Skip to content
CreatorPrivacyKit

Canvas fingerprinting reads pixels, not your name

Canvas fingerprinting is a page reading back how this device paints text and shapes. GPUs, drivers, operating systems, and fonts change those pixels. The hash is not your name.

Updated 23 September 2026

What is canvas fingerprinting?

Browsers paint the same instructions slightly differently across GPUs, drivers, operating systems, and fonts. A page can read those pixels back. That is canvas fingerprinting. Many machines can share a result. The hash does not prove you are the only person with that drawing.

Last updated

How to check it

Open the canvas fingerprinting test, let it draw, then draw a second time. Compare the two hashes in the tab. Nothing is uploaded.

The drawing is on the canvas test. A stable hash is not proof the value identifies only you.

What the page draws

A typical probe paints text, a shape, a gradient, and a composite, then calls toDataURL or getImageData.

The drawing is on the canvas test. Two draws show whether the result stayed put.

Stable is not the same as unique

Many machines can share a result. One machine can change after a driver update. The hash does not prove you are the only person with that drawing.

Risk here is about whether the result stays put and can be combined with other surfaces.

What changes the result

A browser that blocks readback, adds noise, or returns a fixed image will not hand over the same hash.

Private mode usually does not repaint the GPU. Incognito is the wrong lever for this.

Common questions

How do I check canvas fingerprinting?
Open the canvas fingerprinting test and read the hash after the page draws. A second draw shows whether it stayed put. The hash stays in the tab.
Do you upload the picture?
No. Pixels and the hash stay in the page.
If the canvas is blank, am I safe?
Blank means this browser did not return a usable image. It is not a certificate that the rest of the browser is unrecognizable.