GlassBox Tool Visualizes How Browsers Reveal Unique User Fingerprints

A developer from HotStartLabs has released GlassBox, an open-source diagnostic tool that visualizes the specific data a web browser reveals to websites. The tool makes the invisible process of browser fingerprinting tangible by estimating a user's identifiability locally.

GlassBox operates by running approximately 31 different probes directly in the browser. These probes analyze a wide array of signals, including Canvas 2D, WebGL/WebGPU, the audio stack, installed fonts, WASM feature sets, and API support matrices. To ensure privacy, the tool is designed as a single static HTML file with no dependencies and performs no server-side data collection, with the exception of an opt-out IP geolocation API. According to the tool's documentation, while most signals are weak individually, their combination "routinely single out one browser in millions."

The Mechanics of Fingerprinting

Browser fingerprinting is a tracking technique that identifies users based on unique combinations of device and browser settings, allowing websites to bypass traditional cookies. While privacy-focused browsers like Brave and Firefox have implemented anti-fingerprinting measures—such as "farbling" audio and canvas data—many signals remain stable and high-entropy. The creator of GlassBox noted on Hacker News that the project was inspired by discussions regarding Alibaba using an audio-context trick to fingerprint visitors.

Why Identifiability Matters

The tool highlights a fundamental tension in modern web development: the need to provide essential features, such as rendering text or audio, versus the desire to maintain user anonymity. By visualizing these data points, GlassBox demonstrates that a user's hardware and software configuration can act as a persistent identifier.

It is important to note that the identifiability percentage provided by GlassBox is not a live population measurement. Instead, it is a model based on published per-signal entropy data sourced from established privacy projects including Panopticlick, AmIUnique, and Cover Your Tracks.

The Persistence of Tracking

Following its showcase on Hacker News, GlassBox has sparked renewed discussion on the persistence of fingerprinting despite the proliferation of privacy tools. As websites continue to find new high-entropy signals in browser APIs, the tool serves as a benchmark for users to see exactly what information their current browser configuration is leaking to the web. This transparency is critical as the industry shifts away from third-party cookies toward more opaque, device-based identification methods that are harder for the average user to detect or block.