Firefox 145: How New Fingerprinting Protections Slash User Trackability by Half (2025)

Imagine being tracked everywhere you go online, even when you block cookies. It sounds like a privacy nightmare, right? That's the reality of browser fingerprinting, and Firefox is fighting back with some seriously impressive new tech. They've just released an update that cuts fingerprinting trackability in half! But here's where it gets controversial... is it enough?

Mozilla has officially announced the completion of the second phase of its fingerprinting defenses in Firefox 145. This is a HUGE step forward for online privacy, specifically targeting those sneaky tracking techniques that follow you around the web even when you've blocked cookies. This news was shared in a detailed blog post by Tom Ritter, highlighting how these new protections reduce the number of uniquely identifiable users by almost 50%. Think of it like this: if a digital detective was trying to spot you in a crowd, Firefox just made it twice as hard for them.

So, what exactly is browser fingerprinting, and why should you care?

Basically, browser fingerprinting is a way of creating a unique digital ID for you based on the specific configuration of your device and browser. It's like a digital fingerprint, hence the name! This fingerprint is made up of tons of tiny details, from your time zone and operating system to the fonts you have installed and even how your graphics card renders images. Individually, these details might seem harmless. But when combined, they create a profile that's statistically unique to you, allowing websites to track you across different sites and browsing sessions. And this is the part most people miss... unlike cookies, which you can delete or block, fingerprints are much more persistent and work even in private browsing mode. Creepy, right?

These new defenses are built on Firefox's existing Enhanced Tracking Protection (ETP) framework, which has been blocking known trackers since 2020. This latest phase goes even further by targeting fingerprinting scripts that aren't on those known tracker lists. This means Firefox is now addressing a broader range of privacy threats than ever before.

Let's dive deeper into how browser fingerprinting works, because understanding the problem is the first step to appreciating the solution.

Browser fingerprinting is fundamentally different from cookie-based tracking. Cookies are small text files that websites store on your computer to remember information about you. You can see them, delete them, and even block them through your browser settings. Fingerprinting, on the other hand, works by extracting inherent characteristics from your browser and device. It's like taking a digital DNA sample without you even knowing it.

Websites collect dozens of data points about how your browser renders content, the fonts installed on your system, how your graphics hardware processes images, and tons of other configuration details. Each of these attributes, like your time zone, screen resolution, or installed plugins, seems insignificant on its own. But when combined, they create a statistically unique pattern that identifies your specific device. According to Mozilla, this all happens invisibly, without your awareness or consent. Websites use standard application programming interfaces (APIs) to query your browser's capabilities. These APIs are designed for legitimate purposes, like optimizing video playback based on your graphics card. But fingerprinters use the same APIs to identify unique rendering characteristics and build your fingerprint.

And here's why fingerprinting is such a privacy concern: it's persistent. Even if you clear your cookies, switch to private browsing mode, or use privacy tools, your fingerprint remains the same because your underlying device and software configurations haven't changed. This means websites can track you across months of browsing activity, even if you take steps to prevent cookie-based tracking!

Mathematical analysis shows just how effective fingerprinting can be. With enough data points, the probability of two users sharing identical fingerprints approaches zero. Research has shown that just 30-40 attributes can uniquely identify the majority of web users. And with more sophisticated techniques like canvas fingerprinting (which analyzes pixel-level differences in how graphics cards render images), uniqueness increases even further.

As browsers have started restricting cookie usage, the advertising industry has increasingly turned to fingerprinting. While it's not as reliable as cookies for identifying individual users, it still provides tracking capabilities that users can't easily disable. This imbalance between tracking power and user control is what motivated Mozilla to develop these new defenses.

Firefox's Enhanced Tracking Protection already uses a list of known trackers provided by Disconnect (https://disconnect.me/trackerprotection?ref=ppc.land) to block social media trackers, cross-site tracking cookies, fingerprinters, cryptominers, and tracking content. Total Cookie Protection, which is enabled by default in Standard mode, confines every cookie to the website where it was created, preventing it from tracking you across different sites. This is a significant step, but it's not enough to stop fingerprinting.

So, how does Firefox's new fingerprinting protection actually work?

According to Mozilla, they developed these defenses using a global analysis of how browsers can be fingerprinted in real-world scenarios. This makes Firefox the first browser with this level of insight into fingerprinting techniques. Instead of just blocking known trackers, they've designed defenses specifically to reduce trackability.

The protections operate on multiple layers. Enhanced Tracking Protection continues to block known tracking and fingerprinting scripts from identified sources. But beyond that, Firefox limits the information available to websites through privacy-by-design approaches that preemptively shrink your digital fingerprint.

Think of it this way: browsers provide APIs that allow websites to request information for legitimate purposes. For example, a website might need to know your graphics hardware information to optimize a game. But trackers can use the same information to build a fingerprint for cross-site tracking. Firefox is now limiting the amount of information that websites can access, making it harder for them to create a unique fingerprint.

Mozilla has been incrementally improving its fingerprinting protections since 2021. The first phase addressed the most common techniques, including graphics card rendering behaviors, installed fonts, and mathematical calculation variations between devices. Recent releases have tackled additional information leaks, strengthening font protections and preventing websites from accessing hardware details like processor core counts, touchscreen capabilities, and taskbar dimensions.

You can find the complete list of protections in Mozilla's technical documentation. According to Mozilla's research, these improvements have reduced the percentage of users appearing unique to fingerprinters by almost half. That's a huge win for privacy!

To start, these new fingerprinting protections are enabled in Private Browsing Mode and Enhanced Tracking Protection Strict mode. Eventually, Mozilla plans to enable them by default across all browsing sessions. This phased rollout allows them to fine-tune the protections before they're implemented more broadly.

Mozilla designed these protections to balance the disruption of fingerprinting with the need to maintain web usability. More aggressive blocking could break legitimate website features. For example, calendar, scheduling, and conferencing tools legitimately need accurate time zone information. Firefox's approach targets the most significant fingerprinting vectors while preserving the functionality that many websites need to operate normally.

According to Mozilla, this layered defense system significantly reduces tracking without degrading the browsing experience. They also provide detailed documentation about specific behaviors and instructions for recognizing website problems caused by the protections. Users can disable the protections for individual sites while maintaining overall privacy protection, giving them control over their browsing experience.

This announcement comes at a time of intensifying competition in browser privacy and increasing regulatory pressure on tracking practices. Google, for example, announced plans to lift fingerprinting restrictions for advertisers in February 2025 (https://ppc.land/google-to-lift-fingerprinting-restrictions-amid-privacy-concerns/), which prompted criticism from the UK Information Commissioner's Office, who called the decision "irresponsible." Google's policy shift allows device fingerprinting specifically for Connected TV advertising starting February 16, 2025, creating a divergence in approaches between major browser vendors.

Apple's Safari has implemented Advanced Fingerprinting Protection (https://ppc.land/safari-26-tracking-changes-to-impact-marketing-measurement/), which is enabled by default for all browsing sessions in Safari 26, launching in September 2025. Safari targets known fingerprinting scripts rather than legitimate analytics implementations.

Chrome has introduced IP Protection features for Incognito mode (https://ppc.land/google-chrome-introduces-ip-address-protection-for-private-browsing/), with implementation beginning in May 2025. This technology uses a two-hop proxy system to prevent third-party tracking while maintaining critical services like fraud prevention.

These varying approaches reflect the fundamental tension between user privacy protections and the needs of the advertising industry. Google faced backlash from privacy advocates (https://ppc.land/googles-anti-privacy-push-sparks-backlash-among-advertisers/) when they urged business owners to oppose California Assembly Bill 566, which would require browsers to offer built-in opt-out settings for data collection.

Firefox 145: How New Fingerprinting Protections Slash User Trackability by Half (2025)

References