FeaturedBrowser fingerprinting
What is WebGL fingerprinting? How the GPU gives a device away
WebGL fingerprinting identifies a device by how its GPU renders 3D graphics. How it works, what it reveals, and how it differs from canvas.
ShieldLabs Blog
Detection methodology, anonymity research, and abuse-prevention playbooks for teams that protect their traffic.
All articles
What is TLS fingerprinting? How JA3 and JA4 identify a client
TLS fingerprinting identifies the software behind a connection from its TLS handshake. How it works, what JA3 and JA4 are, and what it reveals.
What is font fingerprinting? How your installed fonts identify you
Font fingerprinting identifies a device by which fonts are installed, read from how text renders. How it works, what it reveals, and how stable it is.
What is audio fingerprinting? The browser technique, explained
Audio fingerprinting identifies a device by how it processes a sound signal in the browser. How it works, what it reveals, and how stable it is.
How to prevent multi-accounting and stop fraud
How to prevent multi-accounting: detect one person operating many accounts, why IP-based detection fails, and where detection ends and your decision begins.
What is WebRTC fingerprinting? How it reveals a real IP behind a VPN
WebRTC fingerprinting uses a browser's real-time connection setup to expose network data, including a local or real IP behind a VPN. How it works.
What IP reputation is, and why an IP score alone won't catch fraud
What IP reputation is, how the 0 to 100 score is built, and why a clean IP score alone will not catch fraud. The lagging, shared, and recycled-IP problem.
JA4 fingerprinting explained: how it improves on JA3, and what it actually identifies
What JA4 fingerprinting is, how it fixes JA3's weakness to TLS randomization, the JA4 string format and JA4+ suite, and what it can and cannot identify.
How to detect VPNs in 2026
How to detect VPNs in 2026: the methods that actually work, why an IP check alone fails, and how masked traffic ties to abuse and risk.
Residential proxy detection: why home IPs are the hardest to catch, and how detection actually works
What a residential proxy is, where the home IPs come from, why IP checks miss them, and how residential proxy detection actually works without relying on the address.
What is device fingerprinting? How it works, signals, and uses
What is device fingerprinting: the signals that make up a device fingerprint, how the recognition works across browsers, web vs mobile, and what teams use it for.
What is browser fingerprinting? Detection methods + countermeasures
Browser fingerprinting identifies a device from 100+ datapoints. Learn how canvas, WebGL, and IP signals work, plus detection methods and countermeasures.
What is canvas fingerprinting? How it works and why it is so stable
Canvas fingerprinting identifies a browser by how it renders a hidden image. How it works, what it reveals, how stable it is, and its role in fraud detection.
How to detect account sharing?
How account sharing detection works: counting the distinct devices behind one login, the signals that reveal it, and how to act without false positives.
10 browser fingerprinting techniques explained
The main browser fingerprinting techniques: canvas, WebGL, audio, fonts, TLS (JA3/JA4), and more, what each one reads and how stable it is.
Proxy detection for fraud prevention: how to identify hidden traffic sources
How proxy detection works for fraud prevention: 13 techniques, why residential proxies are hard to spot, and why an IP check alone is never enough.
How to detect anti-detect browsers in 2026
Anti-detect browsers fake a new device per profile to power multi-accounting. How to detect them: the signals that expose them and why no one check is enough.