Keylogger

What Is a Keylogger?

A keylogger is malicious software or hardware that secretly records every keystroke typed on a computer or mobile device, capturing sensitive information such as private keys, seed phrases, passwords, and cryptocurrency exchange credentials without the user’s knowledge.

These surveillance tools can operate at various levels including:

• Hardware devices physically attached between keyboards and computers
• Software programs running in the background
• Web-based scripts embedded in malicious websites that monitor browser activity

How It Works

Step 1: Installing malware

Keyloggers infiltrate devices through various methods including: malware attachments in phishing emails, malicious downloads disguised as legitimate software, infected USB devices, or by attacking security vulnerabilities in operating systems and apps.

Step 2: Tracking users

Once installed, they operate stealthily by capturing keystrokes at the system level, taking screenshots of sensitive information, monitoring clipboard contents when users copy and paste.

Step 3: Transmitting data

Finally, they send the collected data to attackers through encrypted channels or store it locally for later retrieval.

How to Protect Yourself

• Use hardware wallets like Ledger or Trezor to keep private keys isolated from potentially compromised computers, and always write out a hard copy backup of your recovery seed—never type it on an electronic device
• Install reputable antivirus software and keep all systems updated with security patches
• Use on-screen keyboards for entering sensitive information like seed phrases
• Learn more in our Web3 security beginner guide