are the picture and the tone your machine produces, the pixels the card returns, the fonts, the screen, the clock and the languages.
A card's name is easy to change and the pixels behind it are not, which is why the two sit in separate rows.
The self-test inside the app
The app runs an audit of its own, and it does what no outside page can: it knows what the profile promised, so it can name the value that disagrees.
A desktop profile of the current generation runs 29 checks in a throwaway copy carrying the same seed, and your open session is left alone.
The values
Platform, the system it reports, screen, cores, memory, graphics renderer, clock and the languages.
The hiding
A patched function that no longer reads as native code proves tampering more plainly than a mismatch.
Frames and threads
A hidden frame and a background thread have to answer the same cores and system as the document.
The drawings
Two reads agree, transparent pixels stay transparent, and the noise resists subtraction.
A red row without a fault
Some rows read red on a perfectly correct profile, and knowing which ones saves you from repairing what works.
The canonical zone name
A Kyiv clock answers as Europe/Kiev and a Kolkata one as Asia/Calcutta, as an ordinary Chrome does.
The capped memory
Chrome reports memory only up to a ceiling of its own, whatever the machine holds.
A phone's fonts on a computer
The fonts a phone profile claims live on Android and almost nowhere else.
Silence instead of a verdict
A check that cannot measure says so rather than printing a reassuring line. An invented pass is worse than no answer, because you act on it.
So the start page gives no verdict on the proxy while your own address is unknown, and the self-test declines to run when it cannot prepare its throwaway copy.
What this lesson does not claim
- It does not claim that a clean check means a safe account. A platform reads the same answers plus your history with it.
- The check on this site cannot compare your real address with your proxy's exit. That needs a server, and a privacy tool collecting visitors' addresses would be the thing you came to avoid.
- Nothing here measures behaviour, content or account age. Those are read by every platform and by no browser check.
- Not every row is expected to be green. On the shipped engine one graphics read still returns bytes that go around the canvas noise, and the self-test shows that row red.
- It does not tell you what a given platform accepts. Their thresholds are unpublished and they move.
Where you can see this yourself
Every claim here is one place in the code and one stand you can run.
- The free check reads 12 values and makes no network call
- apps/web/components/tools/FingerprintCheck.tsx · apps/web/test/инструмент-отпечатка.js
- The self-test's 29 checks really run in a browser, not read as text
- apps/desktop/src/lib/fpAudit.js · apps/desktop/test/audit-on-builtin.js
- The leak test asks your browser for the addresses it gives out on its own
- apps/web/components/tools/LeakCheck.tsx · apps/web/test/тест-утечки.js
- The exit country decides the clock and the language, over several providers
- apps/desktop/src/lib/exitGeo.js · apps/desktop/test/exit-geo.js
Questions
- A checker gave me a low score. Is my profile broken?
- Not by that number alone. Open the rows and look for two values that cannot both be true.
- Two checkers disagree about my time zone. Which is right?
- Often both. A Kyiv clock answers under its older canonical name, and an ordinary Chrome answers the same way.
- Does the check on this site keep my values?
- It makes no network call and writes nothing into your browser. What you see is measured in the page.
- Can a check tell me whether my accounts are linked?
- No. It sees one browser at one moment, and linking is about what two of your profiles have in common.
- Why is the app's self-test worth more than an outside page?
- Because it knows what the profile promised and can point at the value that disagrees. An outside page has nothing to compare with.
Next to this
What this browser answers
The check reads 12 values here in the page and sends nothing anywhere.