files/en-us/web/http/reference/headers/sec-ch-ua/index.md
{{SeeCompatTable}}{{SecureContext_Header}}
The HTTP Sec-CH-UA {{Glossary("request header")}} is a user agent client hint which provides the user-agent's branding and significant version information.
The Sec-CH-UA header provides the brand and significant version for each brand associated with the browser in a comma-separated list.
The header therefore allows the server to customize its response based on both shared brands and on particular customizations in their respective versions.
Sec-CH-UA is a low entropy hint.
Unless blocked by a user agent permission policy, it is sent by default, without the server opting in by sending {{HTTPHeader("Accept-CH")}}.
The header may include "fake" brands in any position and with any name. This is a feature designed to prevent servers from rejecting unknown user agents outright, forcing user agents to lie about their brand identity.
<table class="properties"> <tbody> <tr> <th scope="row">Header type</th> <td> {{Glossary("Request header")}}, <a href="/en-US/docs/Web/HTTP/Guides/Client_hints">Client hint</a> </td> </tr> <tr> <th scope="row">{{Glossary("Forbidden request header")}}</th> <td>Yes (<code>Sec-</code> prefix)</td> </tr> </tbody> </table>[!NOTE] The {{HTTPHeader("Sec-CH-UA-Full-Version-List")}} header is the same as
Sec-CH-UA, but includes the full version number rather than the significant version number for each brand.
Sec-CH-UA: "<brand>";v="<significant version>", …
The value is a comma separated list of brands in the user agent brand list, and their associated significant version number.
<brand>
"Not A;Brand".<significant version>
A brand is a commercial name for the user agent like: Chromium, Opera, Google Chrome, Microsoft Edge, Firefox, and Safari.
A user agent might have several associated brands.
For example, Opera, Chrome, and Edge are all based on Chromium, and will provide both brands in the Sec-CH-UA header.
The significant version is the "marketing" version identifier that is used to distinguish between major releases of the brand. For example a Chromium build with full version number "96.0.4664.45" has a significant version number of "96".
Sec-CH-UA is a low entropy hint.
Unless explicitly blocked by a user agent policy, it will be sent in all requests (without the server having to opt in by sending {{HTTPHeader("Accept-CH")}}).
Strings from Chromium, Chrome, Edge, and Opera desktop browsers are shown below. Note that they all share the "Chromium" brand, but have an additional brand indicating their origin. They also have an intentionally incorrect brand string, which may appear in any position and have different text.
Sec-CH-UA: "(Not(A:Brand";v="8", "Chromium";v="98"
Sec-CH-UA: " Not A;Brand";v="99", "Chromium";v="96", "Google Chrome";v="96"
Sec-CH-UA: " Not A;Brand";v="99", "Chromium";v="96", "Microsoft Edge";v="96"
Sec-CH-UA: "Opera";v="81", " Not;A Brand";v="99", "Chromium";v="95"
{{Specifications}}
{{Compat}}