Seven minute read

Browser Lockdown & Exam Security: What Actually Runs, and What Can't

How lockdown browsers, secure proxies, and screen detection really work — Safe Exam Browser, Respondus, tab-switch detection across platforms — and the honest truth about browser extensions: they don't load in a locked-down browser, so nothing 'bypasses' one.

Short answer. Exam-security tech comes in layers: a plain LMS quiz page logs only browser events; a lockdown browser (Safe Exam Browser, Respondus) turns your computer into a locked kiosk; a secure proxy filters the network; and screen-detection tools watch for recording and sharing. The most important fact cuts against a lot of marketing: a lockdown browser does not load Chrome extensions at all. So no extension — ExamClutch included — "bypasses" a lockdown browser. There is nothing running inside it to bypass. This post explains each layer honestly, and is clear about where a browser extension can and can't exist.

The layers, from lightest to heaviest

  1. Plain quiz page in normal Chrome. JavaScript logs focus/blur events. It knows that you left the page, never what you opened. This is the only layer where a browser extension runs at all.
  2. Lockdown browser. A separate kiosk application replaces Chrome. No other apps, no extensions, no shortcuts, no screenshots.
  3. Secure proxy / network security. Filters and inspects traffic at the network level, independent of your machine.
  4. Screen and webcam proctoring. Records the screen and room and flags behavior for human review.

Almost every "can it detect X" question resolves once you know which layer you're in. For the risk comparison across layers, see Unproctored vs. Proctored Online Exams.

Tab-switching detection

Can McGraw Hill detect switching tabs?

McGraw Hill Connect, like other LMS/courseware platforms, uses browser-level tracking:

  • Focus tracking — detects when you leave the assessment window.
  • Time logging — records how long you were away.
  • Event counting — how many times focus was lost.
  • Page Visibility API — JavaScript that fires when the tab is hidden.
  • Pattern analysis — unusual navigation sequences.

But Connect on its own cannot see which tab or app you opened — only that focus left the page. Detection jumps only when proctoring is added on top.

How platforms detect tab-switching

Three common mechanisms, in rough order of sensitivity:

  • Page Visibility API — fires when the page is hidden by a tab switch, minimize, or screen lock. The most common LMS method.
  • Focus/blur events — fire when the browser window loses focus, so they can catch clicking outside the window, not just a tab change.
  • Mouse-boundary tracking — some systems note when the cursor leaves the exam window's edges.

All three are browser events. None reveal the content of what you switched to.

Lockdown browser technologies

Safe Exam Browser (SEB)

An open-source lockdown browser that turns any computer into a secure workstation:

  • Kiosk mode blocking system functions.
  • Disabled shortcuts (Alt+Tab, Cmd+Tab, etc.).
  • Blocked right-click menus.
  • Screenshot and screen-recording prevention.
  • URL filtering with whitelists.
  • Per-exam security policies.

Respondus LockDown Browser

Widely used in higher ed:

  • Prevents access to other applications during the exam.
  • Blocks messaging, screen-sharing, and virtual machines.
  • Disables browser menus and toolbars.
  • Prevents function keys and shortcuts.
  • Integrates directly with LMS platforms.

Custom institutional browsers

Some schools build their own lockdown clients tied to student information systems, with custom monitoring and platform-specific tuning. The mechanics are the same: a controlled kiosk that doesn't run your extensions.

Secure proxies and network security

A secure proxy sits between the student and the exam server and can perform:

  • Content filtering — blocking unauthorized sites.
  • Traffic monitoring — logging network requests during the exam.
  • IP masking / geographic restriction — limiting where access is allowed.
  • Bandwidth control — keeping connections stable.
  • SSL inspection — decrypting and inspecting HTTPS traffic.

Institutions layer on DNS filtering, deep packet inspection, VPN detection, and geo-IP restrictions. This layer operates on the network, not your browser — it's independent of whatever you're running locally.

Screen detection and recording

Modern screen detection spans several techniques:

  • Screenshot prevention — lockdown browsers can disable screenshots at the system level, blocking built-in and third-party capture.
  • Screen-recording detection — advanced systems detect recorders like OBS or Camtasia running and alert proctors.
  • Watermarking — invisible marks on exam content that trace the source if a screenshot or photo is shared.
  • Screen-sharing detection — via process monitoring, streaming-protocol traffic analysis, GPU encoding patterns, virtual-display enumeration, and system-file checks.

Browser differences

Exam platforms lean on browser security features, and the browsers differ:

  • Chrome / Chromium — site isolation, extension restrictions in managed environments, kiosk mode, enterprise policy enforcement.
  • Firefox — Enhanced Tracking Protection can interfere with monitoring scripts; container tabs isolate sessions; stricter certificate handling.
  • Safari / WebKit — Intelligent Tracking Prevention may block monitoring; stricter cross-origin rules; limited extension support for proctoring tools.

Where ExamClutch fits — the honest version

We build ExamClutch, and this topic is exactly where marketing tends to lie, so here is the truth:

  • A lockdown browser (SEB, Respondus) does not load Chrome extensions. ExamClutch does not run inside one. It does not "bypass" it, defeat it, or hide from it — it is simply not present. Any product claiming to bypass a lockdown browser is describing something that cannot happen.
  • A secure proxy and network monitoring operate on traffic, not on your extensions, and are again outside what a browser extension touches.
  • Where ExamClutch does work is the lightest layer — an unproctored quiz page in normal Chrome. There it reads questions from the page inline, without switching tabs or triggering focus-loss events, which is why it's low-signature there.

The consequences of trying to defeat a real lockdown/proctoring setup are serious — exam termination, an integrity record, course failure, and worse for professional certifications. We don't recommend it, and we don't sell a tool that pretends to do it.

Best practices for locked-down exams

Before:

  • Install required software well in advance and run the system check.
  • Close unnecessary applications and restart for a clean state.
  • Confirm browser compatibility and update to the latest version.

During:

  • Follow every security prompt.
  • Don't open new tabs or windows.
  • Avoid keyboard shortcuts.
  • Keep focus on the exam window.
  • Report technical issues immediately through the provided channel.

Technical:

  • Prefer a wired connection.
  • Ensure adequate RAM/CPU headroom.
  • Clear cache before starting.
  • Have IT support contact info ready.

The future of exam security

The trajectory: biometric and continuous identity verification, more sophisticated AI behavior analysis, hardware-backed security (TPM, secure enclaves), tamper-evident credential records, and zero-trust models that re-verify throughout a session. The layers get heavier; the fundamental split — what runs in a normal browser vs. a locked-down one — stays the same.

FAQ

Can a browser extension bypass Respondus or Safe Exam Browser? No. A lockdown browser is a kiosk that doesn't load extensions. There's nothing to bypass because nothing runs.

Can McGraw Hill or an LMS see which tab I switched to? No — only that focus left the page, and for how long. Seeing the actual content requires screen recording, which means proctoring.

Does a secure proxy see what I do in my browser? It sees network traffic — which sites and requests — not your extensions. It can block sites and inspect HTTPS, depending on configuration.

Can screen-recording software be detected? Often, yes. Proctoring and lockdown tools check for known recorders and encoding patterns and flag them.

Where does ExamClutch actually work, then? Only unproctored quiz pages in normal Chrome. It does not run under any lockdown browser or proctoring layer.

Ready to stop fighting your LMS?