Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesThe most defensible first check is navigator.webdriver, but it detects browser automation—not malicious intent and not every possible headless configuration. Use it as one input to a layered, measured risk decision. User-Agent strings, User-Agent Client Hints and fingerprint consistency can add context, while hard-blocking on one field creates avoidable false positives. Chrome’s current Headless mode is unified with headful Chrome, so older recipes that assume a completely separate browser are increasingly unreliable.
What “headless detection” can actually tell you
Headless is a display mode: Chrome runs without a visible window. Automation is a control relationship: WebDriver, Puppeteer, Selenium or another controller drives the browser. A headless session is often automated, but the terms are not interchangeable, and neither one proves abuse.
For a site you operate, separate these questions:
- Is the browser reporting automation? The standard browser-side answer is
navigator.webdriver. - What browser and configuration does the request claim to use? User-Agent (UA) and User-Agent Client Hints (UA-CH) provide identity and version context.
- Do the request and browser signals fit together? A small, purpose-specific set of attributes can identify inconsistencies for risk scoring.
- Should this activity be allowed? That is a policy and abuse decision, not a browser-feature decision.
Keep an accessible path for legitimate tests, accessibility tools, monitoring and other authorized automation. Log and measure before introducing a challenge or denial.
1. Check navigator.webdriver first
MDN defines the read-only property as indicating whether the user agent is controlled by automation. In Chrome, it is documented as true when automation-related conditions include --enable-automation, --headless, or --remote-debugging-port set to port 0. The value is therefore a useful, standardized disclosure for cooperating automation.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
It is not a verdict about the visitor. A true value can describe a company’s visual regression test, a developer’s local script or an authorized crawler. A false value does not establish that a person is present or that a session is safe.
Minimal browser-side check
<script>
(() => {
const automated = navigator.webdriver === true;
console.log({
automated,
userAgent: navigator.userAgent,
platform: navigator.platform
});
})();
</script>Use the result to select an appropriate path—for example, expose a test-only diagnostic panel or add a risk feature—rather than immediately returning an error page. If you send the result to your server, protect the endpoint against forged client data and treat it as one observation among others.
Send a diagnostic record to your server
async function reportBrowserSignals() {
const record = {
webdriver: navigator.webdriver === true,
userAgent: navigator.userAgent,
language: navigator.language,
languages: navigator.languages
};
await fetch('/browser-signals', {
method: 'POST',
headers: {'Content-Type': 'application/json'},
body: JSON.stringify(record),
credentials: 'same-origin'
});
}
reportBrowserSignals().catch(() => {
// Continue normally if diagnostics cannot be sent.
});Do not make a security boundary depend on a value supplied by page JavaScript. Authentication, authorization, rate limits and server-side request controls still belong on the server.
2. Use User-Agent as context, not proof
Some Chrome configurations expose an explicit headless token in the UA string. Others do not, and the string changes as Chrome reduces identifying information. A token such as HeadlessChrome can be a useful clue when present; its absence cannot certify a headed browser, and its presence cannot establish maliciousness.
Free tools Windows power users keep installed
One-click scans. No signup required.
const ua = navigator.userAgent;
const mentionsHeadless = /headless/i.test(ua);
console.log({ua, mentionsHeadless});Never build a rule that assumes every headless instance contains that word or that removing it makes automation undetectable. The reviewed documentation does not support either universal claim.
Request specific details with User-Agent Client Hints
Chrome recommends UA-CH when a site genuinely needs structured browser information. Low-entropy values are available through navigator.userAgentData; higher-entropy values require an explicit request and should be collected only for a clear purpose.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
async function readBrowserIdentity() {
const data = navigator.userAgentData;
if (!data) return {userAgentData: null};
const identity = {
mobile: data.mobile,
brands: data.brands
};
if (typeof data.getHighEntropyValues === 'function') {
identity.highEntropy = await data.getHighEntropyValues([
'architecture', 'bitness', 'fullVersionList', 'model',
'platformVersion', 'wow64'
]);
}
return identity;
}
readBrowserIdentity().then(console.log).catch(console.error);UA and UA-CH characterize a browser. Neither is an automation verdict, and requesting more detail increases data collection and may be affected by browser privacy choices.
3. Add a small, explainable set of consistency signals
Historical crawler-detection research evaluated combinations of HTTP headers and browser attributes rather than one magic field. Examples included navigator.webdriver, Accept-Language, window.chrome, notification permissions, screen characteristics, supported codecs and touch-related properties.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall| Signal family | What it means | What can change | Safer use |
|---|---|---|---|
navigator.webdriver |
Documented indication that the user agent is controlled by automation under specified Chrome conditions. | Only covers configurations that disclose control; it says nothing about intent. | Feature in a risk score, or adapt an authorized test path. |
| User-Agent | Self-reported browser and platform text; may include a headless marker. | Chrome reduces UA data; headers vary by configuration and can be changed. | Log for compatibility and combine with other evidence. |
| UA-CH | Structured browser identity requested by the site. | Availability, permission and privacy behavior differ; it is not an automation signal. | Request only details needed for a concrete compatibility decision. |
| Headers and browser attributes | Cross-signal consistency, such as language, screen and capability reports. | Legitimate devices, privacy settings and browser versions produce many combinations. | Measure against known-good traffic before any disruptive action. |
A practical policy is to record a few relevant signals, compare them with authorized automation and ordinary users, and require stronger evidence before a challenge or block. Keep each signal’s reason documented so you can remove it when browser behavior changes.
4. Understand Chrome’s current Headless architecture
Chrome’s official documentation says current Headless and headful modes are unified. From Chrome 132.0.6793.0, the old separate Headless implementation is available only as the standalone chrome-headless-shell binary. Release details can change, so check the current Chrome documentation when pinning a supported version.
This matters because advice based on an old, visibly different Headless implementation may now produce stale assumptions about rendering, APIs or fingerprint values. Test the exact Chrome builds your users and automation jobs run; do not infer behavior from a browser version you no longer deploy.
5. A defensible implementation workflow
- Define the decision. Decide whether you are adapting a test experience, collecting telemetry, applying a rate limit or stopping an abuse pattern. The required evidence should match the impact on the user.
- Collect the standard signal. Record
navigator.webdriverand the browser version context needed for support. - Use UA and UA-CH narrowly. Request specific hints only when a compatibility or security decision requires them.
- Compare signals over time. Establish baselines with your own authorized automation and representative legitimate traffic. The historical study does not provide a current accuracy ranking or error rate.
- Score before blocking. A passive log or graduated challenge is easier to audit and recover from than a permanent denial based on one property.
- Provide recovery. Offer a contact, alternate workflow or verification route for users caught by an incorrect decision.
- Revalidate after browser updates. Re-run the checks when Chrome, your WebDriver stack or your privacy policy changes.
6. Testing with real automation
Run your detection page in the same browser versions and launch modes used in production tests. Check the value of navigator.webdriver, the complete UA string and the presence of UA-CH, then store the browser version beside the observation. Test both a visible and a headless run when your supported stack includes both.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Do not treat a single local result as a universal rule. Chrome’s unified architecture, reduced UA data and changing privacy controls mean that a value observed on one release may not appear on another. Tests should assert the behavior your application needs—for example, “authorized automation receives the test route”—rather than asserting that every automated session has a particular fingerprint.
Or skip the browser setup
If your immediate goal is to capture a page for a visual check, documentation or an AI workflow, ScreenshotNeo provides a website screenshot API and MCP server instead of requiring you to maintain a local browser launch. A single request returns PNG, JPEG, WebP or PDF output.
cURL: see the full parameter reference in the ScreenshotNeo documentation.
curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webpPython:
import requests
r = requests.get("https://api.screenshotneo.com/v1/shot", params={"access_key": "YOUR_API_KEY", "url": "https://stripe.com"}, timeout=90)
open("shot.webp", "wb").write(r.content)Node.js:
const q = new URLSearchParams({ access_key: 'YOUR_API_KEY', url: 'https://stripe.com' });
const res = await fetch(`https://api.screenshotneo.com/v1/shot?${q}`);- Cookie and consent banners, newsletter popups and chat widgets are removed before the shot; each cleanup step can be disabled.
- Bot checks or CAPTCHAs, blank pages, timeouts, failed loads and cache hits are not billed, and response headers identify the page verdict and billing status.
- An MCP server exposes
take_screenshot,get_page_infoandcapture_pdfto Claude, Cursor and other MCP clients. - The Free plan includes 1,000 screenshots per month with no card; paid plans start at $5 for 3,000 shots.
Create a free ScreenshotNeo account to try it without a card.
Common failure modes and fixes
“The server cannot read navigator.webdriver.”
navigator exists in the browser, not in a normal server process. Run the check in page JavaScript and send only the diagnostic result to an authenticated server endpoint. Keep the server’s own controls independent of that client report.
“The UA contains no headless token.”
That is expected for some configurations and increasingly plausible as Chrome reduces UA data and unifies Headless with headful Chrome. Use the standard property and measured cross-signal context instead of searching for one substring.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
“A legitimate test is being blocked.”
A true webdriver value indicates automation control, not abuse. Replace an unconditional denial with a test allow-list, a separate staging route, a graduated challenge or a manual recovery path.
“UA-CH is missing or incomplete.”
Hints are not guaranteed to be available, and high-entropy values require an explicit request. Treat missing hints as unknown, not as evidence of headlessness, and avoid requesting details you do not use.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
“A fingerprint rule changed after a Chrome update.”
Browser attributes, privacy settings and release behavior evolve. Record the Chrome version with observations, rerun your authorized test matrix and remove assumptions tied to obsolete Headless implementations.
“Signals disagree.”
Disagreement is a reason to lower confidence or request a proportionate verification step, not to declare the session malicious. Legitimate privacy tools and unusual devices can produce uncommon combinations.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the historical evidence does—and does not—show
A 2020 NDSS study examined 291 sites from the Alexa Top 10K that blocked crawlers and reported that 93 sites (31.96%) used fingerprinting for crawler detection. The figure is specific to that sample and period; it is not a current prevalence estimate, a headless-only rate or a detector accuracy measurement.
The same work tested seven crawler variants while changing attributes such as UA, WebDriver, language, window.chrome, permissions, screen resolution, codecs and touch properties. Its ground-truth and scope limitations reinforce the engineering lesson: combinations can be informative, but no published checklist guarantees stable results across today’s Chrome releases.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
FAQ
Does a headless browser always set navigator.webdriver to true?
Chrome documents true for specific automation-related launch conditions. The property should be treated as a signal for those conditions, not as a promise covering every browser, version or launch configuration.
Is detecting automation the same as detecting a bot?
No. Automation can be authorized, and a human-operated browser can still generate abusive traffic. Make the enforcement decision from behavior, authentication and account context as well as browser telemetry.
Should I collect every available fingerprint attribute?
No. Start with the minimum signals needed for a defined decision, explain their purpose, measure false positives and account for privacy obligations. More attributes add collection cost and more ways to misclassify legitimate visitors.
Frequently Asked Questions
Does a headless browser always set navigator.webdriver to true?
Chrome documents true for specific automation-related launch conditions; treat it as a signal for those conditions, not a guarantee for every browser, version or launch configuration.
Is detecting automation the same as detecting a bot?
No. Automation may be authorized, while abusive traffic can come from a human-operated browser. Enforcement should also consider behavior, authentication and account context.
Should I collect every available fingerprint attribute?
No. Collect only signals needed for a defined decision, measure false positives and account for privacy requirements.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
