Webcam light on for no reason? How to see which app is using your camera

The little LED next to your camera comes on, you're not in a meeting, and your stomach drops. Nearly every time, the explanation is boring: a meeting app you closed an hour ago is still holding the camera in the background, a browser tab kept its permission, or a vendor utility is "previewing." But the only way to be sure is to look — and every operating system now gives you a way to see exactly which app has the camera open. Here's where to look, in order, and how to tell an annoyance from an actual problem.

First: what the indicator actually means

On modern laptops the camera LED is wired to the sensor's power line, not to software. On MacBooks and most business-grade Windows laptops it is physically impossible to capture video without the light coming on — it isn't a courtesy that malware can politely decline. The light means the sensor is powered, full stop. So a lit LED is a reliable signal that something has the camera; it's just not a signal that the something is malicious.

Operating systems add a software indicator on top:

macOS shows a green dot in the menu bar (next to Control Center) whenever any app has the camera open, and an orange dot for the microphone.
Windows 11 shows a small camera icon in the taskbar corner while an app is capturing, with the app's name on hover.
Chrome and Edge show a red camera icon in the tab that is capturing, and a camera symbol in the address bar.
iPhone and Android show a green dot (camera) or orange dot (mic) at the top of the screen.

macOS: find the app in two clicks

Click the Control Center icon in the menu bar (the two toggle switches).
At the top, macOS lists exactly what's happening: "Camera in use by Zoom", "Microphone in use by Chrome". Click that line to jump straight to the Privacy settings for the camera.

If the dot is showing but no app is listed, it's usually a process that just released the camera — the dot lingers for a few seconds. A dot that stays on with nothing listed is worth a restart; it's a known cosmetic glitch after some macOS updates and does not indicate capture.

For a full audit: System Settings → Privacy & Security → Camera lists every app that has ever been granted camera access. Switch off anything you don't recognize or no longer use. Apps you remove from the list have to ask again the next time they want the camera, which is exactly the behaviour you want.

Windows 11: the "recently accessed" log

Windows keeps a timestamped record of camera use, and it's the single most useful thing to check.

Open Settings → Privacy & security → Camera.
Scroll to Recent activity. Each app that used the camera is listed with the date and time it last did so — including apps that used it while you weren't looking.
The same page lets you switch camera access off per app, or for everything at once with the top toggle.

A limitation worth knowing: this list is reliable for Store apps and most modern desktop apps, but a classic desktop program can bypass the per-app toggles and still show up only as "Desktop apps" rather than by name. If the entry says "Desktop apps," check Task Manager (Ctrl+Shift+Esc) for anything camera-ish that's still running — Zoom, Teams, Discord, OBS, Camo, Logitech G Hub, vendor "camera companion" software — and end it.

Chrome, Edge, Firefox: the tab you forgot

A browser tab with a granted camera permission keeps that permission for the site, not just the session. Any Google Meet tab, Teams web tab, or camera test page you left open can turn the LED on the moment the page decides to show a preview.

Look across your tabs for the red camera icon — that's the one capturing. Close it, or click the icon to stop the camera and keep the tab.
To revoke permissions: click the tune/lock icon left of the address bar → Site settings, and set Camera to Ask or Block. For a full list, chrome://settings/content/camera (Edge: edge://settings/content/camera) shows every site that has been granted access; prune it.
Browser extensions can also request the camera. Review chrome://extensions and remove anything you didn't install deliberately.

Phones and tablets

Both iOS and Android show the green dot when the camera is active, and both keep a log.

iPhone: swipe down to Control Center from the top-right; the app name using the camera appears at the top. For history, Settings → Privacy & Security → App Privacy Report records every camera and microphone access for the past seven days, by app.
Android: tap the green dot to see the app. Settings → Security & privacy → Privacy → Privacy dashboard shows a 24-hour timeline of camera and mic use per app.

Apps using the camera when they shouldn't — a flashlight app, a game, a "cleaner" — are the mobile equivalent of a mystery LED, and worth uninstalling rather than just revoking.

When it's actually a lock, not a spy

If the light is on and your video app shows a black screen, you're most likely looking at two apps fighting over one camera — the classic exclusive-lock problem. Zoom, Teams and OBS all keep the device open while sitting in the system tray or menu bar, even after you "close" them. Quitting the offender turns the LED off and hands the camera back.

Could it really be malware?

It happens, but it's rare, and it looks different from a stuck indicator. Warning signs that justify a proper look:

The camera activates at odd hours, with no meeting app or browser running at all.
Windows' recent-activity list or Apple's Privacy Report shows an app you've never heard of, with a generic name.
You find a program you didn't install in Task Manager, Activity Monitor or the startup items list.
Your antivirus, or Windows Security, has flagged something recently.

In that case: disconnect from the network, run a full scan with Windows Security or a reputable scanner (Malwarebytes is the usual second opinion), check Settings → Apps / Applications for anything unfamiliar, and change the passwords of accounts you've used on that machine from a different device. Remote-access tools (AnyDesk, TeamViewer, Chrome Remote Desktop) installed "by tech support" during a scam call are the most common real-world culprit — remove them.

Closing the door for good

A sliding privacy cover costs a couple of euros and settles the question physically. Prefer the thin sliding kind over stick-on tabs; thick covers can stop a laptop lid closing properly and mark the screen.
Revoke, don't just toggle. Remove camera permission from apps and sites you don't use; a fresh prompt is a feature.
Quit meeting apps properly — right-click the tray/menu bar icon and choose Quit — rather than closing the window.
Check the log once a month. Windows' recent activity and Apple's App Privacy Report take thirty seconds to skim, and they're the only place a background user leaves a trace.
If you use an external webcam, unplugging it or unplugging its USB hub is the simplest "off" there is.

And when you do want the camera on, a 30-second test confirms it's working, shows which device the browser picked, and lets you see exactly what any app would see — with no app holding it afterwards, because the page releases the camera the moment you leave.