Skip to content
All fingerprint checks
Network & WebRTC

Canvas text is anti-aliased the way the claimed OS rasterises it

Pim· Clearcote Research 2 min readCheck id glyph-aa-levels-vs-os

Under a Windows claim, canvas text shows at most 24 distinct partial-alpha levels (about 15 is typical). N/A under other claims and on non-Chromium engines (severity: warn).

What a detector infers

Canvas text is rasterised by the platform's font engine, and the engines leave different fingerprints in the alpha channel. On Windows, Chrome takes glyph coverage from DirectWrite, and the anti-aliased edges of canvas text come out in a small number of coarse steps: black 16 px Arial drawn on a transparent canvas shows 15 distinct partial-alpha levels on Chrome and Edge.

On Linux, FreeType produces nearly continuous coverage: 238 distinct levels for the same text, headed or headless. The row counts distinct alpha values between 1 and 254 and, under a Windows claim, expects no more than 24. Counting levels rather than matching exact values is deliberate — ClearType tuning shifts which levels appear, but not how many by an order of magnitude. Genuine Linux Chrome claiming Windows kept its 238 levels. Two limits are stated rather than hidden.

The Windows figure was measured with ClearType on, and a machine with font smoothing off, common over Remote Desktop, has not been measured yet. And the rule describes Chromium's text path, so other engines are not judged by it. Unlike the text-metric rows, which read glyph advances and boxes, this one reads the rasteriser itself.

How to resolve it

Anti-aliasing comes from the host's font rasteriser, which a user-agent override does not touch. Present the OS the browser actually renders text on.

The font stack under the user agent

Nearby checks in Network & WebRTC

See all 18 checks in Network & WebRTC
Who builds this test

Clearcote is a browser built for fingerprint coherence

It is a Chromium fork, maintained by the same people who wrote this reference. It ships as a compiled browser rather than as a stealth script injected into someone else's — which is a description of how it is built, and is not an argument about how it behaves on this check.

This audit takes no position on how Clearcote scores on Network & WebRTC checks, on this one, or anywhere else. It has no baseline corpus of other people's fingerprints to rank you against and no vendor scoreboard — nearly every check is self-referential, asking one browser the same question through two independent APIs and reporting whether both answers can be true at once. It runs identically on any browser, including ours. Run it on yours and read the result yourself.

See the other checks in Network & WebRTC — the family glyph-aa-levels-vs-os belongs to.