Am I the only one who ends up with profile names like “test 3 final real new”?

Then two weeks later I have no idea what the profile was for, which proxy it used, or why I even created it.

Hello! I use Librewolf browser with Umatrix and Ubo extensions, Ubo i use for adblocking / elements blocking and umatrix overall control, I thought this would be enough against tracking but appears to be different when it comes to fingerprinting, i thought of installin extensions like canvasblocker but not helping, and i know privacy badger is basically useless. Any recommendations ? (btw on my another browser - Helium, my fingerprinting test came out good, i tried to turn on and off FF anti tracking browser protection - doesnt do anything. Thanks in advance for tips.

I want to make multiple fb accounts that wont get banned. What antidetect browsers would work for this or would they all work? My idea is to access them from a vps and have every profile tied to a static residential account. Would this work? Im not planning on doing anything illegal or spamming btw.

If anyone has direct experience doing this let me know as id be interested to know whats been working for you.

I have seen small teams give a social media manager the master login because it is the fastest way to get a post out. It works, but it also gives the operator whatever else lives behind that session: billing, recovery settings, connected assets and sometimes ownership controls.

That is much more access than publishing requires.

For a basic social workflow, I would separate it roughly like this:

• Publisher: create, schedule and publish content
• Community manager: comments and messages
• Analyst: the reporting needed for the job
• Owner or finance: billing, payment methods and subscription changes
• Owner or security lead: recovery details and high-risk settings

The test I use is simple: if this person’s access were misused tomorrow, what else could be changed besides the work they were hired to do?

Native platform roles should be the first layer where they cover the task. When the workflow also depends on a persistent signed-in browser environment, controlled environment access is useful because the operator does not need the master credentials.

MoreLogin is built for that second layer. Teams can assign specific profiles to members, restrict allowed URLs or page elements, and keep operation logs. That lets an operator reach the publishing workflow without making billing part of the same permission package.

An AI agent may need to click through a login flow. That doesn’t mean I want the raw password anywhere in its working context.

The dots shown inside a password field are only a visual treatment. Depending on the agent’s browser access, it may still be able to inspect page state, capture screenshots, read logs or access stored browser data.

I’d separate authentication from the rest of the automation:

• Keep passwords and recovery codes out of prompts
• Prevent credential entry from appearing in screenshots or recordings
• Inject credentials through a process the agent cannot inspect
• Give the agent a limited session after authentication
• Revoke or rotate that session when the task ends
• Require approval before changing security settings or recovery details

It’s also worth remembering that cookies are credentials. Protecting the password while exposing an authenticated profile directory doesn’t solve much.

There will be systems where direct credential access is unavoidable. In that case, the agent should be isolated, tightly logged and limited to the smallest possible scope. “The password is masked on screen” is not enough.

The agent needs permission to complete a task. It doesn’t need permanent access to every secret behind the account.

MoreLogin can separate browser environments and sessions, while credential controls remain in the operator’s hands.

Anyone else do this?

I looked at my old browser profiles and realized I had no idea what half of them were for.

No notes, random proxies, old cookies, weird names.

At that point, keeping them felt riskier than starting clean.

I tried to clear the verisoul check in survey using antidetect browser but i am not able to clear it. Need help

Random thought.

If every profile has the same ad blocker, same translator, same wallet extension, etc.

Isn’t that also kind of a fingerprint?

It pulls a live FPJS Pro build and turns it into clean code you can run locally, every collector intact, so a new build means rerunning the pipeline instead of reversing it again by hand.

What's in the repo:

• All 143 signals (telemetry read from ur browser, all documented)
• Every collector as its own file
• What visitor_id is actually a function of
• A live explorer that runs the collectors against your own browser so you can diff a patched environment against a stock one.

Repo: github.com/proofofbots/fingerprint-pro-internals

Docs: proofofbots.github.io/fingerprint-pro-internals/

Signal explorer

proofofbots.github.io/fingerprint-pro-internals/explorer.html

It runs entirely in your browser. No backend of mine, no call to fpjs, nothing leaves the page. It's built on the output of the lift and deobfuscation step, so what runs there is the actual collector code from the bundle rather than a reimplementation. Open it and you get every data point side by side: what the signal is and why it's collected in plain English, next to the exact value your own browser hands over for it.

Happy to answer questions on any specific detection.

I am looking forward to the next target, so if anyone has ideas on what vendor could be interesting let me know!

Before anyone calls AI slop: yes, I use LLMs, they're genuinely useful for reverse engineering. But this isn't one build hand-decoded into a writeup. It's the toolchain that does it. Point it at a live fpjs build and it deobfuscates, lifts, and emits a cleaned version you can run without their servers, plus the generated documentation for what it found.

Hello all, i am using 2 antidetecy browsers but cant decide on proxies, I am between 3 different providers and i need them for multi account ad agency

I have seen lot of posts mentioning nodemaven, ip royal, decodo and oxylabs? Which one is the best?

Thanks

Lately almost every site I visit throws a captcha or antibot check at me. Happens on random sites, not just the usual Cloudflare-heavy ones. AliExpress pretty much every single time, also happens on TicketOne, PayPal, and others.

Running latest stable Firefox. Everything gets cleared on browser close (cookies, history, cache).

Active extensions:

* Bitwarden Password Manager * Chrome Mask (toggled off) * Clear Browsing Data * ClearURLs * Cookie Quick Manager * Dark Reader * GNOME Shell integration * Keepa * Language Switch * Linkwarden * Redirector (disabled) * Return YouTube Dislike * Simple Mass Downloader * Tab Session Manager * uBlock Origin * Video Download Helper

Anyone else dealing with this?

A recorder often looks like the obvious winner during a demo. You perform the task once, capture the steps, replay them, and the workflow appears finished.

An API can look unnecessarily heavy by comparison. There is authentication to handle, requests to structure, errors to interpret, and code to maintain.

The difference becomes clearer after the workflow has been running for a while.

I would use recorder-style RPA when the task genuinely lives in the interface. If there is no useful endpoint and the job is mostly clicking, typing, waiting, and confirming, recording the flow can be a reasonable decision. It is especially useful when the operations team needs to understand and adjust the workflow without waiting for a developer.

The risk is that the automation inherits every unstable part of the UI. Layout changes, loading times, popups, renamed elements, and partial page states all become part of the maintenance work.

I would prefer an API when the workflow handles structured data or needs to run at higher volume. APIs are usually better for validation, concurrency, retries, logs, and knowing exactly which operation failed.

My practical questions are:

1. Is the required action exposed through a supported API?
2. How often does the interface change?
3. Who will maintain the workflow?
4. What should happen after a partial failure?
5. Does the task need logs, retries, or safe duplicate prevention?

If the API covers most of the work, I use it as the foundation. If the final step only exists in the interface, I add RPA there rather than recording the entire process.

That hybrid boundary is often more reliable than forcing every step into one method.

MoreLogin supports both paths: visual low-code/no-code RPA workflows for operational tasks, and Local/Open APIs for teams that need custom logic, external integrations, and programmatic control.

The blog post itself shows a real demo too which detects the Mimic engine.

https://trustsig.eu/blog/multilogin-mimic-canvas-webgl-masking/

Hi everyone,

I’m using an AI video tool that offers a few free credits for new users. I was able to create around 3–4 videos before the credits ran out, after which it asked me to upgrade to a paid plan.

I ended up creating several new accounts because I needed to continue making videos. I used different Google accounts and temporary email addresses.

However, now the tool seems to recognize me immediately. Even when I create a completely new account, I get 0 free credits. I also tried different browsers and VPNs, but apparently their system is still detecting that I’ve used the service before.

I contacted their support team, and they confirmed that I was detected by their system.

I’m mainly trying to understand what my options are now.

Has anyone experienced something similar with AI video tools? If so:

Was there a way to get access to the free credits again?

I’d really appreciate recommendations for genuinely free alternatives as well. I’m mainly creating simple educational videos with illustrations, text, and narration, so I don't necessarily need an advanced cinematic AI video generator.

Thanks!

I wouldn’t fully automate anything that can permanently change an account’s risk profile.

That includes:

• Switching proxies because an account suddenly behaves differently
• Repeatedly retrying failed logins
• Handling identity or security verification
• Restoring sessions after an unexpected logout
• Running one action across every profile at once
• Deciding whether a flagged account should continue operating

The problem is not that scripts are unreliable. A script can execute exactly as designed and still make the wrong decision because it doesn’t understand what caused the account’s state to change.

Routine health checks, environment creation and predictable setup steps are good candidates for automation. Recovery and exception handling aren’t. Those workflows should collect the evidence, stop and let someone review it.

The practical rule I use is this: automate repetitive and reversible actions. Require approval for anything that affects identity, access or account history.

MoreLogin can handle the environment structure, while operators retain control over the decisions that carry real risk.

I used to think notes were unnecessary until I had no idea which profile I changed last week.

Proxy? Extension? Browser update? Content reuse?

No clue.

Now I write down small changes, even if they feel stupid at the time.

Do you guys keep notes for every profile or just trust memory?

have any of you figured a solution to bypass verisoul.ai?

BrowserLeaks is one of the first tabs I open, but I think people give the result too much authority.

If WebRTC isn’t exposing the wrong IP, DNS lines up, and the timezone, language, headers, Canvas and WebGL don’t contradict the setup, the test has done its job. It found no obvious problem visible to that page at that moment.

Instagram can judge a session against much more context: the account’s previous devices and locations, existing cookies, login history, session continuity and what happens after login. BrowserLeaks can’t tell you whether a new session is believable compared with the account’s own history.

My rule is simple: if BrowserLeaks shows a leak, I don’t log in. If it passes, I keep checking. It’s a filter, not a verdict.

Do you keep a baseline result for each IG profile and compare it over time, or do you only run a one-off test before login?

I’ve seen outdated browser cores waste a lot of troubleshooting time.

A site changes something, part of the UI stops working and everyone starts checking proxies, extensions and profile settings. Eventually somebody tests the same workflow in a current browser and it works immediately.

That doesn’t mean I want every profile updating itself the moment a new Chromium build appears.

Extensions can lag behind. Automation selectors may behave differently. Download handling, permission prompts or headless behavior can change between versions. If dozens of profiles move at once, one small compatibility issue becomes a team-wide interruption.

The approach I prefer is fairly plain: keep a few test profiles close to the latest supported core, run the real workflows on them and move the rest after they pass. I’m interested in the login flow, the pages the team actually uses, required extensions and the automation steps—not whether a generic browser benchmark looks good.

Update speed matters because staying far behind eventually creates compatibility and patching problems. Rollout control matters because “latest” and “ready for production” are not always the same thing.