Skip to main content
For comprehensive authentication guidance including real browser profiles, storage state, and 2FA, see the Authentication Guide.

How it Works

  1. Text Filtering: The LLM only sees placeholders (x_user, x_pass), we filter your sensitive data from the input text.
  2. DOM Actions: Real values are injected directly into form fields after the LLM call

Best Practices

  • Use Browser(allowed_domains=[...]) to restrict navigation
  • Set use_vision=False to prevent screenshot leaks
  • Use storage_state='./auth.json' for login cookies instead of passwords when possible