Wikipedia's favicon, shown in Firefox

A favicon (/ˈfæv.ɪˌkɒn/; short for favorite icon), also known as a shortcut icon, website icon, tab icon, URL icon, or bookmark icon, is a file containing one or more small icons[1] associated with a particular website or web page.[1][2] A web designer can create such an icon and upload it to a website (or web page) by several means, and graphical web browsers will then make use of it.[3] Browsers that provide favicon support typically display a page's favicon in the browser's address bar (sometimes in the history as well) and next to the page's name in a list of bookmarks.[3] Browsers that support a tabbed document interface typically show a page's favicon next to the page's title on the tab, and site-specific browsers use the favicon as a desktop icon.[1]

History

In March 1999, Microsoft released Internet Explorer 5, which supported favicons for the first time.[4] Originally, the favicon was a file called favicon.ico placed in the root directory of a website. It was used in Internet Explorer's favorites (bookmarks) and next to the URL in the address bar if the page was bookmarked.[5][6][7][4] A side effect was that the number of visitors who had bookmarked the page could be estimated by the requests of the favicon. This side effect no longer works, as all modern browsers load the favicon file to display in their web address bar, regardless of whether the site is bookmarked.[6]

Standardization

In 2003, the .ico format was registered by a third party with the Internet Assigned Numbers Authority (IANA) under the MIME type image/vnd.microsoft.icon.[8][9] However, when using the .ico format to display as images (e.g. not as favicon), Internet Explorer cannot display files served with this standardized MIME type.[9] A workaround for Internet Explorer is to associate .ico with the non-standard image/x-icon MIME type in web servers.[10]

RFC 5988 established an IANA link relation registry,[11] and rel="icon" was registered in 2010 based on the HTML5 specification. The popular <link rel="shortcut icon" type="image/png" href="image/favicon.png"> theoretically identifies two relations, shortcut and icon, but shortcut is not registered and is redundant. In 2011 the HTML living standard[12] specified that for historical reasons shortcut is allowed immediately before icon;[13] however, shortcut does not have a meaning in this context.

Legacy

Internet Explorer 5–10 supports only the ICO file format. Netscape 7 and Internet Explorer versions 5 and 6 display the favicon only when the page is bookmarked, and not simply when the pages are visited as in later browsers.[4]

Examples of favicons

Browser implementation

The following tables illustrate support of various features with major web browsers. Unless noted, the version numbers indicate the starting version number of a supported feature.

Image file format support

The following table illustrates the image file format support for the favicon.

Browser Image File Format
ICO PNG GIF Animated GIFs JPEG APNG SVG
Edge Yes Yes Yes No Yes Un­known Yes
Firefox 1.0[14] 1.0[14] 1.0[14] Yes[15] Yes 3.0[15] 41.0[16]
Google Chrome Yes Yes 4.0 No[17][18] 4.0 No 80[19]
Internet Explorer 5.0[20] 11.0[21] 11.0[21] No[20] No[20] No[20] No[22]
Opera 7.0[23] 7.0[23] 7.0[23] 7.0[23] 7.0[23] 9.5 44.0[24]
Safari Yes 4.0 4.0 No 4.0 No Non-standard (12.0)[a][25][26]

Additionally, such icon files can be 16×16, 32×32, 48×48, or 64×64 pixels in size, and 8-bit, 24-bit, or 32-bit in color depth.[1][3] The ICO file format article explains the details for icons with more than 256 colors on various Microsoft Windows platforms.

Use of favicon

This table illustrates the different areas of the browser where favicons can be displayed.

Browser Address bar Address bar drop down list Links bar Bookmarks Tabs Drag to desktop
Edge No Yes Yes Yes Yes Yes
Firefox 1.0–12.0: Yes[27]
> v13: No[28] 		Yes Yes Yes[27] Yes[27] Yes[27]
Google Chrome No[27] No Yes[27] Yes[27] 1.0[27] No[27]
Internet Explorer 7.0[27] No 5.0[27] 5.0[27] 7.0[27] 5.0[27]
Opera 7.0–12.17: Yes
> v14: No[27] 		No 7.0[27] 7.0[27] 7.0[27] 7.0[27]
Safari Yes[27] Yes No[27] Yes[27] 1.0–8.0: Yes
9.0–11.0: No
> 12.0: Optional[29] 		No[27]

Opera Software added the ability to change the favicon in the Speed Dial in Opera 10.[30]

How to use

This table illustrates the different ways the favicon can be recognized by the web browser. The standard implementation uses a link element with a rel attribute in the <head> section of the document to specify the file's format, name and location.

Edge Firefox Google Chrome Internet Explorer Opera Safari 
<link rel="shortcut icon"
 href="https://example.com/myicon.ico">
Yes[4] Yes[4] Yes[4] Yes[4][20] Yes[4] Yes 
<link rel="icon"
 type="image/vnd.microsoft.icon"
 href="https://example.com/image.ico">
Yes Yes Yes Yes (from IE 9)[21] Yes Yes 
<link rel="icon" type="image/x-icon"
 href="https://example.com/image.ico">
Yes[4] Yes[4] Yes[4] Yes (from IE 9)[31] Yes[4] Yes 
<link rel="icon"
 href="https://example.com/image.ico">
Yes Yes Yes Yes (from IE 11)[21] Yes Yes 
<link rel="icon" type="image/gif"
 href="https://example.com/image.gif">
Yes Yes Yes Yes (from IE 11)[21] Yes Yes 
<link rel="icon" type="image/png"
 href="https://example.com/image.png">
Yes Yes Yes Yes (from IE 11)[21] Yes Yes 
<link rel="icon" type="image/svg+xml"
 href="https://example.com/image.svg">
Yes Yes Yes Yes Yes No 
<link rel="mask-icon"
 href="https://example.com/image.svg" color="red">
No No No No No Yes[32]
favicon.ico located in the website's root Yes[citation needed] Optional[b] Yes Yes Optional[c] Yes
precedence: prefer root or (X)HTML linked version linked[27] linked[27] linked[27] linked[27] ? ?
  1. ^ Safari, since version 12.0, supports single-color SVG favicons in some cases in a non-standard mask-icon format.
  2. ^ Firefox only accepts favicon.ico in the website's root without a <link> tag if the setting browser.chrome.site_icons is set to true in about:config. The default value is true. If set to false, these favicons are ignored.
  3. ^ Opera loads /favicon.ico only if Multimedia/Always load favicon option in opera:config is set to 1. See Opera Support page for more details.

If links for both PNG and ICO favicons are present, PNG-favicon-compatible browsers select which format and size to use as follows. Firefox and Safari will use the favicon that comes last. Chrome for Mac will use whichever favicon is ICO formatted, otherwise the 32×32 favicon. Chrome for Windows will use the favicon that comes first if it is 16×16, otherwise the ICO. If none of the aforementioned options are available, Chrome will use whichever favicon comes first, exactly the opposite of Firefox and Safari. Indeed, Chrome for Mac will ignore the 16×16 favicon and use the 32×32 version, only to scale it back down to 16×16 on non-retina devices. Opera will choose from any of the available icons at random.[33]

Only SeaMonkey does not fetch favicon.ico files in the website's root by default.[34]

HTML5 recommendation for icons in multiple sizes

The current HTML5 specification recommends specifying multiple sizes for the icons, using the attributes rel="icon" sizes="space-separated list of icon dimensions" within a <link> tag.[35] Multiple icon formats, including container formats such as Microsoft .ico and Macintosh .icns files, as well as Scalable Vector Graphics may be provided by including the icon's content type in the format type="file content-type" within the <link> tag.

As of iOS 5, Apple mobile devices ignore the HTML5 recommendation and instead use the proprietary apple-touch-icon method detailed below. The Google Chrome web browser however, will select the closest matching size from those provided in the HTML headers to create 128×128 pixel application icons, when the user chooses the Create application shortcuts... from the "Tools" menu.

Home screen icons on mobile devices

On Apple iPhones and iPads, as well as Android mobile devices, users can pin web pages as shortcuts icons to their home screen. These shortcut icons look similar to regular apps and web developers can provide dedicated icons for them.

Apple devices

For Apple devices with the iOS operating system version 1.1.3 or later, users can pin a website to the home screen using the Add to Home Screen button within the share sheet in Safari.[36][37]

This works for any website. But for iOS to display the shortcut with an icon, the a website needs to supplying a <link rel="apple-touch-icon" ...> in the <head> section of documents served by the website. If the custom icon is not provided, a thumbnail of the web page will be put on the home screen instead.[38]

The app icon sizes on the different device classes differ. The recommended sizes for the icons are 152x152 for iPads (until iPad 2, released in 2011), 167x167 for iPads with Retina screens (iPad 3 and later) and 180x180 for iPhones. If no icon in the matching size is provided, iOS will pick the largest icon with rel="apple-touch-icon" and scale it automatically.[39]

Example code[40]
<!-- For iPad -->
 <link rel="apple-touch-icon" type="image/png" sizes="167x167" href="favicon-167x167.png">

<!-- For iPhone -->
 <link rel="apple-touch-icon" type="image/png" sizes="180x180" href="favicon-180x180.png">

The icon file referenced by apple-touch-icon is modified to add rounded corners. On the iOS versions prior to iOS 7, a drop shadow, and reflective shine would be added, and apple-touch-icon-precomposed icon may be provided to instruct devices not to apply reflective shine on the image.[37][38]

No HTML is required by browsers or mobile devices to retrieve these icons.[38] The website's root is the default location for the file apple-touch-icon.png (in order of priority).[37][38]

Android devices

On Android devices, users can use the Add to home screen function in Chrome's tools menu to pin a web page to their home screen.

This also works for any website, but if no favicon is provided, a generic icon is used. As Android app icons are sized in 48x48 points, website should provide favicons sized in multiples of 48x48 pixels. For modern high resolution devices, Google recommends providing icons in 192x192 pixels.[41]

Example code[40]
<!-- For Android -->
 <link rel="icon" type="image/png" sizes="48x48" href="favicon-48x48.png">
 <link rel="icon" type="image/png" sizes="192x192" href="favicon-192x192.png">

Android also supports Web Manifest files, which makes it possible to integrate web sites deeper within the system. A Web Manifest is a JSON file, that specifies meta data for a progressive web app. It allows the developer to not only provide the icons but also a short name for display on the home screen as well as theme colors.[42] However, providing a web manifest file is not necessary for the Add to home screen feature to work.[40]

Animated favicons

Various browsers such as Firefox and Opera support animation of favicons. A bug report has been open for Firefox since 2001 requesting a way to disable this feature.[43][44]

Limitations and criticism

Due to the need always to check for it in a fixed location, the favicon can lead to artificially slow page-load time and unnecessary 404 entries in the server log if it is nonexistent.[6]

The W3C did not standardize the rel-attribute, so there are other keywords such as shortcut icon that are also accepted by the user agent.[45][20]

Favicons are often manipulated as part of phishing or eavesdropping attacks against HTTPS web pages. Many web browsers display favicons near areas of the web browser's UI, such as the address bar, that are used to convey whether the connection to a website is using a secure protocol like TLS. By changing the favicon to a familiar padlock image an attacker can attempt to trick the user into thinking they are securely connected to the proper website. Automated man-in-the-middle attack tools such as sslstrip utilize this trick.[46] In order to eliminate this, some web browsers, such as Firefox or Google Chrome, display the favicon within the tab whilst displaying the security status of the protocol used to access the website beside the URL.[47]

Since favicons are usually located at the root of the site directory on the server, they can be employed with some reliability to disclose whether a web client is logged into a given service. This works by making use of the redirect-after-login feature of many websites, by querying for the favicon in a redirect-after-login URL and testing the server response to discern whether the user is given the requested resource (which means they are logged in), or instead redirected to the login page (which means that they are not logged into the service).[48]

In 2021, a method for browser tracking using favicons was demonstrated by researchers at the University of Illinois.[49]

References

  1. ^ a b c d Lane, Dave (9 August 2008). "Creating a Multi-Resolution Favicon Including Transparency with the GIMP". Egressive.com. Archived from the original on 25 December 2010. Retrieved 25 February 2011.
  2. ^ "What's With Google's New Mini Icon?". BBC. 20 January 2009. Retrieved 25 February 2011. That 16x16 pixel square is the size of the favicon in question, if not the scope.
  3. ^ a b c Apple, Jennifer. "Favicon — How To Create A Favicon.ico". Photoshopsupport.com. Retrieved 25 February 2011.
  4. ^ a b c d e f g h i j k l "How to Add a Shortcut Icon to a Web Page". Microsoft Developer Network. Microsoft. Archived from the original on 5 January 2018. Retrieved 15 March 2010.
  5. ^ McGrew, Darin (26 April 2007). "Web Authoring FAQ – 8.11. How can I have a custom icon when people bookmark my site?". htmlhelp.com. Retrieved 23 February 2011.
  6. ^ a b c Heng, Christopher (7 September 2008). "What is Favicon.ico? Personalise Your Site's Bookmarks". thesitewizard.com. Retrieved 23 February 2011.
  7. ^ "Creating favicons with Adobe Photoshop and GoLive". Adobe GoLive. Archived from the original on 7 December 2003. Retrieved 25 February 2011.((cite web)): CS1 maint: unfit URL (link)
  8. ^ Butcher, Simon (3 September 2003). "Published specification". Internet Assigned Numbers Authority. Retrieved 25 February 2011.
  9. ^ a b "IE9 RC Minor Changes List". IEInternals. Retrieved 7 April 2016.
  10. ^ Irish, Paul (15 December 2010). "commit 37b5fec090d00f38de64 to paulirish's html5-boilerplate". GitHub. Retrieved 25 February 2011.
  11. ^ "Link Relations". IANA.
  12. ^ Ian Hickson (19 January 2011). "HTML is the new HTML5". The WHATWG Blog. WHATWG.
  13. ^ "HTML5 revision r6404". HTML5 Tracker.
  14. ^ a b c David (19 July 2003). "Mozilla 0.9.6 Release Notes". Mozilla. Retrieved 23 February 2011.
  15. ^ a b "Bug 111373: don't allow animated site icons (favicons)". Retrieved 1 June 2014.
  16. ^ Daniel Holbert (12 June 2015). "Bug 366324 – SVG site icons (favicons, shortcut icons) support – comment 55". Bugzilla@Mozilla. Mozilla. Retrieved 12 June 2015.
  17. ^ tracker, chromium. "no movement in favicon". chromium.org. Retrieved 11 April 2016.
  18. ^ tracker, chromium. "Animated Favicons not supported". chromium.org. Retrieved 8 November 2018.
  19. ^ "Support for SVG in favicons - Chrome Platform Status". 19 November 2019. Retrieved 16 January 2020.
  20. ^ a b c d e f Davis, Jeff (27 December 2007). "why doesn't the favicon for my site appear in IE7?". jeffdav on code. Microsoft. Retrieved 11 March 2013.
  21. ^ a b c d e f Eric Lawrence (7 September 2013). "Fun with Favicons". Microsoft. Archived from the original on 23 May 2021. Retrieved 25 June 2022.
  22. ^ "SVG favicon support". Microsoft Connect. 3 May 2013. Retrieved 4 September 2014.
  23. ^ a b c d e "Opera 7 for Windows Changelog". Opera Software. 28 January 2003. Retrieved 28 February 2011.
  24. ^ "What's new in Opera". Opera Software. Retrieved 24 June 2017.
  25. ^ "Safari Technology Preview 58, with Safari 12 Features, is Now Available". WebKit. 6 June 2018. Retrieved 3 March 2019.
  26. ^ "Favicons. Finally". Iconfactory. 7 June 2018. Retrieved 3 March 2019.
  27. ^ a b c d e f g h i j k l m n o p q r s t u v w x y z aa Francis, Lewis (11 December 2007). "Chart of modern browser support for favicon". informationgift.com. Retrieved 23 February 2011.
  28. ^ "Firefox deems favicons risky, banishes them from address bar". Engadget. Retrieved 10 September 2012.
  29. ^ "How to enable favicons in Safari so you can identify websites in tabs graphically". iDownloadBlog. 14 June 2018. Retrieved 14 October 2020.
  30. ^ "Opera 10.0 beta 2 for Windows changelog". Opera Software. 16 July 2009. Retrieved 27 February 2011.
  31. ^ "IE9 RC Minor Changes List". Microsoft. 11 February 2011. Retrieved 16 November 2013.
  32. ^ "Creating Pinned Tab Icons". Apple Inc. 12 December 2016. Retrieved 9 April 2019.
  33. ^ Jonathan T. Neal (16 January 2013). "Understand the Favicon". Archived from the original on 23 May 2013. Retrieved 30 May 2013.
  34. ^ Mathias Bynens (14 April 2010). "rel="shortcut icon" considered harmful". Retrieved 15 November 2011.
  35. ^ "HTML Living Standard, Section 4.6.6.6 'Link type "icon"'". WHATWG. Retrieved 17 November 2015.
  36. ^ "iPhone Human Interface Guidelines for Web Applications: Metrics, Layout Guidelines, and Tips". Apple Inc. Archived from the original on 4 June 2010. Retrieved 27 May 2010.
  37. ^ a b c "Safari Web Content Guide: Specifying a Webpage Icon for Web Clip". Apple Inc. 15 November 2010. Archived from the original on 20 May 2023. Retrieved 2 June 2023.
  38. ^ a b c d McLellan, Drew (17 January 2008). "How To Set an Apple Touch Icon for Any Site". Allinthe head.com. Retrieved 11 March 2011.
  39. ^ "Configuring Web Applications". developer.apple.com. Retrieved 3 July 2021.
  40. ^ a b c "How to add a favicon to your website – The modern browser guide". Loqbooq Blog. Archived from the original on 11 July 2021. Retrieved 3 July 2021.
  41. ^ "Material Design". Material Design. Retrieved 3 July 2021.
  42. ^ "Add to Home screen - Progressive web apps (PWAs) | MDN". developer.mozilla.org. Retrieved 3 July 2021.
  43. ^ "Bug 111373 - don't allow animated site icons (favicons)". bugzilla.mozilla.org. 21 November 2001.
  44. ^ "Firefox Bug 111373 - don't allow animated site icons (mozilla.org)". Hacker News. 7 July 2015.
  45. ^ Dubost, Karl (24 October 2005). "How to Add a Favicon to your Site". World Wide Web Consortium. Retrieved 25 February 2011.
  46. ^ Marlinspike, Moxie (21 February 2011). "Defeating Ssl Using Sslstrip (Marlinspike Blackhat)". (see description of video). SecurityTube. Archived from the original on 13 July 2011. Retrieved 9 July 2011.
  47. ^ "Firefox version 14 features". 18 July 2012. Retrieved 18 July 2012.
  48. ^ Linus, Robin. "Your Social Media Fingerprint". Retrieved 14 October 2016.
  49. ^ Goodin, Dan (19 February 2021). "New browser-tracking hack works even when you flush caches or go incognito". Ars Technica. Retrieved 21 February 2021.

External links

Web browsers
Categories