Scraping facebook and tiktok using Selenium.

[abdulM-qureshi]

Hi Community,
I attempted to scrape Facebook Marketplace using Selenium, but their two-factor authentication (2FA) security is requiring me to log in. Even if I manage to log in, they still ask for an authentication code. When my code is deployed live, how can I handle the 2FA process and provide the authentication code dynamically?

Additionally, I encountered issues while trying to scrape TikTok. Their advanced CAPTCHA system is not being solved by Bright Data.

If any experienced developers have faced and resolved these challenges, please share your solutions. I would greatly appreciate your help. Thanks!

[Carmello209]

im currently working on a FB Scraper bot, that can log in automatically, on a set frequency, to then advance the information to a CRM ( customer relationship manager for the real estate industry.

what challenges have you come across so far

[GitItDone19]

can u give me script plz

[abdulM-qureshi]

I am facing the difficulties when I need to login automatically, they ask for the otp sometime. And if I give it at once. But on the next scraping it will be asking the same thing again which I will be not able to insert bcz the code will be host. That's the problem

…

On Fri, Apr 25, 2025, 5:34 AM Carmello209 ***@***.***> wrote: im currently working on a FB Scraper bot, that can log in automatically, on a set frequency, to then advance the information to a CRM ( customer relationship manager for the real estate industry. what challenges have you come across so far — Reply to this email directly, view it on GitHub <#2180 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BAARIP4JQQ2GJUOWEYDC2DL23F7KRAVCNFSM6AAAAAB3PZDY4GVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTEOJUGEYDAMQ> . You are receiving this because you authored the thread.Message ID: <ultrafunkamsterdam/undetected-chromedriver/repo-discussions/2180/comments/12941002 @github.com>

[manra399]

Use this https://2captcha.com/ for solving/bypassing captcha services i've tested its very good.

[manra399]

While for otp Related issue you can Use a chrome profile where authentication is validated and then you can deploy that same chrome profile with all its files so that it won't require OTP but you need to validate for how long it'll work undergoing some testing.

[abdulM-qureshi]

I tried one thing. i take the cookies of my personal/demo account and using pthron i first inject the cookies and then get wnter into the site.

…

On Mon, May 12, 2025 at 4:53 PM manra399 ***@***.***> wrote: While for otp Related issue you can Use a chrome profile where authentication is validated and then you can deploy that same chrome profile with all its files so that it won't require OTP but you need to validate for how long it'll work undergoing some testing. — Reply to this email directly, view it on GitHub <#2180 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BAARIPYYGPOXRB3JPK5AWDT26CDURAVCNFSM6AAAAAB3PZDY4GVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTGMJRG4YDEOA> . You are receiving this because you authored the thread.Message ID: <ultrafunkamsterdam/undetected-chromedriver/repo-discussions/2180/comments/13117028 @github.com>

[OnlineProxy-io]

In my experience, the most practical way to get around Facebook’s 2FA during deployment is to log in manually once using Selenium with a persistent Chrome profile (--user-data-dir) and then just reuse that session. As long as your IP, user-agent, and device fingerprint remain consistent, you can usually avoid triggering 2FA again. For smoother automation, it's a good idea to pull the cookies after logging in, encrypt them, and store them somewhere secure (AWS Secrets Manager works well) so you can load them into future sessions.
TikTok, on the other hand, is a bit trickier. Their CAPTCHA system is pretty aggressive, and most basic solvers don't hold up. I’ve had better luck with AI-driven tools like CapMonster, especially when combined with Puppeteer-extra or Selenium Stealth to simulate human-like behavior. Emulating mobile devices or going a step further with something like Appium (which automates real devices) also helps reduce detection and 2FA hassles.