Introduced for Private Browsing sessions in Safari 17.0, Advanced Fingerprinting Protection was also optionally available for regular non-private sessions. With iOS 26, it will be enabled by default. Here’s what that means.
Starting with iOS 26 (as well as iPad 26, and macOS 26), Apple is flipping the switch on Advanced Fingerprinting Protection for all browsing sessions, not just Private Browsing. From Apple’s iOS 26 press release:
“Browsing in Safari gets even more private with advanced fingerprinting protection extending to all browsing by default.”
In practice, that means every time you use Safari, the browser will introduce a little bit of data noise and deploy a couple of other techniques to confuse the trackers that try to follow you around as you browse.
The nerdy bits
There is no shortage of ways that advertisers and data brokers can use to track your activity across the web. And since Apple and a few other browsers started cracking down on cookies and cross-site tracking, techniques like fingerprinting have become more widely used.
Fingerprinting works by combining dozens of small technical clues, like screen size, GPU, audio stack, mouse movements, and even the fonts installed on your device, to build a profile that can uniquely identify you.
To fight this off, Safari 17.0 introduced Advanced Fingerprinting Protection for Private Browsing sessions, which makes the user’s fingerprint less unique, less stable, and less visible to websites.
They achieved that through a few interesting techniques, as explained by Apple:
To make it more difficult to reliably extract details about the user’s configuration, Safari injects noise into various APIs: namely, during 2D canvas and WebGL readback, and when reading AudioBuffer samples using WebAudio. To reduce the overall entropy exposed through other APIs, Safari also overrides the results of certain web APIs related to window or screen metrics to fixed values, such that fingerprinting scripts that call into these APIs for users with different screen or window configurations will get the same results, even if the users’ underlying configurations are different.
... continue reading