EmuloAgent Virtual Keyboard for Shuffled PINs

The video above shows something that looks impossible at first: EmuloAgent typing a PIN into a keypad whose numbers move to a new place every time. The clip runs under two minutes and stays on the result. This post is the written companion, and it goes further into the part that matters most: how the Virtual Keyboard action reads a shuffling keypad, what it does when a digit does not match, and the safeguards that keep a wrong password from locking your account. It also draws a clear line around what the feature is for.

Why some keypads shuffle their digits

Some games and apps ask for a second, numeric password on top of your login: a transaction PIN, a vault code, a subpassword. To make that harder to steal, the on screen keypad reshuffles the digits on every use, so the 7 sits in a different cell each time. It is a real security measure. It defeats a shoulder surfer memorizing finger positions, and it defeats a naive bot that always taps the same spot. The side effect is that ordinary automation breaks, because a fixed tap lands on whatever number happens to be there.

What the Virtual Keyboard action really does

Virtual Keyboard lives under the Passwords group in the builder. You set it up once in a short wizard: you capture the ten digits of the keypad, 0 through 9, and mark where the Confirm button is. Then you enter the password for each profile that will use this keypad, from four to ten digits. At run time the agent does not trust positions. For each digit of your password, in order, it grabs a fresh frame and looks for that exact number with computer vision, matching the shape of the glyph rather than a location. Because the keypad reshuffles and redraws between digits, it re-reads the screen before every tap, finds the right key by its value, taps its center, and finishes on Confirm. During setup it even runs a quick check on each captured digit to make sure you marked the number itself and not the spot it happened to occupy.

It types a password you already own

This is the important part, and it is worth being blunt about it. The Virtual Keyboard action does not discover, guess or crack anything. The only thing it solves is the shuffled layout. The secret, the digits themselves, has to come from you, entered ahead of time as your own password. Point it at a keypad without the right code saved and it has nothing to type. So the feature turns a tedious job, entering a PIN whose keys keep moving, into an automatic one for an account that is already yours. It gives you no leverage at all over an account whose password you do not know.

What happens when a digit does not match

The code follows one rule above the rest: account safety first, and when in doubt, do not type. If a digit is not recognized with confidence, the agent retries a few times on fresh frames. If it still is not sure, it stops before pressing Confirm. It never sends half a password and never guesses a key it could not read. The macro halts and tells you to recapture that keypad’s digits. Stopping is treated as the safe outcome, always preferred over entering something wrong.

The stop that protects your account

Now the other case: the saved password is simply wrong. It gets sent, rejected, and the keypad comes back. Virtual Keyboard tolerates at most two sends within thirty seconds on the same keypad, and a third inside that window stops the macro. The reason is concrete. Most apps and games lock an account after a few wrong attempts in a row, often on the third, so EmuloAgent stops just short of that line and asks you to review the password, the trigger condition and the Confirm position. A subpassword is normally entered once every few hours, so a fast burst of tries is read as a sign that something is off, not as normal use.

Where your password is stored

Your saved code is never kept in plain text. On Windows it is encrypted with DPAPI and bound to your account and machine, so copying the file to another computer will not decrypt it. In the wizard the field is masked, with a show option when you need it. And if you export or share the macro, the password is stripped out before the package is built: it does not travel with the macro, and whoever receives it enters their own. Sertta never learns or stores your third party account, game or app passwords. EmuloMobile follows the same idea, keeping the code in the Android Keystore with AES-256 and outside the macro file.

Use it on your own accounts

So the honest framing is simple. Virtual Keyboard is for automating your own subpassword, on your own accounts, in the apps and games you already use. It is not a tool for getting past someone else’s security, and it could not be even if you wanted, because it needs a code only you have. The Emulo Terms are explicit here: you may not use the product to break the rules of any game, app, site or platform, to violate the law or anyone’s rights, or for anything fraudulent. You are solely responsible for the automations you build and run, and Sertta is not liable for bans, penalties or suspensions that come from breaking a third party’s rules. You decide, app by app, whether to automate password entry at all. The safeguards above exist to protect your account, not to open anyone else’s.

Next

New to the app? Start with the overview, then see how profiles work and how to build an automation. When you are ready, download EmuloAgent and set up Virtual Keyboard on your own keypad.