This is a bug-fix release: spoofing now activates reliably on sites with strict security policies, plus a couple of internal startup errors are cleaned up.

• Fix: on some websites with strict Content-Security-Policy settings, identity spoofing could silently fail to turn on at all. It now works reliably on those sites too.
• Fix: removed a startup error from the extension's background process (icon loading) that could show up in the browser's extension error log.

This release is fixes and refinements: a popup-hang bug fix, a much more accurate Cloudflare-challenge bypass, a delete confirmation, and a way to open the extension full-screen.

• New: an expand icon next to the language switcher opens Spoof Me in a full browser tab instead of the small popup — handy when you have a lot of saved identities or want more room.
• Fix: the popup could open and stay permanently blank in certain cases (e.g. opening it repeatedly in quick succession); it now always finishes loading.
• Fix: the automatic Cloudflare-challenge bypass was over-triggering on ordinary pages that merely mentioned "Cloudflare" or "verification" in their text (e.g. blog posts, status pages), silently turning spoofing off for those sites. It's now based only on the actual challenge widget being present, and also recognizes Google reCAPTCHA and hCaptcha challenges.
• New: deleting an identity now asks for confirmation first, since it can't be undone.
• Fix: rapidly double-clicking "New Identity" no longer opens two overlapping forms.
• Fix: switching languages quickly no longer occasionally lands on the wrong language.
• Fix: fingerprint detections logged from several tabs at nearly the same time could silently overwrite each other; they're now all recorded.

his is a major update: several new anti-fingerprinting defenses, a new auto-pilot identity mode, a WebRTC IP-leak fix, headless/automation support, and a big expansion of supported UI languages.

• New: Chameleon mode (off by default) — automatically detects the country your VPN is currently exiting from and switches to a matching identity (regional language, timezone, and device template), so your browser identity stays consistent even when your VPN's exit server changes.
• New: WebGL fingerprinting defense — GPU vendor/renderer strings (UNMASKED_VENDOR_WEBGL / UNMASKED_RENDERER_WEBGL) now match the active identity instead of leaking the real GPU.
• New: Canvas fingerprinting defense — reads via toDataURL, toBlob, and getImageData (on both HTMLCanvasElement and OffscreenCanvas) now return deterministic, per-identity noised pixel data instead of the real, uniquely-identifying output.
• New: Audio fingerprinting defense — OfflineAudioContext-based audio fingerprinting now yields a deterministic, per-identity result instead of a hardware/driver-unique one.
• Fix: WebRTC could leak your real public IP address even with spoofing on; local candidate gathering is now restricted so it can no longer bypass the spoofed identity.
• New: Headless/automation support — a globalThis.SpoofMe API on the service worker (and a spoofme.config.json fallback) lets Puppeteer, Playwright, and other CDP-based tools drive identity switching without the popup UI.
• New: Language search in the language switcher, and translated country names throughout the UI (used by Chameleon mode and identity details).
• Added 53 more UI languages, bringing the total to 80 supported UI languages.

Added Mongolian and Khmer to the language switcher, bringing the total to 27 supported UI languages.

Added a small green dot on the toolbar icon whenever spoofing is active, so you can tell at a glance — without opening the popup — whether your identity is currently being spoofed.

Added a "Reset this site" button in the popup that clears cookies, cache, local storage, IndexedDB, and service workers for the site you're currently on — handy when a site like Cloudflare keeps recognizing you (and blocking sign-in) from data left over before you switched identity.

The whole extension UI can now be translated. Added a language switcher in the header covering 25 languages: English, Chinese, Russian, Farsi, Arabic, Hebrew, Vietnamese, Thai, Indonesian, Portuguese, French, Spanish, Bengali, Tamil, Telugu, Turkish, Hindi, Urdu, Romanian, Korean, Japanese, German, Ukrainian, Burmese, and Kazakh — including right-to-left layout support for Arabic, Hebrew, Farsi, and Urdu.

Added a toggle to turn off fingerprint-detection warnings entirely from the Detections tab, for users who don't want the on-page banner.

The fingerprint warning banner now auto-dismisses after a few seconds and can be dismissed by clicking anywhere on it (not just the × button), with a smooth fade-out.

Removed the unused "tabs" permission.

Fixed the fingerprint warning banner appearing duplicated and overlapping inside captcha/anti-bot widgets (Cloudflare Turnstile, Google reCAPTCHA, hCaptcha, Arkose Labs/FunCaptcha, DataDome, Yandex SmartCaptcha, and similar) embedded on a page. The banner now only shows once, on the actual page itself.

Fixed the fingerprint warning banner appearing duplicated and overlapping inside captcha/anti-bot widgets (Cloudflare Turnstile, Google reCAPTCHA, hCaptcha, Arkose Labs/FunCaptcha, DataDome, Yandex SmartCaptcha, and similar) embedded on a page. The banner now only shows once, on the actual page itself.

Reduced extension package size from ~1.4 MB to ~50 KB by removing an unused master icon asset from the build.

Added a Randomize button when creating an identity: generates a full random identity (browser, OS, timezone, language, screen size) with a fun region-themed name.

Expanded language and timezone options to cover far more countries and locales.

Fixed a bug where the "enable spoofing" toggle could be switched on with no identity selected.

1.2.1: Reduced extension package size (~1.4 MB → ~50 KB) by removing an unused master icon asset from the build. No functional changes.

What’s new in v1.2.0:

• Added edit support for all identities and fixed saving so edits update the existing identity instead of creating duplicates.
• Added delete support for preset identities.
• Added a back button in the identity form for easier navigation.
• Improved fingerprint detection so it runs consistently.
• Expanded spoofed signals to include user agent, language, screen properties, timezone, and device pixel ratio.
• Expanded available platform presets, including Apple Silicon, iPad, Linux ARM64, FreeBSD, and Win64.
• Minor release packaging improvements.