Has someone secretly used your computer?What did they look at?Your laptop is not where you left off.Your desk is messy.Whether you're working from home, in the office, or just browsing the web from your own home, this can be a problem -- no one wants to be prying.
Almost everything you do leaves some sort of trace on your computer.You just need to know where to look for this evidence.Knowing where to start can greatly reduce the time it takes to find the culprit.Here's how you can tell if someone has entered your computer without your permission.
1. How to check which files are open on your computer
You should already know how to view recently opened files.By looking at this, you can see if anyone else has accessed any content without your knowledge.
Windows introduced this feature as an easy way to get back to what you've been working on or watching.It's especially handy if you're adding attachments to emails, transferring files via services like WeTransfer, or uploading to a blog.But you can also use this feature to check if someone else is accessing your files.
Just go to File Explorer by opening "Documents", "This PC" or pressing Windows key + E, at the top left of the menu, click Quick Access.You'll be able to see files that are already open, so look for any files you haven't accessed yourself.
Macs also offer ways to open recently opened files, including through the Recent Items and Recent Folders lists.
Alternatively, you can check open files in individual applications.If you think someone peeked at a PowerPoint presentation you made, you can check recent files in the program.
2. How to check recently modified files
Anyone can wipe recent activity from your machine.Just left click on Quick Access > Options > Clear File Explorer History.If your recent activity has been deleted, at least someone used your computer.
But how can you tell which folders they have opened?
Go back to the file manager and enter "datemodified:" in the search bar at the top right.You can refine the date range by opening the drop-down menu under Date Modified at the top left of the window.Clicking "Today" will be most useful, but you can also go back a full year.
You'll see a list of files that have been accessed -- whenever something was changed.Hopefully you're lucky enough that your computer automatically saves a project while the snoopers are at work.Check the times listed and narrow down the time you spend away from your device.
3. Check your browser history to see if someone is using your computer
Everyone knows you can easily delete your browsing history.But if someone is using your computer in a hurry, they may have forgotten this step.
Google Chrome has the largest market share, so most likely, whoever gets on your computer is using this browser.Click the vertical ellipsis in the upper right corner, then click History to see if anything is amiss.
However, the possibility of other browsers is not ruled out.If your computer has Edge, look for ellipsis, then history.Firefox users should click the menu, then History > Show All History.
Now check the list of visited web pages and take note of any that are listed but you definitely didn't go to.This is a great way to check if someone is using your computer to visit a website.
4. How to accessWindows 10login event
You want to know if someone else has accessed your computer, but the simple methods above don't work.Fortunately, you can dig into your computer for further evidence.
从Windows 10 Starting with Home, the OS automatically audits login events -- meaning it keeps track of every time you log into your device.So, how can you check it?And once you find the log, how can you decipher any meaning from it?
Search for "Event Viewer" and click on the application.Go to Windows Logs > Security.You'll see a long list of activities, most of which will mean little to you unless you know Windows ID codes well.
What you need to watch out for is "4624", which is logged as "login". "4672" means "special login", which you may see combined with standard login.This represents an administrative login. "4634" will be listed when an account logs out of your computer.
Finding these codes can be difficult, but you can narrow it down by using the Find... function in the action menu on the right.
If you know when you're away from your computer, you can scroll through the logs or use filters.Go to Actions > Filter Current Logs and use the drop-down menu under Logs.
Click on any individual log for more details, including which account is logged in.This is useful if you think someone is using your computer but not your system.
How to use Windows 10 andWindows 11 ProEnable login auditing on
Home editions of Windows 10 and Windows 11 audit logins by default.However, professional versions of Windows 10 and 11 may need some tweaking.
Access the Group Policy Editor by searching for "gpedit".Next, go to Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policies > Logon Auditing.
You need to select Success and Failure in order for it to register both successful and unsuccessful login attempts.
Once you've done that, you can use the above method to check the audit through the Event Viewer for future reference.
How to stop others from using your computer
How do you prevent others from accessing your computer?First, you can ask.You may be asked why it bothers you, but if it's your own property, it's your right.
The most important thing is to create a strong password for your account.Make sure it's unpredictable.Don't write it anywhere.Whenever you leave your desk, press Windows key + L.This is one of the best ways to lock down your computer and make sure no one can snoop on your activity.
Copyright Notice:The article only represents the author's point of view, the copyright belongs to the original author, welcome to share this article, please keep the source for reprinting!