This happens more often than people realize. You step away from your computer. You come back. And there it is — that tiny green dot in the upper-left corner of the MacBook. The webcam is active.
Your first instinct: check if you left a FaceTime window open, or Zoom running in the background. You check. Nothing. You look at Activity Monitor. Nothing obvious. The green dot eventually turns off. And you're left wondering what just happened.
That evening, I decided not to just shrug it off and move on. I wanted an answer.
What the Green Dot Actually Means — and What macOS Doesn't Tell You
On Mac, the webcam indicator light is a hardware protection. It's wired directly to the camera sensor and cannot be disabled by software — not by you, not by any app. If the light is on, an application is accessing your camera. That's a physical guarantee.
What macOS doesn't tell you is which app is using the camera at that specific moment, or why. The OS notifies you when an app requests camera access for the first time — but once permission is granted, the app can use it again at any time without alerting you.
The macOS permission trap: You grant camera access to an app once. You forget. Months later, that app can still silently activate your camera — with no notification, no warning, nothing to tell you except the green light.
That's exactly the problem I wanted to solve. Not because I suspected something sinister — I just wanted to understand what was happening on my own machine.
[PHOTO] Suggestion: MacBook on a desk in a dimly lit room, zoomed in on the webcam corner with the green dot lit — or a diagram explaining "green light = active camera access"
How to Find the Responsible App in Real Time
Before installing Maclaw, here's how you can manually identify which app is using your camera while the light is on:
Method 1 — Terminal (fastest)
This command lists the processes currently accessing camera resources. Run it in Terminal while the light is still on.
Method 2 — Activity Monitor
Applications → Utilities → Activity Monitor. Look for a process with a camera icon in the menu bar (macOS 12+), or sort by CPU usage to identify what's currently active.
Method 3 — Control Center (macOS Ventura+)
If you're running macOS 13 or later, the Control Center in the menu bar shows a camera icon with the app name whenever something accesses the camera. Click Control Center → the indicator appears in the top right.
[PHOTO] Suggestion: macOS Control Center showing the active camera indicator with app name — or Terminal with the lsof command and results displayed
What Maclaw Revealed in My Case
After installing Maclaw, I waited. A few days later, the green light came on again — and this time, I had the logs.
10:34 PM — Duration: 47 seconds
10:35 PM — ✅ Camera released — Google Chrome Helper (Renderer)
Google Chrome Helper. Not Chrome itself — the "helper" process that manages extensions and background tabs.
I had a Google Meet tab open from the afternoon — a finished meeting, but the tab was still there. Chrome, running in the background, had pre-loaded the camera to check if a new meeting was about to start. Forty-seven seconds. At 10:34 PM. With no visible reason on my end.
It wasn't malicious. But it was my camera, activated by a process I hadn't launched, at a time I didn't expect. And without Maclaw, I never would have known.
The 6 macOS Apps That Activate Your Camera Without You Noticing
After several weeks of Maclaw logs, I identified the most common patterns:
1. Chrome / Chrome Helper — triggered by Meet or Whereby tabs left open in the background, even after a meeting ends.
2. Zoom — documented behavior of briefly reactivating the camera after calls (related to virtual background calibration).
3. Teams — periodically checks camera availability for "presence detection mode" when enabled.
4. Photo Booth — if open and minimized to the Dock, sometimes stays active.
5. Streaming apps (OBS, Streamlabs) — sometimes keep the camera in "standby" mode between sessions.
6. Browser extensions — certain video conferencing or visual filter extensions access the camera in the background for previews.
Simple rule: Close video conferencing tabs when you're done. For Zoom and Teams in particular: when a meeting ends, fully quit the app rather than just closing the window.
[PHOTO] Suggestion: macOS System Settings → Privacy & Security → Camera, showing the list of apps with granted camera access — annotated screenshot highlighting apps to watch
How to Audit and Clean Up Camera Permissions
Here's how to see which apps currently have camera access on your Mac, and how to revoke unnecessary permissions:
System Settings → Privacy & Security → Camera
You'll see the full list of apps that have requested and been granted camera access. For each app:
- Do you actively use it for video? Keep the access.
- Can't remember authorizing it? Disable it.
- No longer use the app? Disable it.
- The app has no legitimate reason to access a camera? Disable it immediately.
Good practice: run this audit every three months. App updates can reset or expand permissions without you noticing.
The Real Problem With Permanent Permissions
macOS's permission system is designed for convenience. You grant access once, and the app can use it whenever it needs to — without prompting you every time. That's useful. But it's also a comfort vulnerability.
When you grant Zoom camera access in January for a meeting, Zoom can technically access your camera in October, at 10:34 PM, while you're reading a book on your couch — with no notification, no prompt, no indication that anything is happening.
That's not a bug. It's a feature. And the only way to know when it happens is real-time monitoring.
Since this incident: I've configured Maclaw to alert me if any app accesses the camera more than 5 minutes after my last activity on the Mac. No more unexplained green lights.
The green light turning on by itself isn't necessarily someone spying on you. But it's always an unanswered question. Now you have the tools to answer it.
Know Exactly Which App Accesses Your Camera — and When
Maclaw logs every camera and microphone access with the exact app name and timestamp. You get an instant Telegram alert. No more unexplained green lights. Free to start.
Audit My Camera for Free