Bypassing HarmonyOS Secure Keyboard with hdc Command for Simulated Password Input

When a page uses the secure keyboard or other privacy settings, screenshots and video streams cannot capture the input, making it impossible for users to see or enter passwords on the device.

The hdc command provides a multi‑module input feature that can send key events directly to the input field, enabling password entry from the command line.

Example command to invoke the UI test input interface:

hdc shell uitest uiInput keyEvent

To simulate the numeric password "567", the corresponding keycode values are sent as follows:

hdc -t FMR02xxxxxxx shell uitest uiInput keyEvent 2005 2006 2007

The password input box then displays the entered characters, confirming that the simulated key events were successfully processed.

A front‑end simulated keyboard page can be created to collect user interaction, while the back‑end maps the received keycode values and uses the hdc command to operate the phone, solving the issue of inaccessible secure keyboards.

If the entire page is set to privacy mode, preventing screenshots and video streams, a similar approach of custom UI and hdc automation can be employed to work around the restriction.