FingerprintJS is a source-available, client-side, browser fingerprinting library that queries browser attributes and computes a hashed visitor identifier from them. Unlike cookies and local storage, a fingerprint stays the same in incognito/private mode and even when browser data is purged.
FingerprintJS is available under a BSL license for non-production purposes.
Now, try visiting the same page in private / incognito mode and notice how the visitor identifier remains the same!
Getting Started
<script>// Initialize the agent at application startup.// If you're using an ad blocker or Brave/Firefox, this import will not work.// Please use the NPM package instead: https://t.ly/ORyXkconst fpPromise = import('https://openfpcdn.io/fingerprintjs/v4')
.then(FingerprintJS =>FingerprintJS.load())
// Get the visitor identifier when you need it.
fpPromise
.then(fp => fp.get())
.then(result => {
// This is the visitor identifier:const visitorId = result.visitorIdconsole.log(visitorId)
})
</script>
Since FingerprintJS processes and generates the fingerprints from within the browser itself, the accuracy is limited (40% - 60%). For example, when 2 different users send requests using identical (i.e. same version, same vendor, same platform), browsers, FingerprintJS will not be able to tell these two browsers apart, primarily because the attributes from these browsers will be identical.
Security
Because of how the fingerprints are processed and generated from within the browser itself, they are vulnerable to spoofing and reverse engineering.
99.5% accuracy with Fingerprint Identification
The main difference between FingerprintJS and Fingerprint Identification lies in the number of attributes collected from the browser, how they are processed, and the accuracy in identifying visitors.
Fingerprint Identification is a closed-source, commercial device intelligence platform designed to prevent fraud and improve user experiences. It's an enhanced version of FingerprintJS and has been fully re-designed to solve the most challenging identification use cases. Its source is not available in this or any other public repository.
Unlike FingerprintJS, Fingerprint Identification is able to achieve 99.5% accuracy because it processes the browser attributes on the server and also analyzes vast amounts of auxiliary data (e.g. IP addresses, time of visit patterns, URL changes, etc.). Because of these advanced matching techniques, Fingerprint Identification is able to reliably deduplicate different visitors that have identical devices.
Fingerprint Identification is available for Web, Android, iOS, and other platforms. You can easily get started by signing up for a free, unlimited 14-day trial.
Check out our comparison table for a detailed breakdown of the differences between FingerprintJS and Fingerprint Identification.
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.