Browser fingerprinting affects anyone who values privacy online. Every browser quietly reveals details about itself: screen size, installed fonts, timezone, language settings. Combined, these details can identify you almost as reliably as a cookie, even if you never log in or accept tracking. Tor Browser takes an unusual approach to this problem: instead of trying to hide your details, it tries to make everyone's details look the same.
What is browser fingerprinting?
A browser fingerprint is a profile built from technical characteristics your browser exposes to every website you visit. This includes your screen resolution, operating system, installed fonts, timezone, browser version, and more.
None of these signals is sensitive on its own. The problem is combination. According to the Electronic Frontier Foundation's Surveillance Self-Defense project, most browsers end up looking unique once enough of these details are stacked together. Trackers can follow that browser across different sites without needing a single cookie.
This matters because fingerprinting works even if you clear cookies, use private browsing, or switch networks. The fingerprint comes from the browser itself, not from anything stored on your device.
Tor's answer: make everyone look identical
Most privacy tools try to make your fingerprint unique and unpredictable. Tor Browser does the opposite. As the Tor Project explains on its blog, the goal is that all Tor users should have the exact same fingerprint, regardless of the device or operating system underneath.
The logic is simple. If a tracker cannot distinguish one Tor Browser user from another based on technical details, fingerprinting loses its power as a tracking method. You are not trying to disappear. You are trying to look exactly like everyone else in the crowd.
This is not a new idea. Tor's developers were addressing fingerprinting-style problems as early as 2007, before the term "browser fingerprinting" was even widely used, according to the Tor Project's own history of the browser.
Why uniformity, not randomization
Some other browsers take a different route: randomizing fingerprint details so each site sees something slightly different. Brave Browser, for example, uses fingerprint randomization, showing a subtly different fingerprint per site rather than one fixed identity.
This sounds appealing but creates its own risk. Discussions on the Tor Project's forum point out that sophisticated fingerprinting tools can often tell the difference between genuinely random values and fixed ones, and may simply discard the randomized parts while still tracking you using whatever remains stable.
Tor's strategy avoids that trap by not relying on randomness at all. If every user's browser reports the same values, there is no unique pattern to extract.
The idea of "buckets," not a single fingerprint
It is tempting to think Tor Browser makes every single user completely identical. That is not quite accurate. As explained in Tor Project forum discussions, not all Tor users look exactly the same. Tor aims to sort users into as few distinct groups, or "buckets," as possible.
These buckets are shaped by things like operating system, supported languages, and window size. Tor reduces the number of possible combinations for each of these factors so that many users fall into the same bucket rather than standing out individually.
The fewer buckets that exist, and the more users share each one, the harder it becomes for any single person to be picked out based on fingerprint alone.
What this means for your window size
One practical detail follows from this bucket strategy: resizing or maximizing your Tor Browser window can work against you.
Window dimensions are one of the metrics trackers can use. If you resize your browser to a custom size, you may create a fingerprint detail that is unusual and therefore easier to single out, even if everything else about your browser matches the Tor default.
This is why Tor Browser discourages maximizing or resizing the window. The safest habit is simply to leave the default window size alone.
Tor does not mean automatic anonymity
Fingerprinting uniformity is one layer of protection, not a complete guarantee of anonymity. Tor Browser routes your traffic through the Tor network, but it does not automatically anonymize everything you do inside it.
If you log into a personal account, download and open a file outside the browser, or reuse a username across sessions, you can undermine the protection Tor's fingerprinting defenses are designed to provide. The browser can make you blend in technically. Your own behavior can still make you stand out.
This is why the Tor Project, along with privacy researchers, continues to document edge cases and gaps in fingerprinting protection rather than claiming the problem is solved.
Practical takeaways
- Use Tor Browser as downloaded from the Tor Project, without installing extra extensions that could make your browser unique.
- Avoid resizing or maximizing the browser window. Stick with the default size.
- Fingerprinting defenses protect the browser's technical profile, not your behavior inside it.
- Pair Tor Browser with careful habits: avoid logging into personal accounts you also use outside Tor, and use privacy-respecting tools like DuckDuckGo for search.
- If you need an onion address for an email or communication service like Proton Mail, get it directly from that organization's official site rather than from an unverified directory.
Browser fingerprinting is a quiet, persistent form of tracking because it needs no cookies and no login. Tor Browser's response, making everyone look as similar as possible, is a well-documented and deliberate design choice. Understanding it helps explain why small habits like not resizing a window actually matter for your privacy.