Lockdown browser bypasses: what the workaround videos leave out

Short answer: A lockdown browser controls one machine: it blocks other applications, restricts copying, and watches the exam window. It cannot control the room. The bypass families all exploit that boundary, a phone below the desk line, a virtual machine hiding the host, a second person feeding answers. Institutions that treat the browser as the whole defence are surprised every term. Institutions that design the assessment around it are not.

The second device is the oldest bypass

No software on the exam laptop can see a phone propped against a textbook. Webcam proctoring tries to close the gap with room scans and gaze tracking, and both create their own problems: false flags for ordinary movement, and privacy complaints that are often justified. The honest position is that a remote, closed book, high stakes exam is hard to secure, and the browser is one layer in that admission.

Where the stakes allow it, open book design removes the prize. An exam that permits reference material and asks for application, calculation with the student's own numbers, or critique of a supplied source gives a phone full of notes very little to sell.

Virtual machines and the host underneath

Running the lockdown browser inside a virtual machine leaves the host free: notes, messaging, and a second browser one keystroke away. Detection looks for VM artefacts, hypervisor signatures, unusual device lists, and timing behaviour, and it catches careless setups. Determined setups spoof much of it. This is an arms race the institution does not fully win, which is why VM detection should flag for review rather than promise prevention.

Requiring a pre exam system check on the actual exam day configuration helps, because many bypasses are assembled the night before on a differently configured machine. It will not stop a prepared cheat. It stops the borrowed method copied from a video that morning.

The hardest bypass has no software footprint: another person in the room, reading the screen on a mirrored display or hearing questions read aloud, feeding answers by gesture, note, or earpiece. Mirrored displays can be detected through display enumeration. A quiet human cannot, reliably, and claims otherwise should be read as marketing.

The helper off camera

Randomised question banks and per student variants shrink the helper's value. If the person beside you has different numbers, a different case, and a different question order, whispered answers stop lining up. Assessment logistics, again, doing work that surveillance cannot.

Some credentials genuinely require unaided recall under controlled conditions, and those belong in test centres, not bedrooms. Many course exams do not; they inherited closed book habits from a room where control was free. Sorting one from the other is the decision that determines whether your term is spent fighting bypass videos or marking better questions.

Decide what the exam is actually protecting

Whatever you choose, tell students plainly what is monitored, what is flagged, and what happens next. A regime that feels arbitrary produces appeals and workarounds as a sport. A regime that is explained produces mostly compliance, plus a smaller, clearer set of real cases.

Keep reading: Proctoring flags need a human review queue, not an automatic accusation, Impersonation at test centres: the ID check is the exam before the exam.

Frequently asked questions

Can a lockdown browser detect a second phone?

Not directly. The browser controls the exam machine only. Webcam proctoring may flag gaze or movement patterns, but a phone outside the camera view is beyond the software's reach, which is why exam design has to share the load.

Can a lockdown browser detect a second phone?

Most attempt VM detection and block or flag common configurations. Determined users can spoof many of the signals, so VM detection works best as a review flag combined with assessment design, not as a guarantee.

Can a lockdown browser detect a second phone?

No. It changes what is being measured, from recall that a device can supply to application and judgement that a device supports but cannot replace. For many subjects that is the skill the qualification claims to certify anyway.

Can a lockdown browser detect a second phone?

Test the method, close the technical gap if one exists, and check whether the method actually defeats the question design. Then communicate the consequence framework calmly. Chasing every video publicly teaches the whole cohort the catalogue.

See your own numbers.

A free bot-traffic audit shows the human-automated split in your live traffic - no code changes, no commitment.

Get a free bot-traffic audit