Why Is My Mac's Camera Light On? How to Find What's Using It

Quick answer: A green light next to your Mac's camera means an app is actively using the camera right now — by hardware design, the light cannot turn on without the camera powering on. To find the culprit, check Control Center's camera indicator, then review System Settings > Privacy & Security > Camera for apps with access and revoke anything you don't recognize.

You glance up from an email and notice it: the small green dot glowing next to your Mac's built-in camera. You're not on a video call. You didn't open Photo Booth. So why is your Mac's camera light on?

It's a genuinely unsettling moment, and the first instinct is usually to assume the worst. The good news is that this indicator exists specifically to protect you, and in the vast majority of cases there's a perfectly ordinary explanation. The better news is that finding out exactly which app is responsible takes just a couple of minutes.

> Prefer not to dig through settings? Run a free CoreLock Security Score to see every app with screen, mic, camera, or full-disk access in about 60 seconds.

What the Green Light Actually Means

The green light beside your camera is wired directly into the camera's power. On modern Macs, it's not a software feature that an app politely turns on — it's a hardware-level indicator that lights up whenever the camera receives power. This is deliberate. Apple designed it so that malware cannot silently record you while keeping the light off, the way it sometimes could on much older machines.

So when the light is on, something is using your camera. Full stop. The question isn't whether the camera is active — it's *which app* activated it.

A few things commonly trigger the light when you're not expecting it:

• A video conferencing app (Zoom, Teams, FaceTime, Slack huddles) that's still running in the background and "warming up" the camera.
• A browser tab on a site that requested camera access — a meeting link, a virtual-try-on shopping page, a webcam test site.
• Photo Booth, QuickTime, or a third-party camera utility left open.
• Software that checks the camera at launch, like some streaming, recording, or "presence" tools.

You might also see an orange dot in the menu bar. Orange means your *microphone* is in use, not the camera. Green is camera (and it covers both camera-only and camera-plus-mic). Keeping those two straight saves a lot of confusion.

Step One: Check Control Center

The fastest way to identify the app is built right into macOS. When the camera is in use, click the Control Center icon in the menu bar (the two toggle switches near the clock). At the top, you'll see a line telling you the camera is in use and, crucially, the name of the app using it right now.

If recent activity just ended, the indicator area near the menu bar will briefly show which app *most recently* used the camera. Click the orange or green dot itself, and macOS will name the responsible app.

Nine times out of ten, this single step solves the mystery. You'll see "Zoom" or "Safari" or some app you forgot was running, and the panic evaporates.

Step Two: Review Camera Permissions

If Control Center doesn't give you a satisfying answer, or you just want the full picture, head to System Settings > Privacy & Security > Camera.

This screen lists every app you've ever granted camera access to, each with a toggle. Go through it slowly. The questions worth asking for each entry:

• Do I recognize this app?
• Does it make sense that this app would need my camera?
• Did I actually grant this on purpose?

A video app needing the camera is reasonable. A PDF reader, a "system cleaner," or some utility you don't remember installing asking for camera access is not. When I was building CoreLock's scanner, the thing that surprised me most was how many ordinary-looking apps request permissions that have nothing to do with their job. It's worth being a little ruthless here.

To revoke access, just flip the toggle off. The app loses camera access immediately. It might prompt you to re-enable it next time you legitimately need it, which is exactly the behavior you want. For a deeper walk through this list, I wrote a separate guide on which apps have camera access on your Mac.

Step Three: Find the Live Process in Activity Monitor

Permissions tell you what *can* use the camera. To see what's *actually running* right now, open Activity Monitor (Applications > Utilities, or search via Spotlight).

Look through the process list for anything camera-related or any app you don't recognize. Sort by CPU or by process name to make scanning easier. Video and camera apps will often show meaningful CPU usage while active. Double-click anything suspicious to see its full file path and details — legitimate apps live in sensible places like /Applications/, while something running out of a random hidden folder deserves a closer look.

If you want to confirm whether a specific app is touching the camera, Terminal can help. The camera on macOS is managed by a system process, and you can list what's holding it open:

lsof | grep -i "AppleCamera\|VDC\|camera"

This searches open files and devices for camera-related handles. The output can be noisy, but the left-hand column shows the process name attached to each entry. If you spot a process you don't recognize sitting on the camera, that's your answer.

You can also list running processes the old-fashioned way:

ps aux | grep -i -v grep

Scan for anything unfamiliar, especially processes running from unusual locations like /tmp/ or a hidden directory in your home folder. Most legitimate processes live under /usr/bin/, /usr/sbin/, or inside .app bundles. For more on telling normal background processes from suspicious ones, see my guide on hidden processes running on your Mac.

What About the Camera Light at Night?

A camera light coming on while you're sitting there is one thing. A camera light coming on at 3 a.m. when nobody's at the keyboard is more worth investigating.

Most of the time, late-night camera activity has a boring cause: a video app updating, a scheduled meeting client refreshing, or a backup or sync tool that briefly probes the camera. But it's a genuinely useful signal precisely because it's so unusual. If you can't account for it, treat it the way you'd treat any odd late-night activity — figure out which app did it, and decide whether you trust that app.

This is exactly the kind of thing that's hard to catch manually, because you're asleep when it happens. It's one of the reasons CoreLock flags night-time camera access specifically — so you wake up to a note about what touched your camera, rather than relying on having glanced at the menu bar at the right second.

Could It Actually Be Spyware?

Let's be honest and non-alarmist about this: on a Mac running a current version of macOS, secret camera spying is genuinely hard to pull off, and rarer than the internet sometimes implies. The hardware-linked light, the per-app permission system, and System Integrity Protection all work together to make silent recording difficult.

That said, "difficult" isn't "impossible," and not everything that misuses your camera is sophisticated malware. The more common real-world problems are:

• A legitimate app with overly broad permissions you never meant to grant.
• Remote monitoring or "parental control" software installed by someone with access to your machine.
• A browser site that grabbed camera access during a call and kept the tab alive.

If you've worked through the steps above and something still doesn't add up — an app you can't identify holding the camera, or activity you genuinely can't explain — it's reasonable to dig deeper. Two related guides cover the adjacent territory: how to check which apps are recording you and whether your Mac is sending data without permission. A keylogger or screen recorder often travels with the same kind of over-permissioned software, so it's worth checking those too.

How to Revoke Access and Clean Up

Once you've identified the offending app, your options are straightforward:

1. Revoke camera access in System Settings > Privacy & Security > Camera by toggling it off. This is the cleanest fix for an app you want to keep but don't trust with the camera.
2. Quit the app fully, not just close its window. On macOS, closing a window often leaves the app running. Use Cmd+Q, or right-click its Dock icon and choose Quit. Background apps that warm up the camera will stop once they're actually closed.
3. Check browser permissions if the culprit was a website. In Safari, go to Settings > Websites > Camera; in Chrome, Settings > Privacy and security > Site settings > Camera. Remove access for any site you don't trust.
4. Uninstall it properly if it's software you never wanted. Dragging an app to the Trash often leaves bits behind, so use the app's official uninstaller when one exists.

After cleaning up, watch the light for a day or two. If it stays off except when you're genuinely using the camera, you've solved it.

A Quick Habit That Prevents the Panic

The single most useful thing you can do isn't a tool or a command — it's getting familiar with what's normal on your own Mac. Once you know which apps legitimately use your camera and roughly when, the green light stops being alarming and becomes informative. You glance up, you think "right, that's Zoom warming up for my 2 o'clock," and you move on.

When something genuinely doesn't fit that pattern, *that's* when it's worth investigating. The indicator is doing its job: it's telling you the truth about your camera, every single time. The rest is just knowing where to look — and now you do.

Want the whole picture in one pass? A CoreLock Security Score lays out every app with camera, microphone, screen-recording, or full-disk access in about a minute, so you can spot the odd ones out without working through each settings panel by hand.