14

Show HN: DevicePrint – device fingerprinting without cookies

Hi HN,

I built DevicePrint after running into problems with duplicate accounts and unreliable cookies in my own projects.

DevicePrint is a lightweight device fingerprinting tool designed for developers. It helps identify devices across sessions without relying on cookies.

Use cases include fraud detection, preventing duplicate signups, and security-sensitive workflows.

I'd really appreciate feedback — especially around privacy concerns or edge cases you’ve run into.

Link: https://deviceprint.io

It doesn’t seem to be very good, but don’t worry, just keep prompting Claude and I’m sure you’ll get it sorted out.

Jokes aside, it’s cool but it’s not useful if it’s the first time I visit and I see I have 10+ past visits from all around the world… obviously this is not reliable and I wouldn’t use it for anything, much less anything serious.

an hour agormonvfer

>just keep prompting Claude and I’m sure you’ll get it sorted out

Anecdotally speaking, this is the case for most new Show HNs now :^)

an hour agousefulposter

I've got 743 visits from one IP!

14 minutes agoStilesCrisis

I’ve visited 292 times. From Melbourne, Athens, Piraeus, Paris, Munich, Vantaa, Berlin and Kuala Lumpur. I’ve used Chrome, Firefox and Safari on both mobile and desktop.

What’s even more impressive is I’ve made all of those visits from all of those cities in the last few minutes.

You may have a bug.

an hour agosaaaaaam

It also has a 99.5% confidence that it has uniquely fingerprinted me, and says I have had 677 visits to the site, including Vietnam & Sweeden...

I think the 'unique' part of fingerprinting here isn't working unfortunately.

28 minutes agoClosi

You've (just) between the speed of my world tour - congratulations

42 minutes agoAngostura

I love services that have not a single person as a contact/responsible for the site. /sarcasm

It's a red flag if you hide behind a contact form with no reachability beyond that whatsoever.

And as other said: 99.5% accuracy means you should have millions of working fingerprints, since mine and others are faulty as hell.

40 minutes agokappuchino

Apparently I went from Germany to UK in 29 minutes, pretty good.

It's a 99.5% declared confidence and says it used 30+ signals.

Assuming you've a list of VPN IP addresses, and travel times between countries, I reckon you should be able to rule out some false positives.

Would be interested to know what the "signals" were that produced the match.

I'm on domestic broadband in the UK (IPv4), according to dnschecker they're on a mainstream mobile provider in Germany. Could be a private tunnel, but those would be rare. Which raises the question of how the confidence rating is made.

I like the general page presentation, a good landing page except that you'll tend to put off everyone who gets a bad result for the example. That might be turned around with something showing "if this isn't you, well done on your browser security" and maybe some compelling stats on confirmed matches from testing?

an hour agopbhjpbhj

FYI, I'm seeing 99.5% confidence I've been to the site 62 times. I can assure you 've been there once.

2 hours agodkindler

I think it is called false positive :)

2 hours agom00dy

The aim is great, and this would be useful for many use cases, especially when buying traffic (ads).

But as others mentioned, it is far from being accurate. I got the same as others, multiple visits from multiple countries.

an hour agoOras

Seeing as everyone is apparently seeing themselves having visited multiple times when it wasn't them, including me, I'm very happy with the privacy of this system =) It cannot effectively track me

2 hours agovoidUpdate

It has 99.5% confidence this is my 10th visit. I've hit refresh once, but the rest aren't me. My other "visits" are from many countries, saying I've changed browser, IP, and location. They are using the same OS and browser though.

2 hours agoelliotshep

Same, it's all over the place. Whatever it is doing isn't a very strong fingerprint.

2 hours agodontdoxxme

It shows I've visited twice already, from different countries, IPs and browsers. I don't think this works. This open source one does work between incognito and normal session: https://fingerprintjs.github.io/fingerprintjs/

an hour agoalexcroox

Chrome, Windows 11, apparently, it saw me loads of times, but my first visit was today.

I'd love to use a reliable system like this to detect returning fake, banned, and bot users on my services.

an hour agoCrzyLngPwd

Opening the site from two different temporary tab containers in Firefox yields different IDs.

an hour agoeptcyka

Haha, same here, first visit but system saw me severals times already. I have a quite unique setup..

Works great! Thank you for fighting for users anonymity

2 hours agoalpenbazi

Works great, my device visited over 100 times already

edit: not only that, under past visits I can now see the ip address of other visitors, together with their rough location and browser setup. You may want to remove the "gdpr compliant" from the website :)

2 hours agoaspect0545

Happy to answer any technical questions or discuss implementation details.

6 days agosilverrump

People in the comment section has noted the site to recognize multiple page visits from them even though this is their first time visiting the site, did you test your service yourself on different browsers / os / devices ?

2 hours agoAlifatisk

Perhaps he's posted this here to get some more test data

an hour agodifosfor

Why are docs behind a login wall?

2 hours agocuu508

thinks i have visited multiple times when i definitely haven't, did you test this on macs?

2 hours agomcgoooo_andrew

Definitely not working at all.

It shows I've visited all around the world, lots of times.

Nope. Just once, and from one location.