[06] / knowledge base
← All articles

What is an OS fingerprint and why it matters

The passive OS fingerprint reveals the device family behind your traffic. Why the mismatch gets flagged, and how choosing the port OS keeps your profile consistent.

[06] what-is-os-fingerprint
en

An OS fingerprint is the set of traits by which websites determine what kind of device your traffic comes from: an iPhone, an Android phone, or a Windows PC. The page does not run JavaScript checks — the “fingerprint” is read passively from the connection characteristics themselves.

In short: if the fingerprint’s OS does not match what the site sees in the rest of the traffic, the connection looks suspicious. Choosing the port’s OS removes that mismatch.

What a website sees

A web server does not need JavaScript to “understand” who is visiting. At the network level, traffic already reveals the device family:

  • how the client establishes the TCP connection and which values it puts in its fields;
  • which cipher suites and extensions it uses in the TLS handshake;
  • in which order and with which parameters HTTP headers are sent.

Together these traits form a passive OS fingerprint. A real iPhone, an Android device, and a Windows machine all differ in it, and sites cross-check it against the other signals — the User-Agent, the on-page behavior, and so on.

Why it matters

When the signals contradict each other, a classic mistake appears: the User-Agent promises a Windows browser, while the network fingerprint betrays a Linux server. For protection systems, this is one of the simplest and most reliable proxy markers.

The result is familiar to everyone working with ad and social media accounts:

  • a captcha on every other action;
  • sudden “confirm you are human” checks;
  • blocks and account bans without a visible reason.

Individual parts of the “profile” (cookies, canvas, fonts) are spoofed in an anti-detect browser, but the network fingerprint never reaches it — it is set at the connection level, that is, on the proxy side.

How it works on our side

Every private port can be assigned an OS — iOS, macOS, Android, Windows 10, or Windows 11:

  1. Open the Dashboard, click the proxy, and open the “Settings” tab.
  2. In the “Port Operating System” block, choose the device family the sites should see.
  3. Press “Apply”.

After that, your traffic looks like traffic from a real device of the chosen family — the network and the TLS handshake speak the same “language”. The setting applies to each proxy separately and can be changed at any time, see How to change the port OS.

Tip: keep the port OS consistent with the User-Agent and the behavior in your anti-detect browser — if the browser pretends to be Windows, let the fingerprint be Windows 10/11 as well.