Device fingerprinting is a method for recognizing a device by combining technical characteristics such as browser version, operating system, screen size, installed fonts, time zone, language settings, and network details. Instead of relying on one identifier, it builds a profile from many small traits that often stay stable across sessions.
In cyber security, fingerprinting helps detect fraud, automate risk scoring, and spot suspicious logins or enrollment attempts. For example, an identity platform may compare a new session against previously seen device profiles to decide whether to allow access, request step-up verification, or block the action. Attackers also use fingerprinting, both to evade detection by changing device traits and to identify tracking systems or bots. Because the signal is probabilistic, it is best used with other context such as IP reputation, email history, and phone checks. Strong defenses treat it as one input to a broader trust decision, not proof of identity on its own.