Fingerprint.com tracks Mullvad browser across sessions

General
1

Long user of Mullvad browser and Mullvad VPN here.

I regularly check out fingerprint.com (which is one of the most advanced fingerprinting sites available) to find out whether it’s able to track me.

According to what I remember, fingerprint.com wasn’t able to track me when I changed my IP address (using Mullvad VPN). But today, the visitor ID persisted even after multiple IP changes and browser restarts.

This is how I test: visit fingerprint.com and check my ID → close Mullvad browser entirely, change my IP through a VPN → visit fingerprint.com and recheck my ID. I try to keep everything else identical(including the window size).

I have zero additional extensions installed on MB, and also didn’t change any settings other than basic preferences.

My PC environment is Windows 10 Enterprise LTSC 2021 x86_64 (clean installed it and updated everything today), Mullvad browser version 15.0.19, Mullvad VPN version 2026.3. I also blocked any other outbound traffics through firewall apps, so no telemetry is sent.

2

You should consider testing this over the span of a few days and you should get different results

1 Like
3

I just tested it for the first time under the same conditions as you, and I noticed that I already had several retroactive hits in my history, even though, as I mentioned, this was my first time testing this site. My conclusion: Everything’s fine. Don’t worry.

Of course, if you’ve registered and log in every time before the scan, it goes without saying that your fingerprint will be recognized 100% of the time.

4

Default settings, MacOS, Random mode turned on in the extension.

First session before pressing reset your identity:

{
"event_id": "1786010260486.4BbfXf",
"sealed_result": null,
"visitor_id": "0uit4O0zsDZvA1scdMcK",
"suspect_score": 35
}

Pressed “reset your identity button”, 5 minutes later opened fingerprint:

{
"event_id": "1786010724587.iCunMf",
"sealed_result": null,
"visitor_id": "l75FLmQgK6P06PtekYli",
"suspect_score": 31
}

5

That was what I’ve experienced when using Tor browser (and MB too up until today). It’s kinda frustrating to see my anti-fingerprinting defeated.

BTW, what do you mean register and log in? fingerprint.com is totally usable without logging in, and I obviously use the site without any accounts.

Or can my fingerprint be more unique due to using firewalls (in my case, it’s fort firewall) though I highly doubt..?

6

Thanks. But does the site still keep track of records for that long? Also, if it’s truly anti-fingerprintable, shouldn’t it work regardless of time elapsed?

7

I think fingerprint.com has a lot of heuristics so, no.

8

thx. Just tried it again with changing my IP, and it does seem to change the visitor ID. maybe time really does matter lol..

9

You are forgetting that this is a marketing display and it probably guesses that you are the same visitor in such a short time span, even if someone else would have fit your specific fingerprint.

1 Like
10

Yes i tried it again after some time left and also got a new visitor ID. As any1 said this site is working with guesses and it is all marketing. The site employs a number of sophisticated methods to track its users, but these can be completely defeated by using a VPN in combination with a secure browser such as Mullvad Browser or, indeed, the Tor Browser itself.

11

Everything works for me. Just one IP change and a browser restart changes the ID.

For example? What settings were you changing?