I have used the Tor Browser to login to my google account multiple times, and in each instance I am marked as using the same device in "Recently used devices," even if I am connecting via a different exit node. When I connected via the Tor Browser running inside a virtual machine, Google correctly identified me as using a different device.

Scripts are enabled globally in my browser, and cookies are allowed but obviously deleted at the end of a session.

Does my browser have some vulnerability that allows Google to recognize me each time I login?

  • My guess is that it's likely a change of fingerprint, for example the browser window size would probably differ between the VM and your desktop and can be detected by javascript. It's suggested they use a series of different methods to identify the device and determine if it is significantly different from previous fingerprints. See: stackoverflow.com/questions/19552810/… – cacahuatl Nov 5 '16 at 2:28
  • @canonizingironize Thanks, that makes a lot of sense. – NEROtick Nov 8 '16 at 2:12

Your Answer


Browse other questions tagged or ask your own question.