Apple’s Camera Indicator Lights

A thoughtful review of Apple’s system to alert users that the camera is on. It’s really well-designed, and important in a world where malware could surreptitiously start recording.

The reason it’s tempting to think that a dedicated camera indicator light is more secure than an on-display indicator is the fact that hardware is generally more secure than software, because it’s harder to tamper with. With hardware, a dedicated hardware indicator light can be connected to the camera hardware such that if the camera is accessed, the light must turn on, with no way for software running on the device, no matter its privileges, to change that. With an indicator light that is rendered on the display, it’s not foolish to worry that malicious software, with sufficient privileges, could draw over the pixels on the display where the camera indicator is rendered, disguising that the camera is in use.

If this were implemented simplistically, that concern would be completely valid. But Apple’s implementation of this is far from simplistic.

Posted on March 30, 2026 at 7:08 AM3 Comments

Comments

Dan Cussen March 30, 2026 8:11 AM

How about just tie the led to the camera power, no need for fancy tricks, but then things like face unlock would take longer to work.

Dmitriy March 30, 2026 8:32 AM

The argument is that the code responsible for the camera indicator light runs in the secure exclave and blits directly onto the screen hardware.

The malicios code might not be able to prevent that, but what stops it from painting over the same area of the screen immediately after, before the user can see it?

Nicholas March 30, 2026 9:27 AM

An application running full-screen (a game, perhaps) could ensure that the whole area around the indicator is green, disguising the light. This could be done cleverly (e.g. only use the camera when the area on screen top right is green). The problem isn’t that the graphic could be disabled, it’s that drawing it to the display is a form of in-band signalling that can be disguised or spoofed. In that sense nothing beats a separate LED.

Leave a comment

Blog moderation policy

Login

Allowed HTML <a href="URL"> • <em> <cite> <i> • <strong> <b> • <sub> <sup> • <ul> <ol> <li> • <blockquote> <pre> Markdown Extra syntax via https://michelf.ca/projects/php-markdown/extra/

Sidebar photo of Bruce Schneier by Joe MacInnis.