Browser profiles and fingerprinting
Browser profile: A separate set of browser data and preferences, such as cookies, saved site settings, and extensions. Keeping work in distinct profiles can help prevent account data from being mixed accidentally.
Fingerprint: A collection of browser and device signals that a website may use to distinguish one browsing environment from another. A fingerprint is not a single setting, and it can change when the browser, device, or network changes.
User agent: A browser-provided description of the browser and operating system. Websites may use it to adapt pages or help diagnose compatibility problems.
Canvas and graphics hints: Websites can sometimes observe how a browser renders graphics or reports certain display capabilities. These signals may contribute to a browser fingerprint, but they do not identify a person by themselves.
Stored data and network connections
Cookie: A small piece of data a website stores in the browser, often to maintain a login, remember preferences, or support site functions. Cookies may be limited to a session or retained longer, depending on their purpose and settings.
Local storage: A browser feature that lets a website keep data on the device between visits. Unlike session-only data, it usually remains until the site or browser removes it.
Session: A period of activity associated with a website or network connection. A site session may keep an account signed in, while a proxy session describes how a connection is maintained or reassigned.
WebRTC: A browser technology for real-time communication, such as audio and video. Depending on the browser and network setup, WebRTC may use network information that differs from the address shown by a proxy.
DNS: The system that translates website names into network addresses. If DNS requests follow a different route from other browser traffic, they may reveal information about the network connection.
Leak: An unintended disclosure of information, such as a network address or identifying browser data, outside the expected connection path. Leak checks can help reveal configuration problems, but they cannot guarantee that every site sees the same signals.
Proxy addresses and sessions
Residential address: A network address associated with a residential internet connection. The label describes the type of network assignment, not the identity or trustworthiness of the person using it.
Mobile address: An address associated with a mobile network. Mobile connections may change addresses or share them among many devices, depending on the carrier and network conditions.
Datacenter address: An address associated with servers in a data centre rather than a typical home or mobile connection. Websites may treat network types differently, so users should follow each platform’s rules.
ASN: An Autonomous System Number identifies a network operator’s routing system. It can provide context about which organisation or type of network is associated with an address.
Sticky session: A proxy session that aims to keep the same network address for a period or until the session ends. This can support continuity, but it does not control how a website manages its own login session.
Rotation: A change from one proxy address to another, either on a schedule or when a connection is renewed. Frequent changes can interrupt legitimate tasks, so network settings should suit the intended use and platform requirements.
Authentication: A process for confirming access to a proxy service or account, often through credentials or another approved method. Keep authentication details private and avoid placing them in shared notes or exposed files.
Whitelist of addresses: A security list that permits access only from specified network addresses. It can reduce unauthorised access, but it needs careful maintenance when legitimate networks change.
Account protection and handover
Two-factor login: A sign-in method that requires an additional check beyond a password, such as a code or approval from a trusted device. It can make a stolen password less useful to an attacker.
Recovery method: A verified way to regain access if a login method is unavailable, such as a recovery email or backup code. Keep recovery options current and store backup information securely.
Takeover: Unauthorised control of an account, often after credentials or recovery details are stolen or tricked from the account holder. Phishing awareness, unique passwords, secure recovery methods, and careful profile handovers help reduce avoidable exposure. When handing over a browser profile for legitimate work, use an approved process, limit access to the necessary data, and remove access when it is no longer needed.