Can employers detect mouse jigglers?

Four things that can be observed

1. The site or download: browser history, DNS and web filters on a company network or VPN can record visits to a jiggler website or download page.
2. The process: installed programs and running processes are visible to device management and monitoring agents.
3. The device: a USB jiggler registers as an input device, like any mouse.
4. The pattern: activity analysis looks for input that is too regular, too constant or without breaks.

A method can avoid one layer and be obvious in another. A mechanical jiggler installs nothing, but the movement it creates can still look unnatural.

Detectability by type of jiggler

A browser tab that only keeps the screen on, like our keep-awake tool, generates no input. It cannot be “detected as a jiggler” by input analysis, but it also does nothing for activity tracking.

What monitoring vendors say they detect

These are the vendors' own descriptions, not independent tests:

• Hubstaff describes an unusual-activity feature with categories such as automated activity, suspicious applications, and unusually consistent activity. It says a model compares the shape of input with known human and automated behaviour, that it keeps a list of apps known to simulate keyboard or mouse activity, and that results are calculated the next day. It also states that “unusual” does not always mean malicious^[1].
• Time Doctor describes an unusual activity report that analyses keyboard and mouse activity in 30-minute intervals and flags simulated input, adding that a flag is not an accusation^[2].
• ActivTrak publishes a help article titled “Detect Mouse Jigglers and Other Activity Mimicking Tools”^[3]. We could not read its current content, so we do not summarise it.

In the pages we could read, these tools describe pattern and application analysis. None of them claims to identify a particular USB jiggler model as such. That does not mean a USB device is invisible: it is still an input device that the computer lists.

Myths about undetectable mouse jigglers

• “Random movement makes it undetectable.” Randomness may change one pattern, but input without typing, breaks or application changes is itself a pattern.
• “No software means no trace.” Hardware still shows up as a device, and a website still appears in history and network logs.
• “Incognito hides it.” Chrome states that your employer or network may still observe activity in Incognito^[4]. See what your employer can see.
• “It keeps me green, so nobody knows.” Presence and monitoring are different systems. A green Teams dot says nothing about what other software records.

Before you use one at work

Read your company's acceptable use and monitoring policies. If the goal is only to stop the screen from turning off during reading or a presentation, ask whether a documented setting is allowed; the alternatives guide lists the options. This guide explains technical visibility, not legal consequences, which depend on your country and contract.