CyberGuard dictionary / Malware

Keylogger

THE DEFINITION

A keylogger is software or hardware that records keystrokes, often to capture credentials or other sensitive input.

In simple terms

It watches what a person types. Some keylogging is authorized for testing or accessibility, but covert collection is a common abuse.

Technical explanation

Collection may occur through operating-system hooks, browser injection, accessibility features, or physical devices. The resulting data can expose passwords, messages, and payment details; authentication controls and endpoint monitoring limit different parts of the risk.

Key capture can be software-based or physical and may collect more than passwords, including messages and payment details. Response depends on what was typed during the exposure window.

Examples in practice

Malware records a user's login keystrokes and sends the captured password to an attacker-controlled service.

A malicious extension records keystrokes while a finance worker signs in. The company removes it, revokes active sessions, and reviews transactions made during the affected period.

Why it matters

A single compromised endpoint can reveal secrets typed into otherwise legitimate websites.

VERIFY & LEARN MORE

Sources and further reading

Published 2026-10-15 · Last updated 2026-10-15 · CyberGuard editorial content. Source links provide context; they do not imply endorsement.

← Browse all definitions