Webcam and microphone hijacking gets plenty of tabloid attention, but the more common and realistic risk is simply not knowing which apps have quietly been granted access to your camera and microphone over the years. This guide walks through auditing and locking down those permissions on Windows, recognising genuine warning signs, and adding a physical layer of protection that costs nothing.

Auditing Windows Camera Permissions

Windows maintains a central permissions list controlling which apps can access your webcam, separate from any individual app's own settings.

  1. Go to Settings > Privacy & security > Camera (Windows 11) or Settings > Privacy > Camera (Windows 10).
  2. Check the top toggle, Camera access, is on if you want to use your camera at all, or off to disable it system-wide as a blunt but effective measure.
  3. Below that, Let apps access your camera controls whether any app (as opposed to just desktop programs) can request access.
  4. Scroll through the list of individual apps and toggle off access for anything that doesn't genuinely need it — a calculator app or a game with no video calling feature has no legitimate reason to access your webcam.
  5. Separately check Let desktop apps access your camera, since some older Windows programs are controlled by this toggle rather than the modern app list above it.

Auditing Windows Microphone Permissions

The process mirrors the camera settings:

  1. Go to Settings > Privacy & security > Microphone.
  2. Review Let apps access your microphone and the per-app list beneath it.
  3. Pay particular attention to apps you installed long ago and rarely use — permissions granted once during setup often persist indefinitely even if you stopped using the app regularly.
  4. Check Let desktop apps access your microphone as well, for the same reason as the camera setting above.

Pro tip: Do this audit every few months, not just once. New apps request permissions during installation, and it's easy to click "Allow" without thinking during a busy setup process, then forget you granted it.

Checking Individual App Permissions Directly

Beyond the Windows-wide settings, some apps manage their own camera/microphone permissions internally:

  • Zoom, Microsoft Teams, and similar video-calling apps have their own settings (usually under Settings > Video or Settings > Audio) controlling whether the camera activates automatically when joining a meeting.
  • Web browsers manage camera and microphone access per website. In Chrome, go to Settings > Privacy and security > Site settings > Camera (and separately, Microphone) to see which websites have been granted access and revoke any you don't recognise or no longer need. In Microsoft Edge, the equivalent is Settings > Cookies and site permissions > Camera/Microphone. In Firefox, it's Settings > Privacy & Security > Permissions.

Safety tip: Video call links from unfamiliar sources sometimes prompt for camera/microphone access before you've verified who's actually asking. Only grant browser-level camera or microphone access to sites you recognise and trust, and revoke access afterwards for one-off video calls (like a single job interview platform) you won't use again.

Recognising the Signs of Unauthorised Access

Windows includes visual indicators specifically to make covert access harder to hide:

  • A small green camera icon appears in the system tray (bottom-right of the taskbar) whenever your webcam is actively in use, alongside — on many laptops — a physical LED light next to the camera lens itself.
  • Click the camera icon in the system tray to see which specific app is currently using it.
  • For the microphone, check Settings > Privacy & security > Microphone and scroll to Recent activity, which lists which apps have accessed the microphone recently, even if not right now.

If you notice the camera light activating when you haven't opened any video app, or an unfamiliar app listed in recent microphone activity, treat it seriously:

  1. Immediately disable that app's access via the settings above.
  2. Run a full scan with Windows Security (Windows Defender) or your installed antivirus software, since malware is a realistic cause of unexpected camera/microphone activity.
  3. Check for and install any pending Windows updates, as attackers sometimes exploit unpatched vulnerabilities to gain this kind of access.

Warning: A webcam light that stays off does not guarantee the camera isn't active — some malware has historically been designed to disable the LED indicator alongside gaining access. This is uncommon but is exactly why a physical cover, described below, is worth having regardless of software settings.

Physical Protection: Webcam Covers

Software settings can be bypassed by sufficiently determined malware; a physical cover cannot.

  • A simple sliding webcam cover (inexpensive and widely available) physically blocks the lens when not in use, sliding open only when you need to make a call.
  • Many modern laptops now include a built-in physical shutter for exactly this reason — check if yours has one before buying an add-on cover.
  • For desktop webcams (typically clip-on models), unplugging the USB cable entirely when not in use is the equivalent physical protection, since a disconnected camera cannot be accessed by any software at all.

There isn't a widely reliable physical equivalent for microphones on most laptops since they're rarely designed to be physically disconnected, which makes the software permission audit above the primary defence for microphone privacy.

Locking Down Smart Speakers and External Webcams

The same principles extend to other devices in your home:

  • Smart speakers (Amazon Echo, Google Nest, and similar) usually have a physical mute button that disables the microphone at a hardware level — use it when you want certainty rather than relying solely on the "stop listening" voice command.
  • Standalone security/baby-monitor webcams should have strong, unique passwords (never left on factory defaults) and their firmware kept up to date, since these are common targets precisely because they're often left with default credentials and are directly internet-facing.

A Quick Recurring Checklist

  • Review Windows camera and microphone app permissions every few months
  • Check browser site permissions for camera/microphone periodically, revoking anything unfamiliar
  • Keep a physical cover on any external or built-in webcam without a shutter
  • Pay attention to the camera activity light and unfamiliar entries in microphone recent activity
  • Keep Windows and antivirus software up to date, since malware remains the realistic route to unauthorised access

Locking down webcam and microphone privacy isn't about assuming you're specifically being watched — it's routine hygiene that closes an avenue most people leave open by accident, through permissions granted once during a busy install and never revisited since.

Was this guide helpful? Explore more Privacy Settings guides, or browse all Security & Performance articles.