The clearest signs your employer is monitoring your computer are: an unfamiliar background process in Task Manager or Activity Monitor, a system tray icon you don't recognise, slower-than-usual performance during work hours, and unusual network activity. In most jurisdictions, employers are legally permitted to monitor company-owned devices — but they must tell you in advance.
Why Employers Monitor Employee Computers
Workplace computer monitoring is more common than most employees realise. A 2023 survey by ExpressVPN found that 78% of employers monitor their employees in some form — tracking activity, keystrokes, screenshots, or internet usage. The practice has grown significantly since 2020, driven by the shift to remote and hybrid work where managers no longer have natural visibility into whether employees are working.
Employers monitor for several reasons: measuring productivity, verifying attendance, protecting confidential data, ensuring compliance with company policy, and providing evidence in HR investigations. Most monitoring is not about distrust — it is about giving remote managers the same baseline visibility they would have in a physical office.
Understanding what monitoring looks like, and how to identify it, helps employees know what data their employer can see and what their rights are.
8 Signs Your Employer May Be Monitoring Your Computer
1. Unfamiliar Processes Running in the Background
The most direct way to detect monitoring software is to check your running processes. Monitoring agents run as background processes — lightweight programs that start automatically when you log in and run continuously throughout your shift. On a company-managed machine, you may see process names you don't recognise alongside familiar apps like Chrome, Slack, or Outlook.
Note: intentional stealth monitoring agents are specifically designed to be hard to identify in process lists. The presence of monitoring software does not guarantee it will appear with an obvious name.
2. A System Tray Icon You Don't Recognise
Standard (non-stealth) monitoring software shows a small icon in the system tray (Windows) or menu bar (Mac). If you see an icon you don't recognise — particularly one from a software company you haven't heard of — it may be a monitoring agent. Right-clicking the icon will usually show the application name, which you can search online.
3. Your Computer Is Slower Than Usual During Work Hours
Monitoring software consumes CPU and memory to capture screenshots, record activity, and transmit data to a remote server. On older or lower-spec machines, this can cause noticeable slowdowns. If your computer runs noticeably faster on weekends or outside work hours compared to during your shift, background monitoring processes may be contributing to the load.
4. Unusual Network Activity
Monitoring software regularly uploads screenshots, activity logs, and telemetry data to a remote server. This creates periodic network traffic that does not correspond to anything you are doing in the foreground. On Mac, tools like Little Snitch or the built-in Network Monitor can show connections to unfamiliar IP addresses or domains. On Windows, Resource Monitor (opened via Task Manager) shows per-process network activity.
5. Your IT Team Managed Your Device Setup
If your employer gave you a company device, pre-configured it, or enrolled it in an MDM (Mobile Device Management) system before handing it to you, monitoring software may have been deployed as part of that setup. Company-managed devices in corporate environments almost always have some level of monitoring in place — whether detailed activity monitoring or simply endpoint security software.
6. You Signed an Acceptable Use Policy or IT Policy at Onboarding
Most employers who monitor computers disclose it in their employment contract, employee handbook, or IT acceptable use policy. If you signed a document at onboarding that mentioned "monitoring," "tracking," "recording," or "surveillance of company devices," your employer has almost certainly deployed monitoring software. Read the document if you still have access to it.
7. You Work Remotely and Your Company Tracks Productivity Metrics
If your employer discusses "active time," "productivity scores," "attendance logs," or similar metrics in team meetings or performance reviews — and these are generated automatically rather than self-reported — there is monitoring software running on your device. These metrics cannot be calculated without an agent recording your activity.
8. Inactivity Alerts or Prompts to Return to Work
Some monitoring platforms send employees alerts when they have been idle for more than a configured number of minutes. If you have ever received a message like "you've been inactive for 30 minutes — are you still working?" from your employer's system, there is a monitoring agent running on your machine.
How to Check for Monitoring Software: Windows
On Windows, you can inspect running processes using Task Manager:
- Press Ctrl + Shift + Esc to open Task Manager
- Click More details if the compact view appears
- Go to the Processes tab — review every process listed under "Background processes"
- For any unfamiliar process name, right-click → Open file location to see where it is installed, or search the process name online
- Also check Startup tab — monitoring agents are typically configured to launch at startup
Common legitimate monitoring software names that may appear in Task Manager: Teramind Agent, Hubstaff, Time Doctor Helper, ActivTrak Agent, Trackpilots, DeskTime, Veriato. The presence of these names confirms monitoring is active.
How to Check for Monitoring Software: Mac
On macOS, use Activity Monitor:
- Open Spotlight (Cmd + Space) and search "Activity Monitor"
- Review all processes in the CPU tab — look for anything unfamiliar
- Check System Preferences → Privacy & Security → Screen Recording — any app listed here with a checkmark can capture your screen
- Check System Preferences → Privacy & Security → Accessibility — apps listed here can monitor your keyboard and mouse input
- Check System Preferences → General → Login Items — monitoring agents are typically added here to start at login
On macOS, the Screen Recording and Accessibility permission screens are the fastest way to see which apps have been granted monitoring capabilities. If you see an app you did not install yourself, it was likely deployed by your employer's IT team.
What Monitoring Software Typically Captures
Most employee monitoring platforms capture some combination of the following:
- Active time — minutes of keyboard and mouse activity per hour
- Application usage — which apps were open and for how long
- Website usage — domains visited and time on each site
- Screenshots — periodic images of your screen (every 1–20 minutes)
- Attendance — first login and last activity timestamps each day
- Idle time — periods of inactivity during logged-in hours
What responsible monitoring software does not capture (on properly configured platforms): the content of your keystrokes, your webcam or microphone, activity outside your scheduled working hours, or activity on personal devices.
Stealth monitoring agents capture the same data as standard agents — the difference is that the software runs with no visible icon. Whether you can see the software running or not, the data it captures is the same.
Is Your Employer Legally Allowed to Monitor You?
In most jurisdictions, yes — on company-owned devices, during working hours, with prior disclosure. Here is a quick summary by region.
India
The Information Technology Act (2000) and Digital Personal Data Protection Act (2023) permit employer monitoring of company devices for legitimate business purposes. Employees must be informed — typically through their employment contract or an IT policy acknowledged at onboarding. Monitoring personal devices without explicit written consent is not permitted.
United States
No federal law prohibits employer monitoring of company-owned devices. The Electronic Communications Privacy Act (ECPA) permits it with employee notice. Several states (Connecticut, Delaware, New York) require written advance notice before monitoring begins. If you are in the US and were never told about monitoring, check your state's specific requirements — your employer may be non-compliant.
United Kingdom & EU
UK GDPR and EU GDPR require employers to tell employees about monitoring before it begins, limit monitoring to what is necessary for a legitimate purpose, and conduct a Data Protection Impact Assessment for high-risk monitoring. Covert monitoring without disclosure is only permitted in exceptional circumstances (active criminal investigations).
UAE
UAE Labour Law permits monitoring of company-owned devices. Employees must be informed through their employment contract. The Cybercrime Law broadly prohibits recording communications without authorisation — making undisclosed monitoring legally risky for employers.
What to Do If You Discover Undisclosed Monitoring
If you find monitoring software on your device and were never told about it, take these steps:
- Check your onboarding documents — re-read your employment contract, employee handbook, and any IT policy you signed. Monitoring disclosure is often buried in boilerplate language.
- Ask your IT or HR department directly — "I noticed [process name] running on my computer. Can you tell me what it does and what data it collects?" Employers with transparent monitoring policies should be able to answer this clearly.
- Check your jurisdiction's requirements — if your country or state requires prior written notice and you received none, your employer may be in breach. Consult an employment lawyer if you believe your rights were violated.
- Do not attempt to remove the software — removing monitoring software from a company-owned device without authorisation may breach your employment contract or IT policy.
In practice, most employees who discover monitoring on their device find it was disclosed somewhere in their onboarding paperwork — just not prominently. Transparent monitoring is the industry standard and legally required in most jurisdictions. See our full employee monitoring laws guide for detailed country-by-country requirements.
A Note for Managers Reading This
If you found this article because you are considering monitoring your team, the right approach is transparent monitoring — not covert surveillance. Tell your employees what you are tracking, why, and how long data is retained. Transparent monitoring achieves the same productivity and accountability goals as covert monitoring, with none of the legal risk and a fraction of the trust damage.
Trackpilots offers both standard and stealth monitoring modes — but recommends that all deployments include written disclosure to employees before the agent is installed. The free plan covers unlimited users, includes screenshots, attendance, and activity tracking, and takes under 30 minutes to deploy. Start free today — no credit card required.
Conclusion
Most employer computer monitoring is legal, disclosed (somewhere in your onboarding documents), and increasingly standard for remote and hybrid teams. The clearest ways to detect it are Task Manager on Windows and Activity Monitor + Privacy settings on Mac. If you find monitoring software you were not aware of, check your employment contract first — in the majority of cases, disclosure was made but not prominently highlighted.
If you are an employer looking to monitor your team the right way — with transparency, legal compliance, and the right data — Trackpilots gives you all of that for free.