Proctor Guides

Safe Exam Browser (SEB) Bypass in 2026: Kiosk Locks, VMs & AI Overlays

Safe Exam Browser (SEB) is widely used by universities running Moodle, Inspera, and OpenOLAT. Unlike simple browser extensions, SEB locks the operating system into a full-screen kiosk session and verifies cryptographic keys with the LMS server.

By Evadely ResearchPublished 2026-10-18Updated 2026-10-18Proctor Guides

Why patched SEB builds and virtual machines fail in 2026

Older GitHub repositories and forum posts often share modified SEB binaries or tell students to spoof the SEB user-agent string in Chrome. Modern Moodle and Inspera setups verify both the Config Key and the Browser Exam Key (BEK), which hashes the exact unmodified SEB binary and configuration file.

SEB also includes built-in virtual machine and screen-sharing detectors that refuse to launch the quiz if hypervisor drivers or remote desktop sessions are active.

Running Evadely alongside unmodified Safe Exam Browser on macOS

Because modifying SEB breaks the cryptographic Browser Exam Key check, students use Evadely on macOS while keeping the official Safe Exam Browser completely unmodified.

Evadely's native macOS overlay renders above the SEB kiosk window without stealing focus or altering a single file inside the Safe Exam Browser application bundle.

Frequently asked questions

Does changing the user-agent in Chrome bypass Safe Exam Browser in 2026?

Rarely. Most institutions now enforce Config Key or Browser Exam Key validation, which requires the genuine SEB client.

Does Evadely modify the Safe Exam Browser app?

No. Evadely runs as a separate native macOS overlay so the official SEB client passes integrity and key checks normally.

Keep exploring