Secordit home
Contact

What is a keylogger?

Keyloggers record the keys you press, including passwords, messages and payment details. The NCSC's passwords exercise defines keyloggers as malicious software that logs keystrokes, including passwords. A strong or unique password does not help if it is captured as you type it. 123

By Secordit. Last checked: 10 November 2026.

Go to the steps · All glossary terms

How it works

  1. Harmful software is placed where it can record keystrokes. 12
  2. The keys you press, which can include passwords, are logged. 21
  3. Those details can then be used to sign in as you. MFA or a passkey can still reduce what a stolen password can do, but a keylogger on an already-open device is serious. 12

How it can look

The NCSC password guidance lists installing a keylogger among the ways passwords are discovered. An NCSC passwords learning exercise defines keyloggers as malicious software that logs keystrokes, including passwords. It says the best defence is keeping software current and up to date. 12

Warning signs

  • A device behaves oddly after an unexpected attachment, file or download, and passwords later stop working or are used without you. 32
  • Software updates have been left unapplied, even though the NCSC names keeping software current as the best defence against keylogging malware in its passwords exercise. 12
  • A caller offers to install a tool that will watch what you type, or asks you to install unknown software to fix a problem. 3

What to do now

  1. If you suspect malware, including a keylogger, follow the NCSC steps for an infected device. Do not take advice from an unsolicited caller. 3
  2. Change important passwords from a device you believe is clean, and turn on MFA or a passkey where you can. 12
  3. Apply software updates, which the NCSC describes as the best defence against keylogging malware in its passwords exercise. 2

UK reporting and support

  • If money has gone or banking details were shared, call your bank using the number on your card. Or use 159 if your bank participates. 6
  • For fraud or hacking in England, Wales or Northern Ireland, use Report Fraud. In Scotland, call Police Scotland on 101. 578
  • Follow the NCSC help for an infected device or a hacked account. 4
  • If someone is in danger, call 999. 78

How to protect yourself

  • Keep software current and up to date, which the NCSC names as the best defence against keylogging malware in its passwords exercise. 2
  • Be careful with unexpected attachments, downloads and unknown USB devices. 31
  • Use MFA or a passkey, understanding that a keylogger on a device you are already using is still serious. 12

Frequently asked questions

Can a keylogger steal my password even if it is long and unique?

Yes. A strong or unique password does not help if it is captured as you type it. MFA or a passkey can still reduce what a stolen password can do, but a keylogger on an already-open device is serious. 12

Will a scanner always find a keylogger?

No page here can claim that any one scanner always finds a keylogger. Follow the NCSC infected-device steps, and keep the built-in antivirus on and updated. 3

What does the NCSC name as the best defence against keylogging malware?

In its passwords exercise, the NCSC says the best defence is keeping software current and up to date. If you suspect malware, follow the NCSC steps for an infected device. 23

Matching kit

First Hour After a Breach · £29 · Digital download.

An incident-response planning kit for UK small businesses. It is not a live incident-response or legal service.

General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.

News Pulse

Account security, explained by email.

Read about News Pulse

Sources

  1. NCSC, Password policy: updating your approach | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  2. NCSC, Using passwords micro exercise (PDF) | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  3. NCSC, What is an antivirus product? Do I need one? | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  4. NCSC, Help for individuals | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  5. Report Fraud, Report Fraud. Accessed 10 November 2026 (Europe/London).
  6. Stop Scams UK, 159 Phone number - Stop Scams UK. Accessed 10 November 2026 (Europe/London).
  7. Police Scotland, How to report a crime - Police Scotland. Accessed 10 November 2026 (Europe/London).
  8. Report Fraud, Reporting cyber crime and fraud or phishing attempts - Report Fraud. Accessed 10 November 2026 (Europe/London).