User-Agent Reduction origin trial
Beginning with the Chrome 95 Beta, we'll open up the origin trial for User-Agent Reduction to allow sites to opt into receiving the reduced UA string now. This will enable sites to discover and fix problems before the reduced UA becomes the default behavior in Chrome (the reduction is planned to start in the second quarter of 2022). If you would like to test the origin trial on 95 Beta users before it launches to the stable population, be sure to opt in and test before the release date for Chrome 95 (currently scheduled for October 19th, 2021).
Below is an overview of the origin trial and what to expect, and as always, we welcome feedback or any issues throughout this trial in the UA Reduction Github repository.
What is the User-Agent?
Why is the User-Agent being reduced?
User-Agent Reduction is an effort to reduce passive fingerprinting surfaces in the Chrome browser that was first announced in January 2020. By reducing the information in the UA string to just the browser's brand and significant version, its desktop or mobile distinction, and the platform it's running on, it becomes more difficult to identify individual users.
What does this mean for web developers?
Sites should prepare to receive reduced UA strings and consider participating in the origin trial (detailed below). The reduced user agent values will appear in:
User-AgentHTTP request header
To receive more client information than what's shared by the reduced User-Agent, sites will need to migrate to the new User-Agent Client Hints API. For more details on migration strategies, see Migrate to User-Agent Client Hints.
The User-Agent reduction plans do not currently include iOS and WebView, therefore those platforms will continue to get the full user agent string. The primary reason is that these platforms have not yet implemented User-Agent Client Hints.
How does this origin trial work?
To be able to do this, we are defining a temporary client hint, named
Sec-CH-UA-Reduced, whose presence in a request will indicate that the User-Agent header value contains the reduced UA string. The
Sec-CH-UA-Reduced client hint will only be sent (along with the reduced UA string) if the origin trial token is valid and the
Sec-CH-UA-Reduced client hint will not work once the origin trial expires. Keep in mind that the first navigation request will still receive the unreduced User-Agent string unless you set the
Subresource requests to the same origin will automatically send the same User-Agent string as the top-level request sent. Subresource requests to third-party origins will also send the same User-Agent string as the top-level request, including the reduced UA string if the origin trial token is valid, provided that the permissions policy allows it.
How do I participate in the User-Agent Reduction origin trial?
To register for the origin trial and get a token for your domains, visit the Trial for User Agent Reduction page.
To register your domains for the trial as a third-party embed, you will need a separate token.
Update your HTTP response headers:
Origin-Trial: <ORIGIN TRIAL TOKEN>to your HTTP response header, where <
ORIGIN TRIAL TOKEN> contains the token you got when registering for the origin trial.
Accept-CH: Sec-CH-UA-Reducedto your HTTP response header.
Accept-CHwill only cause the reduced User-Agent string to be sent on subsequent requests to the origin; to resend the first navigation request with the reduced User-Agent string, add
Critical-CH: Sec-CH-UA-Reducedto your HTTP response header, in addition to the
- Note: If the response headers contain a valid
Accept-CH: Sec-CH-UA-Reduced, then all subresource requests (for example, for images or stylesheets) and subnavigations (for example, iframes) will send the reduced UA string, even if the origins of those requests are not enrolled in the origin trial.
Load your website in Chrome M95 (or later) and start receiving the reduced UA string.
Submit any issues or feedback to the UA Reduction Github repository.
See https://uar-ot.glitch.me/ for a simple demonstration of the origin trial (along with the source code).
How to participate in the origin trial as a third-party embed?
Starting in Chrome 96, third-party embeds (for example, an iframe inside another site) can participate in the origin trial without requiring the top-level site to be enrolled.
To enroll as a third-party embed:
- Visit the Trial for User Agent Reduction and click Register.
- When creating the token, make sure to select the
- To receive the reduced User-Agent header from the third-party embed, update the HTTP response headers.
Some important points about running the origin trial on third-party embeds:
Critical-CHcannot be specified for third-party embeds, so the first navigation won't send the reduced UA string, although the subresource requests of the third-party embed will send the reduced UA string.
- If the origin trial is validated for the origin of a third-party embed, subsequent requests to the same origin in a top-level navigation will send the reduced UA string. For this reason, it's recommended to ramp up participation in the origin trial for both top-level and embed requests together.
- If the user agent has disabled third-party cookies, then the origin trial won't work for
How do I validate that the origin trial is working?
To validate that the origin trial is working, examine the request headers and ensure the following:
- The User-Agent header contains the reduced version. Refer to this list of samples of reduced UA strings. An easy way to tell is that the Chrome minor version string contains
Sec-CH-UA-Reducedheader is set to
The initial response's headers containing the origin trial token should look like:
Subsequent request headers containing the reduced UA string should look like:
How do I stop participating in the User-Agent Reduction origin trial?
At any given point in time during the trial, you can stop participating and receive the full User-Agent string. To stop participating:
- Send an
Accept-CHheader in your HTTP response that does not include
Accept-CHwith an empty value is a valid way to accomplish this if your site does not request any other Client Hints.
- Remove the
Origin-Trialheader for the User-Agent Reduction trial from your HTTP response.
- If set, remove
Critical-CHheader in your HTTP response.
How long will the origin trial last?
The UA Reduction origin trial will run for at least six months, which corresponds to about six Chrome milestones. The origin trial will appear in M95 and end by M101, at which point, Chrome will evaluate the feedback from the origin trial before proceeding with sending the reduced User-Agent string in a phased manner according to the rollout plan. If a site needs longer they can opt into a subsequent deprecation origin trial, which would allow them to access the full UA string for at least another six months. We will publish more details on the deprecation trial when it's ready.
How do I share feedback for the User-Agent Reduction origin trial?
Submit any issues or feedback to the UA Reduction Github repository.