Blog | G5 Cyber Security

Webcam Access: Permissions & Security

G5 Cyber Security

TL;DR

Modern web browsers should not allow websites to access your camera without your explicit permission. However, vulnerabilities and malicious software can sometimes bypass these protections. This guide explains how permissions work, how to check them, and what to do if you suspect unauthorised access.

Understanding Webcam Permissions

Web browsers use a permission system to control which websites can use your camera (and microphone). When a website requests access, the browser will usually pop up a prompt asking for your consent. This is a key part of cyber security.

Checking Current Permissions (Chrome/Edge)

  1. Open Settings: Type chrome://settings or edge://settings into the address bar and press Enter.
  2. Privacy and Security: Click on ‘Privacy and security’ in the left-hand menu.
  3. Site Settings: Select ‘Site settings’.
  4. Camera: Scroll down and click on ‘Camera’.
  5. Review Permissions: You’ll see a list of websites that have requested camera access:
    • Allowed to use your camera: Websites with permission granted.
    • Blocked: Websites where you’ve denied access.
    • You can Remove permissions for individual sites by clicking the three dots next to them and selecting ‘Remove’.

Checking Current Permissions (Firefox)

  1. Open Settings: Type about:preferences into the address bar and press Enter.
  2. Privacy & Security: Click on ‘Privacy & Security’ in the left-hand menu.
  3. Permissions: Scroll down to ‘Permissions’.
  4. Camera: Click the ‘Settings…’ button next to ‘Camera’.
  5. Review Permissions: You’ll see a list of websites that have requested camera access. You can revoke permissions here by selecting the website and clicking ‘Remove’.

What if a Website Accesses Your Camera Without Asking?

This is a serious cyber security concern! Here’s what to do:

  1. Immediately Close the Tab: Stop the website from potentially recording anything further.
  2. Run a Malware Scan: Use reputable anti-virus software (e.g., Windows Defender, Bitdefender, Norton) to scan your computer for malicious programs.
    • Windows Defender command line scan example: 
      mdscan
  3. Check Browser Extensions: Malicious extensions can sometimes bypass permission controls. Disable or remove any extensions you don’t recognise or trust:
    • Chrome/Edge: Type chrome://extensions or edge://extensions into the address bar.
    • Firefox: Type about:addons into the address bar and go to ‘Extensions’.
  4. Update Your Browser: Ensure you’re using the latest version of your browser, as updates often include security patches.
  5. Clear Browser Cache & Cookies: This can remove potentially harmful data left by the website.
  6. Consider a Different Browser: If problems persist, try a different browser to see if the issue is browser-specific.

Preventative Measures

Exit mobile version