Summarize With AI
Meet Monica, who runs operations at a mid-sized company. A senior leader has asked her whether to start employee keystroke monitoring. Arjun leads IT, and Sara is an analyst on Monica's team. They're fictional, but the questions are real. We'll follow Monica as she weighs the idea, and we'll see what Arjun and Sara notice.
What is employee keystroke monitoring?
Employee keystroke monitoring is software that records or counts what employees do on their keyboards at work. The word covers two very different tools. One saves the text typed. The other only notes that keys were pressed, and when. Most legal and trust problems come from the first kind.
Monica hears "keystroke monitoring" and pictures a tool that counts activity. Arjun asks a vendor one question: does it store the words, or only that typing happened? The answer is the first kind.
Keystroke logging
Saves what was typed: emails, chats and documents, word for word, plus passwords and private logins if they are typed.
Keystroke counting
Saves that keys were pressed: how much typing happened, and when. There is no record of which keys.
You will also hear keylogger, which usually means the logging kind. A third idea, keystroke dynamics, studies typing rhythm. The IEEE calls it a behavioral biometric technique that identifies people by their typing patterns.
In short: ask first whether a tool stores text or only counts presses, because every later question depends on it.
How does keystroke monitoring work, and what can it capture?
Keystroke monitoring software runs as a small program, called an agent, on the work computer. It watches the keyboard and sends a record to an admin dashboard. What that record holds depends on the tool: the text itself, a count of presses, or a count tied to the app in use.
Typed text
Logging tools can save words typed in any app.
Private logins
A text logger can catch a personal bank or email password typed on a work PC.
Press counts
A counter notes that keys were pressed, not which ones.
Typing rhythm
Keystroke dynamics looks at gaps between keys.
Active time
Presses show whether someone is at the device.
App context
Some tools pair key data with the app in use and the time.
Arjun installs a counter on a few test machines. By Friday its report shows Sara with almost no typing on Tuesday afternoon. She spent it on a long customer call, taking notes by hand.
In short: keyboard data shows that typing happened or didn't, and it never shows what the person was doing instead.
Is keystroke monitoring legal in the US?
Often yes, on company devices, but notice and the state decide. FindLaw says it is generally legal for an employer to monitor, and that much turns on whether the computer is a work device and whether the company has been open about its policy. Secret logging is the riskiest version.
Swipe sideways for full table
Source | What it says |
|---|---|
18 U.S.C. 2511 | Intercepting an electronic communication is barred, but not where one party has given prior consent |
New York Civil Rights Law 52-c | Employers that monitor phone, email or internet use must give written notice at hiring, acknowledged by the employee, and post it |
Delaware Code Title 19, section 705 | Employers must give notice before monitoring phone, email or internet use, with a $100 civil penalty per violation |
FindLaw, updated April 29, 2026 | No federal law outlaws it outright, and monitoring nobody disclosed is unethical and may be illegal |
Brookings, April 15, 2025 | With no national privacy bill, few legal limits exist, and keystroke monitoring is legal in many states |
Sources: 18 U.S.C. 2511, New York Civil Rights Law 52-c, Delaware Code Title 19, section 705, FindLaw, updated April 29, 2026 and Brookings, April 15, 2025.
We checked each source above as of this guide's update date. Two gaps matter. None of the three statutes names keystrokes or says whether logging typed text counts as intercepting a message, so that is a question for a lawyer.
This is general information, not legal advice. Laws change and differ by state, so check with a lawyer for your situation. This guide covers US sources only. Rules elsewhere differ, so ask local counsel.
Monica's company has staff in New York. Her notice goes out a week after Arjun's pilot starts, and Sara spots the gap. For that week, her work was counted before anyone told her.
In short: legal in many places isn't the same as wise, so give notice first and ask a lawyer about each state where staff work.
How much trust and privacy does it cost?
The cost is morale and privacy, plus a pile of sensitive data that someone has to protect. A logger that saves typed text can catch private passwords and messages, and employees often assume the worst when nobody explains. Recent news from Meta shows how fast that goes wrong.
On April 21, 2026, the BBC reported that Meta told staff a new tool would log their keystrokes and mouse clicks as training data for AI. A Meta spokesman said the data wasn't used for any other purpose.
By June 23, the BBC reported that Meta had paused the program. Some collected data had been left potentially accessible to anyone inside the company, and nearly 2,000 workers had signed a petition. Meta said it had no sign of improper access. We didn't verify what happened next.
That case was about AI training, not job reviews. The lesson carries over: more typed data means more to guard and explain.
Sara asks Monica a plain question. If she checks her bank on her work laptop, does a logger keep it? Arjun says it could, and then someone would be holding it.
Source: ADP Research, People at Work 2025, worker sentiment across 34 markets.
ADP also found that workers who said they were watched were nearly three times less likely to report a high level of productivity. The report measures worker sentiment, so this shows a link, not a cause. We found no reliable figure for how many employers use keystroke monitoring specifically.
In the American Psychological Association's 2026 Work in America survey of 2,009 employed US adults, approximately half of workers said they believed their employer uses technology to monitor them. Belief isn't proof.
In short: typed text is the most sensitive data a tool can collect, so every extra record is something you must protect and explain.
Can typing counts show who is productive?
Not well, in our view. Key presses show that someone typed, not whether the work was good or finished. An engineer chasing a bug or a salesperson on a call may type little. That is our opinion, not a research finding, and activity counts need other signals beside them.
One week Arjun spends a day reading error logs and thinking. His typing is close to zero, though he was solving the worst outage of the month. By the report, it was his laziest day.
In short: typing volume is a weak stand-in for useful work, so pair any count with the output it is meant to explain.
When can logging typed text be justified?
Rarely, and only for a narrow, written reason. The usual reasons given are productivity checks and security investigations. In our view only the second can hold up, such as a documented investigation with a named owner. Answer five questions first.
- Purpose: what exact problem does it solve, and could a lighter tool solve it?
- Notice: has every affected person been told in writing?
- Scope: is it limited to work devices and work hours?
- Access: which named roles can read the logs?
- Retention: when are the logs deleted?
Brookings warns that when workers mix personal and work use on one device, private details can reach supervisors, so scope is the hardest question. Have a lawyer review any plan to log typed text.
After a security scare, Arjun proposes logging typed text for the finance team. Monica asks the five questions. Nobody can say who would read the logs, and the answers don't hold up.
In short: if you can't answer all five questions in writing, don't switch it on.
What can you use instead of typed text?
Lower-risk options answer the same question, "is work moving?", with less sensitive data. App and website time, active time from input counts, attendance and task status all work without storing a word anyone typed. Match the option to the question you actually have.
We360.ai is our product, and it covers app and website time, active time and attendance. Its privacy docs list what it collects and what it doesn't.
What it collects on a work computer.
- The app or site in focus, second by second
- Keyboard and mouse activity, not what was typed
- Screenshots at intervals admins set
Where you control it as an admin.
- Screenshots can be switched off for a team or person
- Blur level is adjustable
- Employees can see their own analytics
What it never collects from employees.
- Individual typed characters
- Webcam feeds
One honest limit. A screenshot is a picture of the screen, so it can show text that happens to be on screen. The screenshot docs describe a blur setting and an off switch for that reason. We360.ai also isn't the answer if a rule requires you to record typed content, because it doesn't.
We360.ai gives clear, real-time productivity insights without micromanaging.
Monica pilots the activity view. The first report marks a chat app as unproductive, so Sara's own dashboard shows hours of "unproductive" time. That chat app is how her team works.
In short: classify apps with the team, then measure results and focus time first and leave typed text out.
See how employee monitoring works without it, or what an employee dashboard shows.
FAQ
Can my employer monitor my keystrokes? +−
Yes, often, on a company device in the US. FindLaw says it's generally legal, depending on the device and how open the company is. Your handbook should say what's collected. This isn't legal advice.
How can I tell if my keystrokes are being monitored? +−
Look for the notice. Check your handbook, your offer paperwork and any pop-up at login. If you can't find one, ask HR in writing what is collected, who sees it and how long it's kept. Our post on signs of being monitored at work has more.
What is the difference between keystroke monitoring and a keylogger? +−
A keylogger records the characters typed, and people also use the term for malware. Keystroke logging employee monitoring uses the same idea on a work computer, with an employer's knowledge. Other keystroke monitoring only counts presses. Ask which kind a tool is before you judge it.
Does keystroke monitoring capture passwords? +−
A tool that logs typed text can. Brookings describes a store keylogger that let a coworker open a worker's personal email and financial account. Tools that only count presses don't store what you type.
Is there free keystroke monitoring software? +−
Some tools may be free, but check where the logs are stored, who can read them and how long they're kept. A free logger still holds your most sensitive data. We360.ai has a free 7-day trial with no credit card, and its privacy docs say typed characters are never recorded.
Do employers have to tell you about keystroke monitoring? +−
Can an employer monitor keystrokes while I work from home? +−
Yes, on a company laptop, if the policy says so. FindLaw says federal law generally bars employers from accessing private accounts on personal devices without consent. Using a personal device for work changes the picture, so ask HR.
Related Guides
What is employee monitoring? It is when an employer collects data about how work gets done, such as hours, apps, activity or location, usually with software on company devices. This guide explains what it tracks, how it works, what US law says and how to start fairly.
Screen monitoring software captures what appears on a work computer screen, as scheduled screenshots, a live view or a video recording. Employers use it to review work and settle disputes. Employees should know what it captures and who sees it. This guide covers the types, features, privacy controls and US legal basics.
To monitor employee computer activity well, decide why you need the data, pick the lightest method that answers it, tell employees first and test on one computer before a rollout. This guide covers the methods, built-in tools versus software, setup, what monitoring can see, US notice rules and fair use.
An employee monitoring policy is a short written document that tells employees what a company tracks on work devices, why, who sees the data and how long it's kept. This guide gives you an employee monitoring policy template, sample wording, a consent form and the US notice rules.