You can store an identification string it in the browser cache. But it’ll be available to anyone who uses the same device + it won’t be available if the visitor cleans up the cookies (anyway this way is not considered “secured”). But if it fits to your requirements - go for it.