{"id":516,"date":"2005-07-29T15:06:00","date_gmt":"2005-07-29T09:36:00","guid":{"rendered":"https:\/\/www.quickonlinetips.com\/archives\/2005\/07\/29\/virtual-keyboards-protect-against-keyloggers-spyware\/"},"modified":"2026-10-28T13:47:22","modified_gmt":"2026-10-28T08:17:22","slug":"virtual-keyboards-protect-against-keyloggers-spyware","status":"publish","type":"post","link":"https:\/\/www.quickonlinetips.com\/archives\/2005\/07\/virtual-keyboards-protect-against-keyloggers-spyware\/","title":{"rendered":"Do Virtual Keyboards Protect Against Keyloggers? (2026 Guide)"},"content":{"rendered":"<p>Do virtual keyboards protect against keyloggers? Back in 2005 I recommended using the Windows on-screen keyboard to type passwords on public computers in internet cafes and libraries, because keyloggers record what you type on a physical keyboard. That advice still has some value, but spyware has become smarter. Here is what <strong>virtual keyboards<\/strong> can and cannot protect you from in 2026, and the better ways to stay safe.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-39692\" alt=\"Windows on-screen virtual keyboard\" src=\"https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/virtual-keyboard.jpg\" width=\"333\" height=\"313\" srcset=\"https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/virtual-keyboard.jpg 333w, https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/virtual-keyboard-150x140.jpg 150w, https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/virtual-keyboard-300x281.jpg 300w\" sizes=\"(max-width: 333px) 100vw, 333px\" \/><\/p>\n<p><strong>Quick answer:<\/strong> A virtual (on-screen) keyboard can stop basic hardware and software keyloggers that only record key presses. It does not stop modern spyware that takes screenshots, reads form fields or steals saved passwords. The best protection is to avoid logging in on public computers, use passkeys or two-factor authentication, and let a password manager fill passwords on your own devices.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6af6c604e5df1\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"ez-toc-cssicon\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #1a202c;color:#1a202c\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #1a202c;color:#1a202c\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6af6c604e5df1\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2005\/07\/virtual-keyboards-protect-against-keyloggers-spyware\/#What_is_a_keylogger\" >What is a keylogger?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2005\/07\/virtual-keyboards-protect-against-keyloggers-spyware\/#How_to_open_the_virtual_keyboard\" >How to open the virtual keyboard<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2005\/07\/virtual-keyboards-protect-against-keyloggers-spyware\/#Where_virtual_keyboards_still_help\" >Where virtual keyboards still help<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2005\/07\/virtual-keyboards-protect-against-keyloggers-spyware\/#Where_virtual_keyboards_fail\" >Where virtual keyboards fail<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2005\/07\/virtual-keyboards-protect-against-keyloggers-spyware\/#Better_ways_to_protect_your_passwords_in_2026\" >Better ways to protect your passwords in 2026<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2005\/07\/virtual-keyboards-protect-against-keyloggers-spyware\/#FAQ\" >FAQ<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2005\/07\/virtual-keyboards-protect-against-keyloggers-spyware\/#Can_keyloggers_capture_on-screen_keyboard_input\" >Can keyloggers capture on-screen keyboard input?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2005\/07\/virtual-keyboards-protect-against-keyloggers-spyware\/#How_do_I_know_if_a_public_computer_has_a_keylogger\" >How do I know if a public computer has a keylogger?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2005\/07\/virtual-keyboards-protect-against-keyloggers-spyware\/#Why_do_bank_virtual_keyboards_shuffle_the_keys\" >Why do bank virtual keyboards shuffle the keys?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2005\/07\/virtual-keyboards-protect-against-keyloggers-spyware\/#Is_the_banks_virtual_keyboard_safe\" >Is the bank&#8217;s virtual keyboard safe?<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"What_is_a_keylogger\"><\/span>What is a keylogger?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>A keylogger records everything you type. It can be:<\/p>\n<ul>\n<li><strong>Hardware:<\/strong> a small plug between the keyboard and the computer, often found on shared computers.<\/li>\n<li><strong>Software:<\/strong> hidden spyware or info-stealer malware that logs keystrokes and sends them to an attacker.<\/li>\n<\/ul>\n<p>Passwords, card numbers and private messages are all at risk.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"How_to_open_the_virtual_keyboard\"><\/span>How to open the virtual keyboard<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li><strong>Windows 11 and 10:<\/strong> press <strong>Windows + Ctrl + O<\/strong>, or press Windows + R, type <code>osk<\/code> and press Enter.<\/li>\n<li><strong>Mac:<\/strong> System Settings &gt; Accessibility &gt; Keyboard &gt; Accessibility Keyboard.<\/li>\n<li><strong>Bank websites:<\/strong> many Indian and European banks show their own on-screen keyboard on the login page, sometimes with shuffled keys.<\/li>\n<\/ul>\n<p>The first time I saw a website&#8217;s own virtual keyboard was in June 2005, on a secure transaction site. The number keys appeared in a different order every time the page loaded, so you entered your password with mouse clicks instead of keystrokes. That was designed to defeat both keyloggers and spyware that tracks the mouse position, and many bank keypads still work this way.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-41639\" src=\"https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/virtual-keyboard.png\" alt=\"Website virtual keyboard login with shuffled number keys\" width=\"497\" height=\"326\" srcset=\"https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/virtual-keyboard.png 497w, https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/virtual-keyboard-150x98.png 150w, https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/virtual-keyboard-300x196.png 300w\" sizes=\"(max-width: 497px) 100vw, 497px\" \/><\/p>\n<p>The Windows On-Screen Keyboard was originally built as an accessibility tool, letting people who can use a mouse but not a physical keyboard type with clicks. In Windows XP it lived under Start &gt; All Programs &gt; Accessories &gt; Accessibility.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Where_virtual_keyboards_still_help\"><\/span>Where virtual keyboards still help<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>Against hardware keyloggers plugged into the keyboard cable.<\/li>\n<li>Against simple software keyloggers that only capture key presses.<\/li>\n<li>Bank keyboards with scrambled layouts make click-tracking harder.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Where_virtual_keyboards_fail\"><\/span>Where virtual keyboards fail<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li><strong>Screen capture:<\/strong> spyware can record screenshots or video of every click.<\/li>\n<li><strong>Form grabbing:<\/strong> malware in the browser can read what you enter into a login form, however you type it.<\/li>\n<li><strong>Stolen sessions:<\/strong> info-stealers copy browser cookies and saved passwords, skipping the login entirely.<\/li>\n<li><strong>Phishing:<\/strong> no keyboard trick helps if you type a password into a fake website.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Better_ways_to_protect_your_passwords_in_2026\"><\/span>Better ways to protect your passwords in 2026<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ol>\n<li><strong>Avoid public computers for logins.<\/strong> Use your own phone with mobile data or a hotspot instead.<\/li>\n<li><strong>Turn on two-factor authentication or passkeys<\/strong> for email, banking and social accounts. A stolen password alone is then not enough. See how to <a href=\"https:\/\/www.quickonlinetips.com\/archives\/2015\/11\/secure-google-email-account\/\">set up Gmail 2-Step Verification<\/a>.<\/li>\n<li><strong>Use a password manager<\/strong> on your own devices. Autofill means you rarely type passwords at all, and it refuses to fill on fake sites. If you are moving away from LastPass, see how to <a href=\"https:\/\/www.quickonlinetips.com\/archives\/2021\/09\/print-lastpass-passwords-list\/\">export your LastPass passwords<\/a>.<\/li>\n<li><strong>Use private browsing<\/strong> on any shared computer and sign out completely when you finish.<\/li>\n<li><strong>Change passwords<\/strong> you had to use on a public PC as soon as you get home.<\/li>\n<li><strong>Scan suspicious files<\/strong> before opening them, for example with <a href=\"https:\/\/www.quickonlinetips.com\/archives\/2007\/08\/virustotal-free-online-scan-with-multiple-antivirus-engines\/\">VirusTotal<\/a>.<\/li>\n<\/ol>\n<h2><span class=\"ez-toc-section\" id=\"FAQ\"><\/span>FAQ<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Can_keyloggers_capture_on-screen_keyboard_input\"><\/span>Can keyloggers capture on-screen keyboard input?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Simple keyloggers cannot, but advanced spyware that records the screen or reads form fields can.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"How_do_I_know_if_a_public_computer_has_a_keylogger\"><\/span>How do I know if a public computer has a keylogger?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Check for odd plugs between the keyboard and PC. Software keyloggers are usually invisible, so treat every public computer as unsafe.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Why_do_bank_virtual_keyboards_shuffle_the_keys\"><\/span>Why do bank virtual keyboards shuffle the keys?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>So that recording where you click doesn&#8217;t reveal your PIN or password. The layout changes on every page load, so click positions mean nothing to an attacker.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Is_the_banks_virtual_keyboard_safe\"><\/span>Is the bank&#8217;s virtual keyboard safe?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>It adds a layer of protection, but combine it with two-factor authentication and only use it on trusted devices.<\/p>\n<p>Do you still use the on-screen keyboard for passwords? Tell us in the comments.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Do virtual keyboards protect against keyloggers? Back in 2005 I recommended using the Windows on-screen keyboard to type passwords on&#8230;<\/p>\n","protected":false},"author":4,"featured_media":39692,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[7],"tags":[],"class_list":["post-516","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/posts\/516","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/comments?post=516"}],"version-history":[{"count":3,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/posts\/516\/revisions"}],"predecessor-version":[{"id":68533,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/posts\/516\/revisions\/68533"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/media\/39692"}],"wp:attachment":[{"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/media?parent=516"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/categories?post=516"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/tags?post=516"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}