Font Fingerprinting
Font fingerprinting is a technique that determines which fonts are installed or available on a device and how they render, using the resulting list and metrics as an identifying signal. The particular set of fonts on a system reflects its operating system, installed software, and user customizations, which together make the font profile distinctive.
How Font Fingerprinting works
One common method measures the dimensions of text rendered in a requested font against known fallback fonts. If the browser substitutes a fallback, the measured width and height differ, revealing whether the requested font is present. Iterating over a large list of candidate fonts builds up an inventory of what is installed.
Newer approaches use font-related APIs or canvas text rendering to observe not just presence but exact glyph metrics and rasterization, which vary by font version and rendering engine. The combination of available fonts and their rendered appearance yields a richer signal than a simple installed-or-not list.
The font set is fairly stable but can change when users install applications, design tools, or language packs that bundle fonts. Because operating systems ship characteristic default fonts, the profile also helps infer the platform, adding corroborating context.
Why Font Fingerprinting matters for fraud prevention
Font fingerprinting contributes meaningful entropy and helps distinguish devices that share the same browser and operating system but differ in installed software. In fraud detection it can reveal inconsistencies, such as a device claiming to be one platform while exposing fonts characteristic of another, which is a hallmark of spoofing. It also strengthens cookieless recognition by adding a dimension that is hard to fake wholesale.
How TRACIO handles it
TRACIO treats the available-font profile as one of its 130+ signals, using it both for distinctiveness and as a consistency check against the claimed platform. Because font lists shift as users install software, TRACIO relies on tolerant matching so that adding a font does not break recognition of a returning device. The signal feeds the broader confidence assessment rather than standing alone.
Explore further
Frequently asked questions
Identify every device with confidence
Start with a free plan of 2,500 API calls per month. No credit card required.