Why Understanding Monitoring Matters
As of 2026, 78% of employers use some form of digital monitoring on their workforce. Among companies with remote or hybrid teams, that number climbs to 96%. If you are working at a computer right now, the odds are overwhelming that something is watching what you do.
But "monitoring" is not one thing. The difference between Toggl Track (a manual timer with no surveillance) and Teramind (continuous screen recording, keystroke logging, and behavioral AI) is enormous. Knowing exactly which methods your employer uses determines what they can actually see — and what they cannot.
This guide is a technical explainer of every tracking method used by employee monitoring software in 2026. No workarounds, no hacks — just a clear breakdown of what each technology records, which tools use it, and what the data looks like on your manager's dashboard. For practical strategies on maintaining consistent activity reports, see our complete guide to cheating time tracking software.
The 6 Tracking Methods Used in 2026
Modern monitoring tools rarely rely on a single method. Most combine several of the categories below into one platform, creating a multi-layered picture of your workday. Understanding each layer helps you know what your employer actually sees.
1. Screenshot Capture
Screenshot monitoring captures images of your screen at set intervals, typically every 1 to 10 minutes. Some tools take shots on a fixed schedule, while others use randomized timing to prevent employees from predicting when the next capture will happen.
What managers see on their dashboard: a timeline of thumbnail images from your workday. They can click any screenshot to enlarge it and see exactly what was on your screen at that moment — which application was open, which website was visible, which document was being edited.
Advanced implementations add further capabilities:
- AI-powered image analysis — Some tools flag screenshots that show social media, streaming services, or an unchanged desktop across multiple captures.
- OCR text extraction — Tools like Controlio apply optical character recognition to extract readable text from screenshots, making screenshot content searchable.
- Blur detection — Detects when an employee has obscured their screen or when a screenshot captures an out-of-focus or covered display.
- Employee review — Some tools let employees see and delete their own screenshots, though deleting a screenshot also deletes the associated time entry.
Tools that use this: Hubstaff, Time Doctor, DeskTime, Insightful, Teramind, Clockify (Pro plan only), CurrentWare, TeamLogger, Kickidler, Monitask, Screenshot Monitor.
2. Activity Level Tracking
Activity trackers measure physical input from your mouse and keyboard to calculate an "activity level" percentage. A typical system samples input events over 10-minute intervals: if you moved the mouse or pressed a key during 8 of those 10 minutes, your activity level reads 80%.
These trackers do not just count whether input occurred. Modern versions analyze:
- Mouse-to-keyboard ratio — Real work involves a natural mix of both. 100% mouse and 0% keyboard is a red flag.
- Movement quality — The velocity, direction changes, and path complexity of mouse movements. Circular or linear patterns suggest a jiggler.
- Input diversity — Whether clicks, scrolls, drags, and keystrokes all appear in natural proportions.
- Baseline comparison — How your current activity pattern compares to your historical average. Sudden changes trigger alerts.
Most employers expect 40-60% activity, not 100%. Real knowledge work involves reading, thinking, meetings, and other activities that do not generate keyboard input.
Tools that use this: Hubstaff, Time Doctor, DeskTime, ActivTrak, Insightful, Time Champ, RescueTime, Teramind, Kickidler, Veriato, Sapience/ProHance.
3. Keystroke Logging
Keystroke loggers record every key pressed on the keyboard. This is the most invasive category of monitoring. Some employers use it purely to measure typing volume, but others log the actual content of what is typed — including passwords, personal messages, and search queries.
From a detection standpoint, keystroke loggers are powerful because they can distinguish between meaningful typing (varied characters, natural pauses, corrections with backspace) and simulated input (repetitive patterns, no corrections, unnaturally consistent speed).
Keystroke logging raises significant privacy concerns. In the EU, it is generally considered disproportionate under GDPR and is restricted in most member states. In the US, it is legal on company-owned devices when disclosed, but several states have additional protections.
Tools that use this: Teramind, Kickidler, Veriato, CleverControl, InterGuard, Controlio.
4. Screen Recording
Screen recording goes beyond screenshots by capturing continuous video of the employee's display. Managers can play back entire work sessions to review exactly what happened and when. Some tools record at reduced frame rates (1-5 FPS) to save storage, while others capture full-motion video.
Recording can be:
- Continuous — Records everything from login to logout. Used by Kickidler, Controlio, and Veriato.
- Event-triggered — Records only when specific events occur, such as visiting a flagged website, opening a sensitive file, or switching to a non-work application.
- AI-indexed — Some tools index recorded footage so managers can search for specific activities, websites, or keywords within the video timeline.
Screen recording is the hardest form of monitoring to work around because it captures the complete visual context of everything you do. Unlike periodic screenshots that leave gaps between captures, continuous video has no blind spots.
Tools that use this: Teramind, Kickidler, Veriato, CleverControl, Controlio.
5. GPS & Location Tracking
GPS tracking is primarily used for field workers, delivery drivers, and sales teams. The software logs the employee's location at regular intervals via their phone or a company-issued device. Some tools create geofences — virtual boundaries that trigger alerts when the employee leaves a designated work zone.
For remote desk workers, GPS monitoring is less common but appears in platforms like Hubstaff and TSheets (QuickBooks Time) that want to verify you are working from your declared location. Clockify also offers GPS tracking through its mobile app on paid plans.
GPS tracking typically only works through mobile apps, not desktop applications. If your employer's monitoring is desktop-only, GPS is not a factor.
Tools that use this: Hubstaff, TSheets/QuickBooks Time, Clockify (Pro plan via mobile).
6. App & Website Monitoring
App and website trackers maintain a detailed log of every website visited and every application opened, along with how much time was spent in each. They categorize activities as productive, unproductive, or neutral based on configurable rules.
Key details about app tracking:
- Foreground vs background — Most tools track which application is in the foreground (the active window you are clicking on), not just which apps are running. Keeping a work app open in the background while browsing personally does not fool foreground-aware tracking.
- URL tracking — Records the full URL of every website visited, not just the domain. Your manager can see the specific Reddit thread, YouTube video, or news article.
- Document titles — Some tools log the title of the active document or browser tab, providing context about what you were working on within each application.
- Category scoring — DeskTime and ActivTrak automatically score your day as a productivity percentage based on how much time was spent in "productive" vs "unproductive" applications.
Tools that use this: DeskTime, ActivTrak, Hubstaff, Time Doctor, Insightful, RescueTime, Teramind, Kickidler, Veriato, CleverControl, InterGuard, Sapience/ProHance, CurrentWare, Time Champ, TeamLogger, Controlio.
Major Monitoring Tools and What They Track
Each monitoring tool combines different methods into its own package. Below are the most widely used platforms, with a focus on what specifically each one captures. For a full side-by-side comparison table with 20 tools and 7 capability columns, see our monitoring capabilities matrix.
Hubstaff
Activity levels (mouse + keyboard), randomized screenshots, GPS tracking for mobile workers, app and URL logging. The activity percentage is the metric most managers watch. Does not log keystrokes or record video. Visible to the employee — no stealth mode.
Time Doctor
Screenshots at configurable intervals, activity levels, idle time detection with "are you still working?" pop-ups, distraction alerts for non-work websites, app and URL tracking. Premium plan adds screen recording and claims to detect mouse jiggler patterns. No keystroke logging.
DeskTime
Automatic time tracking from boot to shutdown — no manual start needed. Productivity categorization of every app and URL as productive/unproductive/neutral. Optional screenshots on Premium plan. Idle detection at 3 minutes. Private Time feature to pause tracking. No keystroke logging.
Teramind
The most comprehensive monitoring platform. Continuous screen recording, full keystroke logging, activity levels, app/web tracking, email and IM monitoring, file transfer tracking, behavioral analytics with AI anomaly detection, DLP rules, and stealth mode. Used primarily in finance, healthcare, and government.
Insightful (formerly Workpuls)
Real-time screenshots, activity levels, app/web categorization, productivity scoring, idle detection. Offers both visible and stealth deployment modes. Project-level time tracking. More invasive than Hubstaff, less than Teramind.
ActivTrak
Workforce analytics with screenshots, activity scoring, app/web categorization, and behavioral baselines that flag deviations from normal patterns. Optional stealth mode. Focuses on team-level analytics rather than individual surveillance. No keystroke logging.
Kickidler (KeepActive)
Continuous screen video recording, full keystroke logging, activity levels, app tracking, and productivity scoring. Can play back any employee's entire workday as video. Among the most invasive tools available. Stealth mode available.
Clockify, Toggl Track & Harvest
These are timer-based tools with minimal or no monitoring. Toggl and Harvest have zero surveillance features. Clockify adds optional screenshots and GPS on its Pro plan ($9.99/user/month). All three rely on manual time entries and trust the employee to report honestly.
Stealth Mode vs Visible Monitoring
One of the most important distinctions in monitoring software is whether the employee knows it is running.
Visible monitoring tools show an icon in the system tray, appear in Task Manager, and sometimes notify the employee when screenshots are captured. Hubstaff, Time Doctor, DeskTime, and Toggl all operate visibly. Employees know tracking is active and can see their own data.
Stealth monitoring tools run hidden — no system tray icon, no visible process in Task Manager (or a disguised process name), and no notification to the employee. CleverControl specifically hides from Task Manager. Teramind, Insightful, ActivTrak, Veriato, InterGuard, and Kickidler all offer stealth deployment as an option.
The legal implications differ by jurisdiction. In the EU, stealth monitoring is generally prohibited under GDPR unless there is a specific, documented suspicion of wrongdoing. In the US, stealth monitoring is legal in most states as long as a monitoring policy has been disclosed — even if the specific tool is not identified. Several states (New York, Connecticut, Delaware) require explicit notice before any electronic monitoring, which effectively limits stealth deployment.
Your Rights as an Employee
Employee monitoring is legal in most countries, but your employer's rights are not unlimited. The specifics depend on where you work.
United States
The Electronic Communications Privacy Act (ECPA) allows employers to monitor electronic communications on company-owned devices when there is a legitimate business reason. Beyond federal law, several states have enacted additional protections:
- New York — Requires written notice to employees before electronic monitoring begins.
- Connecticut — Requires prior written notice of all types of electronic monitoring.
- California — CPRA requires employers to disclose what employee data they collect and why.
- Delaware — Requires notice and consent for monitoring electronic communications.
- Illinois — BIPA restricts biometric data collection including fingerprints and facial recognition.
European Union
GDPR requires employers to have a lawful basis for monitoring, to inform employees before monitoring begins, and to apply the principle of data minimization — collecting only the minimum data necessary. Keystroke logging is generally considered disproportionate. Employees have the right to request a copy of all monitoring data collected about them under Article 15 (Subject Access Request).
What to Ask Your Employer
Regardless of jurisdiction, you are generally entitled to know: whether monitoring software is installed, what data it collects, who has access to it, how long it is retained, and whether it is used in performance reviews. In the EU, you can formally request this information. In the US, check your employee handbook or ask HR directly.
What You Can Do About It
Understanding what your employer's tool tracks is the first step. The next step is deciding how to respond. Here are your options:
- Accept it and work within the system. Many employees find that once they understand the metrics, they can work naturally without worrying about them. Knowing that your employer expects 40-60% activity, not 100%, reduces anxiety.
- Use your break policy. Most employers allow breaks. Some tools like Hubstaff let you pause tracking. If yours does not, take breaks within whatever activity threshold your employer expects.
- Advocate for change. If you feel monitoring is disproportionate, raise it through appropriate channels. HR, employee resource groups, or management feedback sessions are all valid venues. The strongest argument is data: show that your output meets expectations regardless of activity scores.
- Maintain consistent reports during legitimate breaks. For strategies on keeping your activity metrics steady during short breaks, see our complete guide with detection risk ratings for every method.
Understand Your Monitoring — Then Take Control
Trick Tack keeps your activity reports consistent during short breaks by simulating natural mouse, keyboard, and app-switching behavior. Try it free for 7 days.
DownloadFrequently Asked Questions
Can my employer monitor me without telling me?
In most U.S. states, employers can legally monitor activity on company-owned devices without explicit consent, though many states require written notice through an employee handbook or IT policy. New York, Connecticut, Delaware, and California have specific disclosure requirements. In the EU, GDPR requires employers to inform employees about monitoring before it begins, explain what data is collected, and justify why it is necessary. If you are unsure, check your employee handbook or ask HR directly — in many jurisdictions they are legally obligated to tell you.
What is the most common type of employee monitoring?
Screenshot monitoring combined with activity level tracking is the most common configuration in 2026. Tools like Hubstaff, Time Doctor, and Insightful use this combination by default. Screenshots are captured every 5 to 10 minutes while an activity percentage is calculated from mouse and keyboard input. App and website tracking is the second most common feature. Full keystroke logging and continuous screen recording are less common and typically restricted to compliance-heavy industries like finance and healthcare.
Can monitoring software see my personal emails and messages?
If you access personal email or messaging apps on a monitored company device, the monitoring software can capture that activity through screenshots, screen recording, or app tracking. Tools like Teramind and Veriato also log keystrokes, which means anything you type — including personal messages — is recorded. However, monitoring software cannot access your personal accounts on your personal devices. The safest approach is to use your personal phone for any private communications.
Does monitoring software slow down my computer?
Most modern monitoring tools are designed to run with minimal performance impact. Lightweight trackers like Hubstaff, DeskTime, and Time Doctor typically use less than 1-2% CPU and 50-100 MB of RAM. However, tools that record continuous screen video (Teramind, Kickidler, Controlio) can consume more resources, especially during video encoding and upload. If you notice sudden performance issues after your employer deployed new software, monitoring could be the cause. Check Task Manager for unfamiliar processes consuming high CPU or memory.
Is it legal for employers to record keystrokes?
In the United States, keystroke logging on company-owned devices is generally legal when employees have been informed through company policy. However, it is the most invasive monitoring method and captures sensitive personal information like passwords and private messages. In the EU, keystroke logging is generally considered disproportionate under GDPR and is restricted or prohibited in most member states. Several U.S. states including California and Illinois have additional privacy protections. Check your local laws and employment agreement for specifics.
