How to easily spoof Reddit's fingerprinting

Joined
Jun 23, 2024
Messages
2
Reaction score
4
I was recently permabanned from reddit. I'm not gonna say much about it, but the reason was supposedly ban evasion, from a subreddit I've never been banned from. As a result, I looked into how to avoid the fingerprinting that caused any new profile I made to be banned.

It is dead simple. Reddit serves you a static javasacript file called reddit-init.en.{some id}.js. This file contains a function called "Fingerprint2". It checks certain things, like userAgent, your installed fonts, resolution, language, typical fingerprinting stuff.

By altering any of the values this function checks, you'll alter your fingerprint, as the function generates a fingerprint by hashing all the returned values from all its checks. You also have to clear your localStorage, as the fingerprint is cached there.

By using a usescript plugin like tampermonkey, and setting the usescript to run immediately upon page start, you can spoof your fingerprint by, for example, appending a character to your userAgent string.

This is all you need:
(function() {
'use strict';
localStorage.clear();
Object.defineProperty(navigator, "userAgent", { value: navigator.userAgent + " yeah, suck my dick, reddit" });
})

And that's the story of how I avoided reddit's permaban.

You can use this to avoid having your accounts associated with each other, potentially avoiding losing them all if you get a site ban. Coupled with a VPN, and randomizing the appended value, you can create more reddit accounts than you'll ever need. I recommend you check out the Function yourself to see which other values can be changed to spoof the fingerprint. There are several. navigator.language/navigator.languages might be a better pick, but those two properties have to match, so it's a bit more code.
 
Sure, whatever suits your needs.

This is useful for those who've been banned on their preferred browser, who don't want to change browser just to continue browsing reddit, though. You could easily adjust the script to automatically switch between fingerprints depending on which account you log into, too, avoiding the issue of having too many fingerprints associated with one account.
 
When is this file served? I looked into the requests during registration and couldn't find the file you mentioned.
 
Very nice share! I think I've been overcomplication some stuff by using puppeteer-with-fingerprints in the past, but that usually worked pretty well in some small tests too
 
very hq post, please delete it so reddit doesn't improve their shit lol
 
The amount of time you spend on this is not worth it, you need to be able to allocate it wisely and leave this anti-detect to browsers
just remember that if you have more than 3 accounts, it becomes torture without antidetect
 
If you don't also change the "sec-ch-ua" header then reddit can easily tell its a fake user agent. You should change to a matching previous chrome version, changing to something unique will also be problematic as your account will be the only one using that "unique version" of chrome.
 
Making this username and post to troll nubes. I hope nobody will be so dumbed to take it serously
 
I'm wondering - if you use an anti detect browser like Incogniton, would the "randomize fingerprint" option basically do the same?
 
To keep it simple you can just use a different browser for each personal account. For example if you have three accounts you can use Chrome for one, Firefox for the second and Edge/Safari for the third. Then you don't have to be worried about changing your fingerprint and deleting cookies everytime you want to use another account. Better yet use a good anti-detect browser and some high quality residential proxies.

Keep in mind that Reddit saves your IP address in their database every time you visit the website, upvote something, make a comment etc... So even if you follow the steps to delete cookies and change your browser's fingerprint they still know it's you based on your IP address. They let it slide though because it would be too authoritarian to completely ban an IP address from the site. If you try any from of ban evasion from the same IP address they will most likely ban all of your accounts.
 
Question...

Would an anti-detect browser accomplish this by using different profiles?
 
Back
Top