Fingerprint

Fingerprint is a device identification API that assigns a stable identifier to each web visitor and mobile device. The homepage pitch is direct: identify every visitor, good or bad, even when they're anonymous. In practice, that means when someone clears cookies, browses in incognito mode, or cycles through different IP addresses, the API still returns the same visitor ID, so your application knows it is looking at the same device.

The homepage doubles as a live demo. It shows your own visitor ID, a weekly visit summary (20+ visits, 21 incognito sessions, 21 IP addresses, 2 locations), and a feed of recent visits listing the IP address, browser version, geolocation on a map, and incognito and VPN status for each. That feed is a fair picture of the signals the service works with: device and browser attributes, network context, and detection of the privacy tools people use to hide.

Use cases fall into two groups. On the risk side, the company positions the product for stopping fraud and detecting bots and AI agents — duplicate signups, payment abuse, scraping, and other automated traffic. On the product side, the same visitor ID supports personalization: recognizing a returning anonymous visitor and adapting the experience without a login. Delivery is developer-first; the product is an API, and the homepage routes straight to a developer path.

Best for

• Fraud and risk teams that need to link repeat abuse back to the same device across incognito sessions and rotating IPs
• Platforms fighting bot and AI-agent traffic on signup, login, checkout, or API endpoints
• SaaS and e-commerce teams that want to recognize anonymous returning visitors and personalize without forcing registration
• Developers who want device identification delivered as an API rather than a standalone rules engine
• Companies limiting account sharing or promo abuse where one person runs many accounts
• Security teams that want incognito and VPN usage as additional risk signals

Frequently asked questions

How does it identify anonymous visitors?

It combines browser and device signals into a visitor ID that stays stable across sessions. The homepage demo shows one ID holding steady through incognito mode and 21 different IP addresses in a single week.

Does it work in incognito mode or behind a VPN?

The live demo on the homepage shows every visit made in incognito mode still resolving to the same visitor ID, and it flags VPN usage separately. VPN detection appears to be a signal rather than a blocker.

What does the API return for each visit?

The demo surfaces a visitor ID plus IP address, geolocation, browser version, and incognito and VPN status. The full identification response includes more signals, but the homepage doesn't enumerate them.

Can it detect bots and AI agents?

The homepage lists bot and AI agent detection alongside fraud prevention as core uses. It doesn't explain the detection method on the page, so check their documentation for specifics.

How much does it cost?

Pricing isn't shown on the homepage. You'll need to check fingerprint.com or contact their sales team for current plans and terms.

Alternatives

• Cloaked — for individuals who want to protect their own browsing privacy rather than identify site visitors.
• Transcend — for governing and deleting the personal data you collect, including identifiers like these.
• Delve — for teams whose priority is SOC 2 compliance rather than visitor identification.