keyloggery

Keyloggery is the practice of recording the keystrokes typed on a computer or other input device. It encompasses software, hardware, and firmware methods designed to capture input data, often including sensitive information such as passwords, messages, and search terms. The term is used in cybersecurity, digital forensics, and monitoring contexts, and its acceptability depends on consent, policy, and law.

Software keyloggers operate as background programs or services that log keyboard activity, and may extend to capturing clipboard contents or screenshots in some cases. Hardware keyloggers are physical devices placed between the keyboard and the computer or embedded in keyboard hardware; they can be wireless or wired and may be used without altering the host system. Firmware-based keyloggers reside in the keyboard or other input components, and can be harder to detect.

Keyloggery has legitimate uses in enterprise security, parental supervision, and law enforcement with proper authorization. In contrast, it can be employed for illicit surveillance, credential theft, espionage, or privacy violations. Legal frameworks on keylogging vary by jurisdiction and context, typically requiring consent from users or employees and adherence to data protection laws.

Detection and defense focus on reducing risk. Measures include up-to-date security software, periodic system audits, checks for tampering with hardware, and limiting physical access to devices. Strong authentication, multifactor login, password managers, and minimizing reliance on typed secrets for sensitive operations are recommended to mitigate potential exposure from keyloggers.