Desktop capture is the ability of an application to read or record what is shown on a user’s screen, including full desktops, specific windows, or selected regions. It is common in screen sharing, remote support, conferencing, and recording tools, where the feature is expected and user-approved.
In cyber security, desktop capture matters because it can expose highly sensitive information: passwords typed into a visible form, internal documents, chat messages, security prompts, or one-time codes displayed on screen. Attackers may abuse this capability in legitimate-looking desktop apps, especially when hidden code paths or excessive permissions allow capture without clear user awareness. Defenders treat it as a high-risk capability, using permission checks, strong UI prompts, context isolation, and code review to ensure capture only happens when needed and only for authorized content.