Hardware & System Errors
Which app is secretly using my webcam right now?
Quick answer: Both Windows and macOS show a live indicator plus a built-in activity log, so no third-party tool is needed. On macOS click the green menu-bar dot; on Windows 11 check Recent activity under Settings, Privacy and Security, Camera.
Both Windows and macOS now show a visible indicator plus a built-in activity log for camera use — you do not need third-party tools to check this.
In the overwhelming majority of cases the answer is a forgotten background application rather than anything malicious, but the built-in logs let you establish that rather than assume it.
Try It Yourself
See what is currently holding the camera
Attempts to open the camera and reports whether another application already has it, which is the fastest confirmation that something else is connected.
Run the free online webcam testLook for the indicator light first
If the camera's physical LED is lit and you did not intentionally start it, something has an active connection right now. That is the first and most reliable signal available.
The LED is wired to the camera's power on most hardware, which is why it is harder to defeat than any software indicator.
macOS — use the green menu bar indicator
A small green dot appears at the top right of the menu bar whenever any app is actively using the camera. Click it, or open Control Centre, to see which application is listed.
macOS enforces this at system level, so an app cannot use the camera without triggering it.
For continuous monitoring of what touches your camera, use the Camera Access & Privacy Monitor.
Windows 11 — check camera usage history
Go to Settings → Privacy & Security → Camera and expand Recent activity. This lists which apps have accessed the camera recently, including ones running in the background.
Check Task Manager for unfamiliar processes
Open Task Manager with Ctrl+Shift+Esc and look for conferencing, recording or remote-access software you do not remember starting.
Sort by name rather than by CPU, since an idle background client holding the camera often uses very little processor time and sinks to the bottom of a usage-sorted list.
If an app is holding the device and you cannot identify it, run the Camera Block Detector.
Check for remote access software specifically
If you use remote-support or remote-desktop tools such as TeamViewer or AnyDesk for work, confirm none are still running with a session open.
These are designed to run quietly in the background, which makes them the most commonly overlooked legitimate explanation.
If nothing legitimate explains it, scan for malware
Run a full malware scan. Some malicious software does attempt covert webcam access, though this is far less common than a simply forgotten background app.
If a scan comes back clean and the indicator still lights unexpectedly, revoke camera permission for every app in your privacy settings and re-grant them one at a time.
Before a call, check what is visible behind you with the Background Motion & Privacy Leak Scanner.
Where each system reports camera activity
Every current desktop OS exposes this natively, and the built-in logs are more trustworthy than third-party monitors.
Windows 11
Settings → Privacy & security → Camera → Recent activity
Entries showing in use now indicate a live connection, and revoking the app's permission ends it immediately.
Windows 10
Settings → Privacy → Camera
Windows 10 shows which apps have permission but not a timestamped history, so Task Manager matters more here.
macOS
Green dot in the menu bar → Control Centre
The indicator is enforced below the application layer, so it cannot be suppressed by the app using the camera.
Linux
Terminal: fuser -v /dev/video0
This names the exact process ID holding the camera, which is the most precise answer of any platform here.
The table below shows how much camera-activity detail each system reports natively and what control it gives you:
| App | Practical ceiling | Manual control |
|---|---|---|
| Windows 11 | Timestamped history including background apps | Per-app revoke |
| Windows 10 | Per-app list without full activity history | Per-app revoke |
| macOS | Names the app using the camera right now | Quit the app, or revoke in Privacy |
| Linux | Lists processes holding the device | Full process control |
Troubleshooting checklist: finding what is using your camera
Native tools first — they are more reliable than anything third-party.
- Check whether the camera's indicator LED is lit right now.
- On macOS, click the green dot in the menu bar to see the app currently using the camera.
- On Windows 11, open Settings → Privacy and security → Camera → Recent activity.
- Look for entries marked in use now, which indicate a live connection rather than past access.
- Open Task Manager and sort by name, looking for conferencing or recording software.
- Check specifically for remote-access tools such as TeamViewer or AnyDesk with open sessions.
- Revoke camera permission for anything you do not recognise, then retest.
- Run a full malware scan if nothing legitimate accounts for the activity.