-
Notifications
You must be signed in to change notification settings - Fork 221
migrate selenium to playwright stealth
If you are moving off Selenium because your scrape keeps getting the wrong page, it helps to know what the move actually changes and what it does not. The short version: switching frameworks removes one specific class of automation signal, the kind that comes from the driver process itself. It does not touch your address, your request rate, or the way you behave once the page loads.
This is a practical port. It maps the Selenium calls you already have to their Playwright equivalents, explains the one architectural difference that matters for detection, and shows where a patched browser fits on top. It answers the question in the title honestly: the migration helps with the driver layer, and you still supply the rest.
The visible difference is the API. The difference that matters for detection is the process model underneath it.
Selenium drives a browser through a separate WebDriver server: geckodriver for
Firefox, chromedriver for Chrome. Your Python talks to that server over HTTP, and
the server talks to the browser over the WebDriver protocol. That extra process is
the whole point of Selenium's portability, and it is also the thing that announces
itself to the page.
Playwright has no external driver. It speaks its own protocol to the browser directly, over a pipe, with nothing standing between your code and the engine. There is no second server to start, to keep in version-sync, or to leave a marker in the page. That is the durable architectural difference, and it is the same one covered in selenium-driverless vs invisible_playwright from the other direction: driverless tools exist precisely because the driver is the leak.
Here is the concrete mechanism, because "the driver leaks" is worth making exact.
When a page runs navigator.webdriver, a browser being driven through the WebDriver
protocol returns true. On Chrome, chromedriver additionally raises an
"automation-controlled" flag that surfaces in the browser's own UI hints and in
several derived signals. A one-line check reads either of these, and it is the first
thing any detector tries because it is free and definitive. Selenium sets both by
design: the protocol that makes it work is the protocol that sets the bit.
Bolt-on patches for this exist and age badly. The classic Selenium-side fix injects
JavaScript to redefine navigator.webdriver, which is exactly the overcorrection
worth avoiding: a genuine browser reports undefined, not false, so writing
false swaps one tell for another. The most cited helper for this pattern
has not shipped a release in years, which is its
own risk on a moving target. The background on why the property behaves this way,
and why false is not the clean value, is in
what navigator.webdriver really tells a site.
Playwright removes the source of that particular signal rather than papering over it:
no driver protocol, no bit to flip. invisible_playwright goes one step further and
pairs stock Playwright with a Firefox patched at the C++ level, so the browser
reports navigator.webdriver=false at the binary level, the way an ordinary Firefox
does, instead of through an injected script that a descriptor walk can catch. The
driver-layer tells are gone because the driver is gone and the engine tells the truth
about itself.
Most Selenium scripts are a thin loop over four verbs: open a URL, find an element, interact with it, read something back. Each maps cleanly.
| Selenium | Playwright | Note |
|---|---|---|
driver.get(url) |
page.goto(url) |
goto waits for load by default |
driver.find_element(By.CSS_SELECTOR, s) |
page.locator(s) |
locator is lazy, resolved on use |
element.click() |
page.locator(s).click() |
auto-waits for actionability |
element.send_keys(text) |
page.locator(s).fill(text) |
fill clears first; type for keystrokes |
element.text |
page.locator(s).inner_text() |
|
driver.page_source |
page.content() |
|
WebDriverWait(...).until(...) |
built into every action | explicit waits mostly disappear |
driver.quit() |
context manager exit | closes on block exit |
The Selenium version most people are porting:
from selenium import webdriver
from selenium.webdriver.common.by import By
driver = webdriver.Firefox()
try:
driver.get("https://example.com/login")
driver.find_element(By.CSS_SELECTOR, "#user").send_keys("alice")
driver.find_element(By.CSS_SELECTOR, "#pass").send_keys("secret")
driver.find_element(By.CSS_SELECTOR, "#submit").click()
print(driver.find_element(By.CSS_SELECTOR, ".result").text)
finally:
driver.quit()The direct Playwright port, no stealth layer yet:
from playwright.sync_api import sync_playwright
with sync_playwright() as p:
browser = p.firefox.launch()
page = browser.new_page()
page.goto("https://example.com/login")
page.locator("#user").fill("alice")
page.locator("#pass").fill("secret")
page.locator("#submit").click()
print(page.locator(".result").inner_text())Two things shrank. There is no driver object to start and quit, and the explicit
waits are gone because every Playwright action waits for the element to be actionable
on its own. The WebDriverWait boilerplate that fills a Selenium codebase mostly
just deletes.
The port above removes the driver process, which removes the driver-layer signal. It does not give you a realistic fingerprint: stock Playwright Firefox still looks like a clean automated browser on the machine surfaces (GPU, fonts, audio, screen). To add that, the launch is a two-line change from the port you just wrote, and nothing after it changes:
from invisible_playwright import InvisiblePlaywright
with InvisiblePlaywright(seed=42) as browser:
page = browser.new_page()
page.goto("https://example.com/login")
page.locator("#user").fill("alice")
page.locator("#pass").fill("secret")
page.locator("#submit").click()
print(page.locator(".result").inner_text())The object InvisiblePlaywright returns is a real Playwright Browser. Every method
you used above is the upstream method, documented in the upstream docs, so the body of
the script is identical to plain Playwright. The seed=42 makes the whole identity
reproducible: same seed, same GPU, canvas hash, audio context, fonts and screen, run
after run, which is what turns a flaky failure into one you can replay. Omit the seed
and each session gets a distinct identity instead.
An async codebase changes only the import and the await keywords:
from invisible_playwright.async_api import InvisiblePlaywright
async with InvisiblePlaywright(seed=42) as browser:
page = await browser.new_page()
await page.goto("https://example.com/login")
await page.locator("#user").fill("alice")For real work you pass a proxy the same way you would in Playwright, and the browser derives its timezone from the exit address so the two stories agree; the schemes and the DNS handling are in Configuration. Whether you run this patched engine alone or layer a page-level script on top is a real decision with a wrong answer (two spoofers contradict each other), covered in the stealth levels page.
The switch does nothing for your IP reputation, request rate, session history, or behavioral timing - it only closes the driver-layer signal. This is the honest half, and skipping it is how people migrate and stay blocked.
Dropping the WebDriver server removes the automation signals that live in the driver
layer: navigator.webdriver, the automation-controlled flag, the leftover globals a
driver injects. A patched engine adds a realistic fingerprint and a genuine TLS
handshake on top. That is a real and useful chunk of what detectors look at, and it is
why a well-configured session reads as an ordinary Firefox across the fingerprint, the
TLS layer and the driver layer.
It is not the whole of what they look at. The migration does nothing about:
- IP reputation. A datacenter address, or a proxy IP already on a list, fails on the network before any browser property is read. A perfect browser on a known IP still loses, so you supply a clean exit.
- Request rate and per-account quotas. Hitting one endpoint faster than a person could is a velocity signal no fingerprint hides. You supply human pacing.
- Session history. A brand-new session with no cookies and no prior visits looks new, whatever the browser reports.
- Behaviour and timing. Pointer motion, typing rhythm, and the shape of your pauses are watched by sites that fingerprint nothing at all.
The rule to carry out of this page: the framework switch removes the driver-layer tells, not your address, your rate, or your history, which are the usual reasons a scrape gets blocked in the first place. Fix those with the tools that fix those, and let the browser handle the browser.
Porting Selenium to Playwright is a mechanical job with a real payoff: the four verbs
map one-to-one, the explicit waits mostly delete, and the separate WebDriver server
that flipped navigator.webdriver to true goes away entirely. Adding
invisible_playwright on top is a two-line change to the launch and gives you a
reproducible, realistic Firefox that reports the driver bit as false at the binary
level.
What it buys you is that a session reads as a real browser driven by a real person across the fingerprint, TLS and driver layers, which is most of the detection surface and the reason it passes most checks. What it does not buy you is a clean IP, a sensible request rate, or a plausible history. Supply those yourself and the migration does its job; skip them and you will have ported your code and kept your block.
Will switching from Selenium to Playwright stop me getting detected? It removes the driver-layer tells, which is a real class of signal, and with a patched engine it adds a realistic fingerprint and TLS handshake. It does not fix your IP, your rate, or your behaviour, so it helps with some blocks and not others.
Why does Selenium set navigator.webdriver to true? Because it drives the browser
through the WebDriver protocol via a separate server (geckodriver or
chromedriver), and that protocol sets the bit by design. Playwright uses its own
protocol with no external driver, so there is no bit to set.
Can I just patch navigator.webdriver in Selenium instead? You can, and it ages
badly. A real browser reports undefined, not false, so an injected false is its
own tell, and the popular helper for this has not shipped in years.
How much of my Selenium code has to change? The launch and teardown, and the
find/interact calls map one-to-one. Most WebDriverWait boilerplate deletes because
Playwright actions auto-wait.
Is invisible_playwright a different API I have to learn? No. It returns a real
Playwright Browser, so every method is the upstream method. Only the launch line
differs from stock Playwright.
I ported everything and still get blocked. Why? Most likely the part the migration does not touch: the exit IP, the request rate, or the behaviour. Work those in the order a detection checklist suggests.
- The Selenium WebDriver protocol and its
geckodriver/chromedriverserver model, and Playwright's driverless protocol, each read from their own project documentation rather than from a summary. - This project's own fingerprint and TLS gates, which is where the claim that the driver layer, fingerprint and handshake read as a genuine Firefox is measured, and where the limits of that (IP, rate, behaviour) are stated plainly.
See also: selenium-driverless vs invisible_playwright for the same driver argument from the driverless side, what navigator.webdriver really tells a site for the mechanism, and the one-site detection checklist for what to check once the framework is not the problem.
Written while maintaining invisible_playwright, a Firefox patched at the C++ level driven by stock Playwright. The migration removes the driver, not the address; I have shipped both mistakes.
Documentation
Guides
-
Browser Identity
- navigator.webdriver is not the tell you think it is
- hardwareConcurrency, deviceMemory and storage quota
- Screen size and viewport tells in headless browsers
- Playwright headless vs headed: what detectors see
- Playwright User Agent: Why You Should Not Set It
- Client Hints and Sec-Fetch: headers that must agree
- Codec fingerprinting: canPlayType and MediaCapabilities
- Permissions API: the two answers that must agree
- CSS fingerprinting: what media queries reveal
- What privacy.resistFingerprinting actually does
- speechSynthesis.getVoices() returns an empty array
- Browser extensions are a fingerprint surface
- BFCache and pageshow.persisted under browser automation
- Service workers, storage partitioning and automation
- Web Workers: where page-level fingerprint patches fail
- fake-useragent is archived: what changes and what doesn't
- navigator.buildID and the stale build date tell
- navigator.maxTouchPoints and pointer consistency
- navigator.platform and oscpu on a spoofed OS
- navigator.vendor and productSub: the Firefox tells
- Accept-Language header vs navigator.languages
- window.devicePixelRatio: the pref that spoofs it
- Can you be fingerprinted in incognito mode?
- Is changing the user agent enough to avoid detection?
- Can a website tell you are running on a server?
- Can two devices share a browser fingerprint?
- Does clearing cookies stop fingerprint tracking?
- Color-gamut and HDR media queries as a fingerprint
- Battery API fingerprint: does Firefox expose it?
- Is navigator.connection a fingerprint in Firefox?
- Can the Gamepad API fingerprint or detect a bot?
- Do accelerometer and gyroscope APIs leak on desktop?
- prefers-reduced-motion and other OS-setting tells
- Does storage quota estimate reveal disk size?
- Can scrollbar width reveal my operating system?
-
Canvas, WebGL, Fonts and Audio
- Canvas fingerprint noise: why per-call randomising fails
- Firefox WebGL renderer strings: what ANGLE reports
- WebGL parameters: the numbers are the same on every GPU
- Your renderer string says NVIDIA. Your pixels say software.
- Why headless browsers render different fonts
- How to make Linux and macOS report real Windows fonts
- measureText and TextMetrics as a fingerprinting surface
- AudioContext fingerprinting, and why adding noise backfired
- Canvas and WebGL fingerprints, identical across OSes
- Emoji fingerprinting: why emoji look the same on any OS
- Detecting installed fonts in JavaScript by width
- WebGL shader precision as a fingerprint surface
- AudioContext sampleRate and latency as a fingerprint
- Is WebGPU a browser fingerprint?
-
Network, Proxy and WebRTC
- WebRTC leak with a proxy in Playwright and Selenium
- WebRTC ICE candidate spoofing: the fields that give it away
- Playwright proxy in Python: per-context, and what leaks
- Playwright proxy not working? SOCKS5 auth in Python
- Playwright timezone does not match the proxy IP
- JA3 and JA4: why a TLS fingerprint cannot be patched
- Playwright in Docker: it runs, and still gets blocked
- Web scraping keeps getting blocked with good proxies
- Python web scraping blocked? The TLS fingerprint reason
- SOCKS5 vs HTTP proxy: what each does in the browser
- WebRTC IPv6 leak: why a proxy does not stop it
- HTTP/2 fingerprint: the layer above the TLS handshake
- TLS fingerprint vs User-Agent: the contradiction
- WebRTC has no ICE candidates behind a proxy
- WebRTC IP that matches the proxy exit, by design
- How to check if a proxy leaks your real IP
- about:webrtc: read your real ICE candidates
- Offline timezone resolution from a proxy exit IP
- Residential vs datacenter vs mobile proxies explained
- Sticky vs rotating proxy sessions: which to use
- Does a proxy leak DNS? DoH and DNS leaks explained
- HTTP/3 and QUIC fingerprint: what a site sees
- What is ASN and IP reputation in bot detection?
- What does a mobile carrier IP look like to a site?
- IPv6 vs IPv4: which does your proxy expose?
- Geolocation API vs IP location: keep them consistent
- Does chaining two proxies help avoid detection?
-
The Automation Layer
- Function.prototype.toString and the [native code] check
- The ChromeDriver
cdc_variable, and why renaming it fails - Why an attached debugger makes automation detectable
- Execution context was destroyed, and when it means detection
- Human-like mouse movement: Bezier curves are the easy part
- Why a Playwright upgrade broke 97 of 133 tests overnight
- Playwright persistent profile: what it fixes and breaks
- Why humanized mouse movement can fail on hover()
- Why content_frame() returns None for a cross-origin iframe
- Orphaned Firefox processes on Windows: the killed-runner leak
- Firefox launches but Playwright can't drive it: packaging gap
- Why automating login is riskier than reusing a session
- Playwright new_page vs new_context: the viewport tell
- Playwright dialog and popup handling without a tell
- Playwright download files with Firefox and the tell
- Playwright connect_over_cdp does not work with Firefox
- Playwright mobile emulation on Firefox and isMobile
- Playwright isTrusted: are automated clicks real?
- Playwright set_input_files uploads and the tell
- Can websites detect Playwright? What is actually visible
- Does Playwright Set navigator.webdriver to True?
- Does Playwright Leave Traces a Website Can See?
- Does Playwright Change My Browser Fingerprint?
- Can I Use My Real Browser Profile With Playwright?
- Does Playwright Support Firefox Stealth?
- Is Playwright Firefox Harder to Detect Than Chromium?
- Does Playwright Get Detected on the First Request?
- Why Playwright's bundled Firefox is easy to detect
- ghost-cursor human mouse paths with Playwright
- Stock Playwright, patched Firefox: how they connect
- Intercept and mock network requests with page.route
- Record and replay HTTP traffic with HAR in Playwright
- Record a Playwright trace to debug a failed scrape
- Record a video of a Playwright browser session
- Save and reuse login with storage_state in Playwright
- Read and set cookies in a Playwright context
- Set geolocation and permissions per Playwright context
- Handle HTTP basic auth in Playwright (http_credentials)
- Isolate identities with a browser context per session
- Drag and drop elements in Playwright with drag_to
- When to use an HTTP client vs a real browser
- Migrating from requests + BeautifulSoup to a browser
-
AI Agents and Frameworks
- AI browser agents and stealth: what fits and what does not
- browser-use gets detected: what you can and cannot change
- crawl4ai stealth mode and custom browser engines
- Give a LangChain agent an invisible_playwright browser
- Feed invisible_playwright pages into a RAG index
- Computer-use agents and browser fingerprint detection
- Give an MCP browser server a stealth Firefox engine
- Give each AI agent a reproducible browser identity
- Run parallel browser agents with distinct fingerprints
- Why AI browser agents have their own timing signal
- Running an AI browser agent headless on a server
- Give a browser agent a persistent logged-in session
- smolagents: hand the agent an invisible_playwright tool
- Stagehand and stealth: why a Firefox engine won't drop in
- DOM-reading vs screenshot agents: which stealth helps
- Back a computer-use agent with a real browser engine
- AI agent retry loops trip rate limits, not fingerprints
-
Detectors, Explained
- What bot.sannysoft.com actually checks, row by row
- How CreepJS decides you are lying
- What BotD actually detects, and what it does not
- Why a FingerprintJS visitor ID changes
- reCAPTCHA v3 score: why a fresh browser scores badly
- BrowserLeaks canvas and WebGL hash, explained
- What BrowserLeaks actually tests, surface by surface
- Browser trust scores explained: what the number means
- How do websites detect bots?
- What is a browser fingerprint?
- What data does a website collect about your browser?
- Does a VPN stop browser fingerprinting?
- Do websites know you are using a script?
- How accurate is browser fingerprinting?
- Can a website detect a virtual machine?
- Can websites detect a datacenter or proxy IP?
- getClientRects fingerprinting: subpixel geometry as ID
- Notification.permission as a bot-detection signal
- speechSynthesis voices as a cross-platform fingerprint
- Can a website detect typing by keystroke timing?
- Can a website detect Clipboard API access?
- What are mouse-dynamics behavioural biometrics?
-
Testing and Troubleshooting
- How to test bot detection without a false pass
- Playwright detected as a bot: the checklist to fix it
- Firefox preferences that silently do nothing
- Slow browser launch: a per-request timeout is not a budget
- Playwright screenshot returns noise: readback fix
- Canvas fingerprint changes every run: use a seed
- Playwright TargetClosedError: the causes and the fixes
- Why am I blocked with a clean fingerprint?
- Why Does My Playwright Script Get Blocked?
- Is Playwright headless detectable? What sites check
- Can You Run Playwright Without Being Detected?
- Why Playwright Works Locally but Fails in the Cloud
- Does Playwright Trigger reCAPTCHA More Often?
-
Scraping with Playwright
- How to scrape without getting blocked
- How to scrape a site that blocks headless browsers
- How to scrape infinite scroll pages with Playwright
- How to rotate proxies when scraping with Playwright
- How to scrape data behind a login with Playwright
- How to run Playwright in Docker without getting detected
- How to use invisible_playwright in Docker
- Playwright bot detection: how to avoid it in Python
- How to scrape paginated pages with Playwright
- How to download files with Playwright
- How to upload files with Playwright, and verify it landed
- How to handle cookie consent banners in Playwright
- How to handle popups and modals in Playwright
- How to take full-page screenshots with Playwright
- How to generate a PDF with Playwright and Firefox
- How to wait for content to load in Playwright
- How to retry failed requests when scraping Playwright
- How to scrape pages in parallel with Playwright
- How to rate limit your own Playwright scraper
- How to scrape HTML tables with Playwright
- How to scrape iframe content with Playwright
- How to scrape shadow DOM content with Playwright
- How to capture XHR and API responses in Playwright
- How to scrape geotargeted content with Playwright
- How to scrape real estate listings with Playwright
- How to scrape job postings with Playwright
- How to scrape e-commerce product pages with Playwright
- How to track product prices with Playwright
- How to scrape hotel room prices with Playwright
- How to scrape flight prices with Playwright
- How to scrape classifieds listings with Playwright
- How to scrape vacation rental listings with Playwright
- How to scrape car listings with Playwright
- How to scrape apartment rentals with Playwright
- How to track product stock and restocks with Playwright
- How to scrape location-based store prices with Playwright
- How to scrape flexible-date fare calendars with Playwright
- How to scrape product reviews with Playwright
- How to scrape reviews and ratings with Playwright
- How to scrape news article text with Playwright
- How to scrape business directory listings with Playwright
- How to scrape event and ticket listings with Playwright
- How to scrape restaurant menu data with Playwright
- How to scrape stock and financial data with Playwright
- How to scrape social media profiles with Playwright
- How to scrape forum and community threads with Playwright
- How to scrape image galleries with Playwright
- How to scrape video listings and metadata with Playwright
- How to scrape map-based local results with Playwright
- How to scrape sports scores and stats with Playwright
- How to scrape cryptocurrency prices with Playwright
- How to scrape deals and coupon codes with Playwright
- How to scrape to CSV with Playwright
- How to scrape to JSON Lines with Playwright
- How to scrape into a SQLite database with Playwright
- How to export scraped data to Excel with Playwright
- How to extract JSON-LD structured data with Playwright
- How to extract Open Graph and meta tags with Playwright
- How to extract links and build a crawl frontier in Playwright
- How to scrape RSS and Atom feeds with Playwright
- How to download images in bulk with Playwright
- How to extract clean article text with Playwright
- How to scrape a sitemap.xml with Playwright
- How to scrape into a pandas DataFrame with Playwright
- How to clean scraped prices and dates with Playwright
- Scrape search results by driving a form in Playwright
- Scrape a map-based search with Playwright
- Scrape autocomplete and typeahead inputs with Playwright
- Scrape date-picker calendars with Playwright
- Crawl list pages to detail pages with Playwright
- Scrape lazy-loaded images with Playwright
- Extract data from canvas charts with Playwright
- Scrape a multi-step wizard flow with Playwright
- How to resume an interrupted scrape with Playwright
- Incremental scraping: only new items since last run
- Handle 403 and 429 backoff mid-scrape in Playwright
- Scrape load-more button pages with Playwright
- Scrape nested pagination with Playwright
- Scrape an SPA that changes URL via history API
- Use BeautifulSoup with invisible_playwright
- Run stealth Playwright tests with pytest fixtures
- Run invisible_playwright concurrently with asyncio
- Run invisible_playwright in GitHub Actions CI
- Can you run invisible_playwright serverless?
- Run invisible_playwright in Celery task workers
- Schedule invisible_playwright scrapes with cron
- Run invisible_playwright headful on a server with Xvfb
- Use invisible_playwright in an Airflow DAG
- Combine invisible_playwright with httpx for speed
- Wrap invisible_playwright in a FastAPI service
- Run invisible_playwright in a Jupyter notebook
- Block images to speed up scraping (and when not to)
- Wait for a specific API response in Playwright
Comparisons
- Playwright stealth in Python: three levels that work
- Firefox or Chromium for anti-detect automation
- Chromium is not Chrome, and detectors know the difference
- Playwright stealth vs Camoufox: two patched Firefoxes
- Playwright stealth vs Patchright: driver vs engine
- Playwright stealth vs undetected-chromedriver and nodriver
- playwright-stealth vs a patched engine: page vs browser
- puppeteer-extra-plugin-stealth: unmaintained since 2024
- selenium-stealth hasn't been updated since December 2021
- pyppeteer's own maintainer says to switch to Playwright
- invisible_playwright vs rebrowser-patches: the same CDP fix
- invisible_playwright vs fingerprint-suite: injection vs engine
- invisible_playwright vs playwright-with-fingerprints
- invisible_playwright vs Scrapling
- invisible_playwright vs Ulixee Hero
- invisible_playwright vs SeleniumBase UC Mode
- Splash is unmaintained, and it was never a real browser
- invisible_playwright vs DrissionPage
- WebDriver BiDi vs CDP: does the new protocol hide you
- invisible_playwright vs hrequests
- zendriver vs invisible_playwright: Chrome CDP vs Firefox
- botasaurus vs invisible_playwright: framework vs library
- curl_cffi vs invisible_playwright: TLS client vs browser
- pydoll vs invisible_playwright: CDP without a driver
- selenium-driverless vs invisible_playwright stealth
- puppeteer-real-browser vs invisible_playwright
- Migrating from Selenium to Playwright for stealth
- Migrating from Puppeteer to Playwright for stealth
- undetected-chromedriver vs a patched Firefox browser
- scrapy-playwright vs a patched Firefox for stealth
- playwright-extra stealth plugins vs a patched browser
- tls-client vs a real browser: when TLS is enough
- Anti-detect browser or Playwright stealth: which you need
- undetected-playwright vs a patched Firefox binary
Integrations
- Using invisible_playwright with CodeceptJS
- Using invisible_playwright with Crawlee for Python
- Using invisible_playwright with Crawlee for JavaScript
- Using invisible_playwright with scrapy-playwright
- Using invisible_playwright with Robot Framework Browser
- Cypress, WebdriverIO, TestCafe and Nightwatch integration
- Using invisible_playwright with Microsoft's Playwright MCP
- Using the engine from Go, Java, C#, Ruby and Rust
docs/ source folder