A device profile is a bundle of client-side traits that helps systems recognize a device or session. It can include operating system details, browser version, language, time zone, screen size, hardware hints, and other signals collected by the client or inferred by the server. In security tooling, a device profile is used to tell one returning user session from another, even when the IP address changes.
This matters because attackers often try to reuse accounts, test stolen payment data, or automate abuse while hiding behind proxies. If a fraud system only checks the IP address, that traffic may look legitimate. Defenders therefore compare device profiles with behavior over time, account history, and transaction patterns. Attackers may spoof or rotate device traits, but inconsistencies between the device profile and the rest of the session can still expose automation or reuse.