A laptop camera that turns on without you starting a video call is a legitimate thing to be concerned about, but most of the time the cause is mundane — a background app you forgot was set to auto-join meetings, or a browser tab that still has camera permission from a site you visited last week. Both Windows and macOS keep a log of exactly which app accessed the camera and microphone and when, so you don't have to guess.
Checking Camera and Microphone History on Windows
Go to Settings → Privacy & security → Camera, and separately Settings → Privacy & security → Microphone. Each page shows a "Recent activity" section listing every app that has accessed that device, with a relative timestamp. This is a historical log, not just what's active right now — useful for confirming that the odd camera light you noticed twenty minutes ago really was just your video call app finishing a background task, not something else.
The same pages also list every app with camera or microphone permission and a toggle to revoke it individually. If you see an app in that list you don't recognize or don't remember installing, that's worth investigating separately — check Settings → Apps → Installed apps to see when it was added.
The Camera Indicator Light Is Trustworthy — With One Caveat
Most laptops built in the past several years have a hardware-level indicator LED next to the camera that lights up whenever the sensor is actively capturing, wired directly to the camera's power circuit rather than controlled by software. This means malware generally cannot activate the camera without the light coming on too, since it would require compromising hardware firmware rather than just software — a much higher bar. If your camera light is off, the camera is very likely not recording. The caveat: a small number of older or budget devices use a software-controlled indicator instead of a hardware one, which is a meaningfully weaker guarantee, so check your specific model's specs if you want certainty either way.
macOS: The Menu Bar Dot and Activity Log
On modern macOS, a small orange dot appears in the menu bar whenever the microphone is active, and a green dot for the camera, regardless of which app is using it. Click the dot to see which specific app is responsible. For historical access, System Settings → Privacy & Security → Camera (and Microphone, separately) lists every app that has requested and been granted access, with a toggle per app to revoke it.
Revoking Access from Specific Apps or Sites
Browser-based video calls (Google Meet, browser Zoom, etc.) request camera and microphone permission per-site rather than through the OS app list. In Chrome: Settings → Privacy and security → Site settings → Camera or Microphone, which lists every site you've granted access to and lets you remove it. The same applies in Firefox and Safari under their respective privacy or website settings — worth a periodic check since permissions granted months ago for a one-time video call often just sit there indefinitely afterward.
Mobile devices work the same way but organize the setting differently. On Android, Settings → Privacy → Permission manager → Camera (or Microphone) lists every app with that permission and when it was last used, with a per-app toggle. On iPhone, Settings → Privacy & Security → Camera shows the same list, and iOS additionally shows a small green or orange dot at the top of the screen — same convention as macOS — whenever either sensor is actively in use, visible even inside an app that's supposedly running in the background.
Task Manager and Activity Monitor as a Second Check
If a process is using the camera or microphone right now, it has to actually be running to do so, which means it will show up as an active process. On Windows, open Task Manager (Ctrl+Shift+Esc) and look at the Processes tab for anything unfamiliar consuming CPU continuously, then cross-reference it against the recent activity list. On macOS, Activity Monitor serves the same purpose. This won't catch a process cleverly disguised under a generic name, but it's a fast sanity check that costs nothing and often surfaces the culprit — usually a forgotten conferencing app still running in the system tray rather than anything malicious.
If You Genuinely Suspect Something Is Wrong
Run a full scan with your antivirus software, check the recent activity logs described above for anything unfamiliar, and review your list of installed apps and browser extensions for anything you don't remember adding — our guide on understanding browser extension permissions covers how an extension can request camera or microphone access disguised as an unrelated feature. If you use a reputable antivirus tool, most modern suites include a webcam-protection feature that blocks unauthorized access attempts and prompts you before any new app is allowed to use the camera at all.
Worth remembering that most webcam scares turn out to be false alarms once traced back through the activity log — a browser tab left open on a site with a lingering permission, a scheduling app that briefly checks for a meeting, or a driver update that flickers the indicator light for a second during initialization. Confirming the actual cause through the logs above is almost always faster and more reassuring than immediately assuming the worst.