If your work computer is monitored, the fastest way to confirm it is checking Task Manager (Windows) or Activity Monitor (Mac) for unfamiliar background processes, scanning your browser's installed extensions for keylogger-style add-ons, and checking whether your employer discloses monitoring in a handbook or login banner. Those three checks catch most corporate monitoring tools running in 2026. Legitimate IT monitoring platforms like Teramind, ActivTrak, or Microsoft Purview usually announce themselves as named services and show up in policy documents; covert spyware installed to specifically target one employee hides its process name and often disables itself from the taskbar, which is the harder case to catch without professional equipment.
- Task Manager, browser extensions, and network logs reveal most corporate monitoring on a work computer in 2026.
- Disclosed tools like ActivTrak or Teramind run as named processes; covert spyware hides its name and icon.
- Battery drain, fan noise, or a flickering webcam light signal active screen or camera monitoring software.
- A VPN hides browsing from your ISP, not from monitoring software already installed on the device itself.
- USA Bugsweeps runs TSCM sweeps nationwide when software checks can't rule out a hidden physical device.
Why this matters
Employee monitoring software grew fast after 2020 as remote work became permanent for millions of workers, and by 2026 it's standard on most company-issued laptops. The distinction that matters is between disclosed IT monitoring — which is legal, common, and usually harmless if you're not doing anything against policy — and covert spyware installed to target one specific person, which is a different problem entirely and sometimes crosses into illegal surveillance territory.
Knowing which one you're dealing with changes what you do next. Disclosed monitoring means adjusting your behavior on that device. Covert spyware means documenting what you find and, if it involves a hidden camera or bug rather than software, calling in a professional sweep.
How to tell if your work computer is monitored
Run through this checklist in order. Each check takes under five minutes and rules out or confirms a different monitoring method.
| Check | Where to look | What it tells you |
|---|---|---|
| Running processes | Task Manager (Ctrl+Shift+Esc) or Activity Monitor | Named monitoring software running in the background |
| Installed programs | Control Panel > Programs, or Applications folder | Monitoring apps installed outside your knowledge |
| Browser extensions | Chrome/Edge/Firefox extensions menu | Keylogger or activity-tracking add-ons |
| Network activity | Resource Monitor or Little Snitch (Mac) | Unusual outbound traffic to unfamiliar domains |
| Startup items | Task Manager > Startup tab | Software configured to launch and hide on boot |
| Company policy | Employee handbook, login banner, IT onboarding docs | Whether monitoring is disclosed and expected |
If you already suspect your smartphone might carry the same kind of software, run that check alongside the computer check — employer-issued phones and laptops are frequently monitored together through the same mobile device management platform.
Sign 1: Unfamiliar processes running in Task Manager
Open Task Manager and sort by name. Anything you don't recognize is worth a quick search — most legitimate monitoring software identifies itself by vendor name (Teramind, ActivTrak, Hubstaff, Veriato) rather than hiding behind a generic system-sounding name.
A process with a deliberately vague name (svchost32, systemhelper, updatemgr) that isn't a known Windows or macOS service is the biggest red flag. Genuine monitoring tools don't need to disguise themselves because the company already told you they're there.
Sign 2: Company policy documents disclose monitoring software
Check your employee handbook, onboarding paperwork, or the login banner that appears when you boot the machine. Most US employers that monitor computers put a disclosure somewhere in writing, partly because it protects them legally and partly because monitoring works better as a deterrent when employees know it exists.
No disclosure anywhere, but you still find monitoring software running, is a meaningfully different situation than disclosed monitoring you simply forgot about.
Sign 3: Slower performance, battery drain, or webcam light activity
Screen-recording and keystroke-logging software runs continuously, which shows up as background CPU usage, shortened battery life on a laptop, and sometimes a webcam or microphone indicator light turning on when you haven't opened a camera app. None of these alone confirms monitoring, but a device that's noticeably slower or hotter than it used to be, with no software updates to explain it, is worth investigating further.
Sign 4: Network traffic shows uploads to unfamiliar domains
Monitoring software has to send captured data somewhere, which means it generates outbound network traffic even when you're not actively working. Tools like Resource Monitor on Windows or Little Snitch on Mac show which processes are talking to the internet and where. Steady small uploads to a domain you don't recognize, especially overnight when you're not using the device, points to monitoring software phoning home.
Sign 5: Browser extensions or admin profiles you didn't install
On a company-issued Chrome or Edge browser, check the extensions list and the "Managed by your organization" notice that appears in browser settings. A configuration profile you don't remember approving, combined with extensions you never installed, usually means IT pushed a monitoring policy through mobile device management — which is standard for corporate devices but worth confirming matches what your handbook describes.
Why monitoring setups vary by employer
- Industry — finance, healthcare, and legal employers monitor more heavily due to compliance and data-loss requirements
- Device ownership — company-issued laptops get monitored far more aggressively than personal devices used under a BYOD policy
- Remote-work exposure — fully remote roles see more monitoring software than on-site roles, since managers can't observe activity directly
- Prior incidents — a company that's had a data leak or IP theft case tends to add monitoring across the board afterward
- Role sensitivity — access to financial systems, trade secrets, or customer data usually means a higher tier of monitoring than a general admin role
If your concern is specifically about a business protecting proprietary information rather than an individual employee being singled out, the monitoring landscape looks different — tech companies protecting trade secrets often combine software monitoring with physical countermeasures in shared spaces like conference rooms.
Can my employer monitor my personal email on a work computer?
Yes, if you access personal email through a company-owned device or network, your employer can typically see that activity, since the monitoring software captures everything running on the machine rather than distinguishing between work and personal accounts. The safest approach is checking personal email only on a personal device over your own connection, not the work laptop.
Is it legal for my employer to monitor my work computer?
In most US states, employers can legally monitor computers and networks they own, provided the device is used for work and the employee has some form of notice, which is why handbooks and login banners matter. The legal line usually shifts once monitoring extends to a personal device, a personal account accessed off company networks, or covert audio/video recording without consent — those situations move into different legal territory and are where a documented pattern matters if you ever need to raise it formally.
Does a VPN stop my employer from monitoring my computer?
A VPN hides your browsing activity from your internet service provider and from networks outside your company, but it does nothing against monitoring software already installed on the device itself. If the monitoring tool captures keystrokes, screenshots, or webcam feed at the operating-system level, a VPN tunnel around your traffic doesn't touch it.
Can spyware survive a factory reset?
Standard consumer spyware and most employee-monitoring software gets wiped by a full factory reset, since it lives in the operating system rather than firmware. The exception is monitoring pushed through company-managed device profiles, which can reinstall automatically the moment the device reconnects to the corporate network or a mobile device management server — a factory reset doesn't remove the underlying policy, it just resets the device that the policy re-applies itself to.
If you've run every software check above and still suspect something beyond standard IT monitoring — a hidden camera or audio device planted in your office rather than software on the machine — that's a physical countermeasures problem, not a computer problem. USA Bugsweeps conducts on-site TSCM sweeps nationwide to locate hidden cameras, audio bugs, and network intercept devices that a software audit alone can't catch.
Suspect covert surveillance beyond software?
Nationwide TSCM sweeps for hidden cameras, bugs, and trackers.
Workers who want to check their own device before calling in a professional often start with counter-surveillance apps built for smartphones, which cover many of the same detection principles — unfamiliar processes, battery drain, unexplained network activity — applied to a phone instead of a laptop.
FAQ
How can I tell if my work computer is monitored in 2026?
Check Task Manager or Activity Monitor for unfamiliar processes, review installed browser extensions, and check your employee handbook for a monitoring disclosure. Most corporate monitoring software in 2026 identifies itself by vendor name rather than hiding.
What software do employers use to monitor computers?
Common platforms include Teramind, ActivTrak, Hubstaff, and Microsoft Purview, all of which typically run as a named background process. These tools log keystrokes, screenshots, app usage, or website visits depending on the license the employer purchased.
Can my employer see my screen without me knowing?
Yes, screen-recording monitoring software can capture your display continuously without any visible indicator on most operating systems. Checking Task Manager for recording or capture-related processes is the fastest way to confirm it.
Does a webcam cover stop monitoring software from recording me?
A physical cover blocks the camera lens but does nothing to stop keystroke logging, screenshot capture, or microphone recording running elsewhere on the device. It only addresses the video channel, not the rest of what monitoring software can capture.
Is employee monitoring software legal without telling employees?
Employer-owned devices can generally be monitored under US law, but disclosure requirements vary by state, and covert monitoring without any notice moves into legally riskier territory. A written policy or login banner is the standard way employers meet notice requirements.
How do I check if my browser is being tracked at work?
Open your browser's extension menu and settings page to look for a managed-by-your-organization notice, which indicates IT pushed a monitoring configuration. Unfamiliar extensions alongside that notice usually confirm active browser-level monitoring.
Can spyware be installed on a work computer remotely?
Yes, IT departments and mobile device management systems can push monitoring software remotely without physical access to the device. This is standard for company-issued laptops enrolled in a corporate management profile.
Should I use my personal phone instead of a work computer for private matters?
Yes, using a personal device on your own network keeps personal communications off any monitoring system your employer has installed on the work computer. Work devices, even when used off-hours, remain subject to whatever monitoring policy is in place.
One last thing
Most people checking whether their work computer is monitored are actually fine — disclosed monitoring is boring, policy-driven, and rarely targets one person specifically. The cases worth real concern are the ones where the monitoring software has no vendor name, no handbook mention, and shows up alongside a hidden camera or recorder somewhere in the physical office. That combination is when a software check stops being enough and a physical sweep becomes the next step in 2026.
