404 Desktop
A coherent browser identity, controlled locally.
404 coordinates supported fingerprint signals across TLS, HTTP, JavaScript, and—on supported systems—TCP/IP. One selected profile follows the session instead of exposing an unrelated collection of native device characteristics.
- Local-firstBrowsing traffic stays on the path you choose
- Profile-drivenSupported layers share one identity definition
- Open sourceInspect and build the underlying components
What changes
A VPN can change the route. The browser still introduces the machine.
Switch the view to see the difference between changing only the network path and coordinating the identity that appears across multiple layers.
Route changedThe browser and device profile can remain recognizable.
Route + presentation changedSupported layers describe one selected identity.
Conceptual illustration. Coverage depends on the browser, operating system, feature, and current release.
One profile, multiple observers
Fingerprinting does not happen in one place.
A page script, the destination server, and the network stack observe different pieces of the same session. 404 uses one active profile to coordinate supported changes instead of treating each surface as an unrelated toggle.
Explore the architecture- 01TLSClientHello · cipher and extension orderHandshake presentationaligned
- 02HTTPHeaders · Client Hints · negotiationRequest presentationaligned
- 03JavaScriptCanvas · WebGL · audio · NavigatorPage-visible surfacesaligned
- 04TCP/IPTTL · window · MSS · option behaviorSupported kernel signalsaligned
Local-first by design
Your browsing traffic never leaves your machine.
The desktop controller, profile state, local certificate authority, proxy path, and supported kernel handling operate on your machine. Websites still receive traffic through the network path you configure.
Separate concern: 404 does not mask an IP address by itself. Pair it with a VPN when changing network location is part of the threat model.
Built for identifiable work
Use ordinary browsers without treating their exposed identity as fixed.
404 is intended for work where repeat recognition can reveal interests, relationships, clients, sources, staff, or investigative patterns.
- 01
Sensitive research
Reduce the chance that repeat browsing sessions are connected by the same exposed browser and device profile.
- 02
Client and source work
Keep ordinary work in familiar browsers while controlling more of the identity those browsers present.
- 03
Technical investigation
Select, hold, and inspect a coordinated profile instead of changing isolated values by hand.
- 04
Privacy engineering
Study the interaction between browser, request, TLS, and supported packet-level fingerprint surfaces.
Different tools, different jobs
404 complements network privacy tools. It does not replace them.
Changes the visible route
Replaces the public exit IP and changes the network path. It normally leaves browser and device surfaces intact.
Location and route privacyChanges the presented profile
Coordinates supported browser, request, TLS, and network-stack signals around one selected identity.
Fingerprint and linkability controlCreates a shared anonymity model
Standardizes browsers and routes traffic through Tor. 404 does not claim to reproduce that anonymity set.
Purpose-built anonymity systemChoose how you operate it
Desktop convenience or direct control.
The product and open-source paths use the same underlying project, but differ in who manages configuration, updates, and day-to-day operation.
404 Desktop
Choose a profile, launch a supported browser, manage the local service, and receive product updates through a graphical desktop application.
- Windows
- macOS
- Linux
- Chrome
- Firefox
Self-hosted components
Build the open-source components, manage certificates and configuration, and control the deployment and update process yourself.
- Rust
- Open source
- AGPLv3
- Manual setup
Run it your way
Use the desktop app—or inspect every layer yourself.
404 Desktop manages profiles and updates through a graphical interface. The underlying components remain available for people who prefer to build and operate the stack themselves.