What is Device Fingerprinting?
Device fingerprinting is the process of collecting and combining hardware and software attributes from a device, such as MAC address, CPU ID, disk serial number, hostname, OS version, and installed drivers, to generate a unique identifier for that device. In software licensing, device fingerprinting is used to enforce node-locked licenses, binding activation to specific hardware. Fingerprints can be static (hardware-based) or dynamic, and their stability and reliability differ across physical hardware, virtual machines, and containers.
Examples
- A software vendor generates a device fingerprint from hardware attributes during license activation, ensuring the license cannot be transferred to another machine without authorization.
- A security platform uses device fingerprinting to detect when a known device accesses a system from an unusual location, triggering a step-up authentication prompt.
- An ISV builds tolerance ranges into its fingerprinting algorithm to allow minor hardware changes (e.g., RAM upgrade) without triggering full reactivation.
- A fraud detection system uses browser-based fingerprinting to identify returning users regardless of cookie deletion.
Common Applications
- Node-locked software license enforcement
- Fraud detection and account takeover prevention
- Device trust evaluation in Zero Trust security architectures
- Mobile device identification for app licensing and MDM
- Online advertising and user tracking (browser fingerprinting)