Files
Microsoft-Rewards-Script/docs/humanization.md
Light 15f62963f8 V2 (#365)
* first commit

* Addition of a personalized activity manager and refactoring of the logic of activities

* Adding diagnostics management, including screenshot and HTML content, as well as improvements to humanize page interactions and +.

* Adding the management of newspapers and webhook settings, including filtering messages and improving the structure of the summaries sent.

* Adding a post-execution auto-date functionality, including options to update via Git and Docker, as well as a new configuration interface to manage these parameters.

* Adding accounts in Docker, with options to use an environmental file or online JSON data, as well as minimum validations for responsible accounts.

* Improving the Microsoft Rewards script display with a new headband and better log management, including colors and improved formatting for the console.

* v2

* Refactor ESLint configuration and scripts for improved TypeScript support and project structure

* Addition of the detection of suspended accounts with the gesture of the improved errors and journalization of banishment reasons

* Adding an integrated planner for programmed task execution, with configuration in Config.json and +

* Edit

* Remove texte

* Updating of documentation and adding the management of humanization in the configuration and +.

* Adding manual purchase method allowing users to spend points without automation, with monitoring of expenses and notifications.

* Correction of documentation and improvement of configuration management for manual purchase mode, adding complete documentation and appropriate banner display.

* Add comprehensive documentation for job state persistence, NTFY notifications, proxy configuration, scheduling, and auto-update features

- Introduced job state persistence documentation to track progress and resume tasks.
- Added NTFY push notifications integration guide for real-time alerts.
- Documented proxy configuration options for enhanced privacy and network management.
- Included scheduling configuration for automated script execution.
- Implemented auto-update configuration to keep installations current with Git and Docker options.

* Ajout d'Unt Système de Rapport d'Erreurs Communautaire pour Améliorerer le Débogage, incluant la Configuration et l'Envoi de Résumés D'Erreurs Anonyés à un webhook Discord.

* Mini Edit

* Mise à Jour du Readme.md pour Améliorerer la Présentation et La Claté, Ajout d'Un section sur les notifications en Temps Raine et Mise à Jour des badges pour la meille unibilité.

* Documentation update

* Edit README.md

* Edit

* Update README with legacy version link

* Improvement of location data management and webhooks, adding configurations normalization

* Force update for PR

* Improvement of documentation and configuration options for Cron integration and Docker use

* Improvement of planning documentation and adding a multi-pan-pancake in the daily execution script

* Deletion of the CommunityReport functionality in accordance with the project policy

* Addition of randomization of start -up schedules and surveillance time for planner executions

* Refactor Docker setup to use built-in scheduler, removing cron dependencies and simplifying configuration options

* Adding TOTP support for authentication, update of interfaces and configuration files to include Totp secret, and automatic generation of the Totp code when connecting.

* Fix [LOGIN-NO-PROMPT] No dialogs (xX)

* Reset the Totp field for email_1 in the accounts.example.json file

* Reset the Totp field for email_1 in the Readme.md file

* Improvement of Bing Research: Use of the 'Attacked' method for the research field, management of overlays and adding direct navigation in the event of entry failure.

* Adding a complete security policy, including directives on vulnerability management, coordinated disclosure and user security advice.

* Remove advanced environment variables section from README

* Configuration and dockerfile update: Passage to Node 22, addition of management of the purchase method, deletion of obsolete scripts

* Correction of the order of the sections in the Readme.md for better readability

* Update of Readm and Security Policy: Addition of the method of purchase and clarification of security and confidentiality practices.

* Improvement of the readability of the Readm and deletion of the mention of reporting of vulnerabilities in the security document.

* Addition of humanization management and adaptive throttling to simulate more human behavior in bot activities.

* Addition of humanization management: activation/deactivation of human gestures, configuration update and adding documentation on human mode.

* Deletion of community error report functionality to respect the privacy policy

* Addition of immediate banning alerts and vacation configuration in the Microsoft Rewards bot

* Addition of immediate banning alerts and vacation configuration in the Microsoft Rewards bot

* Added scheduling support: support for 12h and 24h formats, added options for time zone, and immediate execution on startup.

* Added window size normalization and page rendering to fit typical screens, with injected CSS styles to prevent excessive zooming.

* Added security incident management: detection of hidden recovery emails, automation blocking, and global alerts. Updated configuration files and interfaces to include recovery emails. Improved security incident documentation.

* Refactor incident alert handling: unified alert sender

* s

* Added security incident management: detect recovery email inconsistencies and send unified alerts. Implemented helper methods to manage alerts and compromised modes.

* Added heartbeat management for the scheduler: integrated a heartbeat file to report liveliness and adjusted the watchdog configuration to account for heartbeat updates.

* Edit webook

* Updated security alert management: fixed the recovery email hidden in the documentation and enabled the conclusion webhook for notifications.

* Improved security alert handling: added structured sending to webhooks for better visibility and updated callback interval in compromised mode.

* Edit conf

* Improved dependency installation: Added the --ignore-scripts option for npm ci and npm install. Updated comments in compose.yaml for clarity.

* Refactor documentation structure and enhance logging:
- Moved documentation files from 'information' to 'docs' directory for better organization.
- Added live logging configuration to support webhook logs with email redaction.
- Updated file paths in configuration and loading functions to accommodate new structure.
- Adjusted scheduler behavior to prevent immediate runs unless explicitly set.
- Improved error handling for account and config file loading.
- Enhanced security incident documentation with detailed recovery steps.

* Fix docs

* Remove outdated documentation on NTFY, Proxy, Scheduling, Security, and Auto-Update configurations; update Browser class to prioritize headless mode based on environment variable.

* Addition of documentation for account management and Totp, Docker Guide, and Update of the Documentation Index.

* Updating Docker documentation: simplification of instructions and adding links to detailed guides. Revision of configuration options and troubleshooting sections.

* Edit

* Edit docs

* Enhance documentation for Scheduler, Security, and Auto-Update features

- Revamped the Scheduler documentation to include detailed features, configuration options, and usage examples.
- Expanded the Security guide with comprehensive incident response strategies, privacy measures, and monitoring practices.
- Updated the Auto-Update section to clarify configuration, methods, and best practices for maintaining system integrity.

* Improved error handling and added crash recovery in the Microsoft Rewards bot. Added configuration for automatic restart and handling of local search queries when trends fail.

* Fixed initial point counting in MicrosoftRewardsBot and improved error handling when sending summaries to webhooks.

* Added unified support for notifications and improved handling of webhook configurations in the normalizeConfig and log functions.

* UPDATE LOGIN

* EDIT LOGIN

* Improved login error handling: added recovery mismatch detection and the ability to switch to password authentication.

* Added a full reference to configuration in the documentation and improved log and error handling in the code.

* Added context management for conclusion webhooks and improved user configuration for notifications.

* Mini edit

* Improved logic for extracting masked emails for more accurate matching during account recovery.
2025-09-26 18:58:33 +02:00

6.3 KiB

🤖 Humanization (Human Mode)

🎭 Natural automation that mimics human behavior
Subtle gestures for safer operation


🎯 What is Humanization?

Human Mode adds subtle human-like behavior to make your automation look and feel more natural. It's designed to be safe by design with minimal, realistic gestures.

Key Features

  • 🎲 Random delays — Natural pause variation
  • 🖱️ Micro movements — Subtle mouse gestures
  • 📜 Tiny scrolls — Minor page adjustments
  • Time windows — Run during specific hours
  • 📅 Random off days — Skip days naturally
  • 🔒 Safe by design — Never clicks random elements

⚙️ Configuration

{
  "humanization": {
    "enabled": true
  }
}

Advanced Configuration

{
  "humanization": {
    "enabled": true,
    "actionDelay": { "min": 150, "max": 450 },
    "gestureMoveProb": 0.4,
    "gestureScrollProb": 0.2,
    "allowedWindows": ["08:00-10:30", "20:00-22:30"],
    "randomOffDaysPerWeek": 1
  }
}

Configuration Options

Setting Default Description
enabled true Master toggle for all humanization
actionDelay {min: 150, max: 450} Random pause between actions (ms)
gestureMoveProb 0.4 Probability (0-1) for tiny mouse moves
gestureScrollProb 0.2 Probability (0-1) for minor scrolls
allowedWindows [] Time windows for script execution
randomOffDaysPerWeek 1 Skip N random days per week

🎭 How It Works

Action Delays

  • Random pauses between automation steps
  • Natural variation mimics human decision time
  • Configurable range allows fine-tuning

Gesture Simulation

  • Micro mouse moves — Tiny cursor adjustments (safe zones only)
  • Minor scrolls — Small page movements (non-interactive areas)
  • Probability-based — Not every action includes gestures

Temporal Patterns

  • Time windows — Only run during specified hours
  • Random off days — Skip days to avoid rigid patterns
  • Natural scheduling — Mimics human usage patterns

🎯 Usage Examples

{
  "humanization": { "enabled": true }
}

Best for most users — Balanced safety and naturalness

Minimal Humanization

{
  "humanization": {
    "enabled": true,
    "gestureMoveProb": 0.1,
    "gestureScrollProb": 0.1,
    "actionDelay": { "min": 100, "max": 200 }
  }
}

Faster execution with minimal gestures

Maximum Natural Behavior

{
  "humanization": {
    "enabled": true,
    "actionDelay": { "min": 300, "max": 800 },
    "gestureMoveProb": 0.6,
    "gestureScrollProb": 0.4,
    "allowedWindows": ["08:30-11:00", "19:00-22:00"],
    "randomOffDaysPerWeek": 2
  }
}

🎭 Most human-like but slower execution

Disabled Humanization

{
  "humanization": { "enabled": false }
}

🚀 Fastest execution — automation optimized


Time Windows

Setup

{
  "humanization": {
    "enabled": true,
    "allowedWindows": ["08:00-10:30", "20:00-22:30"]
  }
}

Behavior

  • Script waits until next allowed window
  • Uses local time for scheduling
  • Multiple windows supported per day
  • Empty array [] = no time restrictions

Examples

// Morning and evening windows
"allowedWindows": ["08:00-10:30", "20:00-22:30"]

// Lunch break only
"allowedWindows": ["12:00-13:00"]

// Extended evening window
"allowedWindows": ["18:00-23:00"]

// No restrictions
"allowedWindows": []

📅 Random Off Days

Purpose

Mimics natural human behavior by skipping random days per week.

Configuration

{
  "humanization": {
    "randomOffDaysPerWeek": 1  // Skip 1 random day per week
  }
}

Options

  • 0 — Never skip days
  • 1 — Skip 1 random day per week (default)
  • 2 — Skip 2 random days per week
  • 3+ — Higher values for more irregular patterns

🔒 Safety Features

Safe by Design

  • Never clicks arbitrary elements
  • Gestures only in safe zones
  • Minor movements — pixel-level adjustments
  • Probability-based — Natural randomness
  • Non-interactive areas — Avoids clickable elements

Buy Mode Compatibility

  • Passive monitoring remains unaffected
  • No interference with manual actions
  • Background tasks only for monitoring

📊 Performance Impact

Setting Speed Impact Natural Feel Recommendation
Disabled Fastest Robotic Development only
Default Moderate Balanced Recommended
High probability Slower Very natural Conservative users
Time windows Delayed start Realistic Scheduled execution

🛠️ Troubleshooting

Problem Solution
Script too slow Reduce actionDelay values; lower probabilities
Too robotic Increase probabilities; add time windows
Runs outside hours Check allowedWindows format (24-hour time)
Skipping too many days Reduce randomOffDaysPerWeek
Gestures interfering Lower probabilities or disable specific gestures

Debug Humanization

$env:DEBUG_HUMANIZATION=1; npm start

🎛️ Presets

Conservative

{
  "humanization": {
    "enabled": true,
    "actionDelay": { "min": 200, "max": 600 },
    "gestureMoveProb": 0.6,
    "gestureScrollProb": 0.4,
    "allowedWindows": ["08:00-10:00", "20:00-22:00"],
    "randomOffDaysPerWeek": 2
  }
}

Balanced (Default)

{
  "humanization": {
    "enabled": true
  }
}

Performance

{
  "humanization": {
    "enabled": true,
    "actionDelay": { "min": 100, "max": 250 },
    "gestureMoveProb": 0.2,
    "gestureScrollProb": 0.1,
    "randomOffDaysPerWeek": 0
  }
}