Fingerprinting · 6 min read

Mobile Browsers Are Easier to Fingerprint Than You Think

2 Aug 2026 By Michelle Johnson

Phones leak device model, screen metrics, touch support and more. Here is why mobile browsers are often more identifiable than desktop ones, and what helps.

On this page
  1. A crowd is not the same as cover
  2. Client hints ask for the model out loud
  3. The screen narrows the crowd
  4. What each signal costs you
  5. Autofill, keyboards and the app around the browser
  6. What actually helps on a phone
  7. What you cannot change
  8. A short checklist before you change anything

You are in a queue, reading an article on your phone. You tapped the link inside a messaging app, so it opened in a web view that belongs to that app rather than to the browser you chose. The page knows it is on a phone. It knows which one. It has not asked for anything, and you have not noticed it deciding.

That is the part most people miss. Desktop users worry about fingerprinting because they have read that exotic setups stand out. Mobile users often assume the opposite: that a phone is one of millions of near-identical devices, and therefore hard to single out. The first half of that assumption is true. The second does not follow, and in several ways mobile browsing is the more exposing of the two.

A crowd is not the same as cover

The intuition fails because fingerprints do not work by hardware alone. They work by combination, and phones add categories that desktops do not have.

  • Device model. Client hints let a site request the exact device model, not merely a broad category. An enormous number of phones still resolve to a long tail of specific handsets.
  • Screen metrics. Physical screen size, viewport size and device pixel ratio vary widely across phones, and each combination narrows the crowd.
  • Touch and sensors. The number of simultaneous touch points, the presence of an accelerometer or gyroscope, and which sensors are available are all readable. Check your own with the touch support test.
  • Fewer users per configuration. There are far more distinct Android configurations than distinct desktop ones, so the same amount of detail isolates you from a smaller group.

None of those categories is remarkable on its own. Holding a common screen size, carrying the sensors almost every phone carries, owning a popular handset — each is shared by a great many people. But where the number of configurations is large, the product of several ordinary values lands on a much smaller group than it would on a desktop.

Client hints ask for the model out loud

On desktop, the user agent string is often deliberately vague about hardware. On mobile, the Client Hints mechanism lets a site ask for high-entropy details directly: the platform version, the device model, the full browser build. The browser may show a permission prompt, but many sites request these values and many people allow them without reading closely.

The result is that a site does not have to infer your phone model from indirect signals. It can be told, in plain terms, if it asks the right way. Our fingerprint test shows which of these values your browser will volunteer.

The screen narrows the crowd

A desktop monitor comes in a handful of common sizes, and many people run a maximised window at one of two or three resolutions. Phones do not work that way. Physical dimensions, the viewport left after browser chrome, the pixel ratio and the orientation at the moment of measurement all vary together, so a phone held in portrait at a particular zoom is a much rarer state than a desktop window at full size.

What each signal costs you

It helps to separate the traits you were born with from the ones you chose.

SignalWhat it narrows you toWithin your control
Device model (client hints)A specific handsetNo
Screen and pixel ratioA small group of devicesPartly, through zoom and window size
Touch points and sensorsA hardware classNo
Keyboard and autofill behaviourYour personal setupYes

The first and third rows are fixed at purchase. The second is only partly yours to move. The fourth costs nothing to change but attention.

Autofill, keyboards and the app around the browser

The browser is only part of the picture on a phone.

Part of the phoneWhat it adds to the picture
Keyboard behaviourA different way of handling text input
AutofillHow a form is offered to be filled
Advertising identifierA resettable identifier for apps
In-app browsersA web view the app controls

A third-party keyboard changes how text input is handled, and the browser can observe some of the difference. Autofill works from saved data and settings, so whether the browser offers to fill a form depends on choices made long before the page loaded.

On the app side, both major platforms provide a resettable advertising identifier that apps use for tracking. It is a different mechanism from fingerprinting, but it serves the same purpose, linking the app world to the ad profiles built from the web. When you tap a link inside an app, it often opens in a web view controlled by that app rather than your browser.

Together these mean the phone is reporting on more than the browser alone.

A web view is not your browser

A web view controlled by an app sits outside your browser settings entirely. The protections you configured in your browser do not follow the link you tapped, and the values the page can read are the app’s, not yours.

What actually helps on a phone

The honest answer is that options are thinner than on desktop.

  • Use the browser’s own protections. Most mobile browsers include tracking protection that can be raised above its default. This is the single easiest step.
  • Prefer a browser with fingerprinting resistance. Some mobile browsers apply randomisation or standardisation, though fewer do so than on desktop.
  • Limit client hint exposure. Where a browser offers it, refusing the highest-entropy hints costs little in daily use.
  • Reduce the app surface. The mobile ecosystem tracks through apps as much as through pages, and no browser setting reaches inside an app’s web view.

What you cannot change

You cannot change your phone’s model, its screen, or the fact that it has a touchscreen. Those are the traits that make you identifiable, and they are fixed at purchase. This is why mobile fingerprinting is not a problem you solve so much as one you narrow. The aim is to remove the settings and behaviours that add on top of the hardware, not to disguise the hardware itself.

A short checklist before you change anything

Measure before you try to fix anything, and keep the order simple.

  • Read the number first. Run the browser fingerprint test on your phone rather than on a desktop, where the surrounding signals differ.
  • Sort what you are shown. Ask which of the signals you chose and which the device was born with.
  • Change only the chosen ones. Settings and behaviours are the parts you can actually move.
  • Treat the figure as a baseline. The number you get is the starting point, not a verdict.

Test it yourself

More from the blog