The Typography Fingerprint
Google Chrome contains a highly specific API known as “Local Fonts Access.” This API allows web applications (like browser-based graphic design tools or word processors) to silently scan your computer’s hard drive and generate a complete list of every single font installed on your system. While this is necessary for advanced typography tools, it is a massive privacy vulnerability. Because every user installs a slightly different combination of custom fonts, advertising networks and malicious websites use this exact API to build a unique “fingerprint” of your machine, allowing them to track you even if you block cookies. You must permanently sever this access.
How to Block Local Fonts Access Globally
You can permanently lock the browser out of your operating system’s font registry via the Site Settings.
- Open the Google Chrome desktop browser.
- Click the three vertical dots (â‹®) in the top right corner and select Settings.
- In the left-hand sidebar, click on Privacy and security.
- In the main window, click on Site settings.
- Scroll down to the bottom and click to expand Additional permissions.
- Click on Local fonts.
- Under the “Default behavior” heading, select the radio button for “Don’t allow sites to use your local fonts.”
Standard Web Fonts Only
The change takes effect instantly. Google Chrome will completely sever its internal connection to the Windows or macOS font directory. The browser will instantly auto-reject every single background request from any website attempting to inventory your typography. Websites will now be forced to rely exclusively on standard web fonts or fonts they provide themselves, completely neutralizing their ability to fingerprint your machine based on your local design assets.