How to Prevent Shoulder Surfing at Work (8 Methods, Including 1 You've Never Heard Of)

You're deep in an email about a promotion. A colleague walks past on the way to the kitchen. Did they slow down? Did they read the subject line? You don't really know, and you won't ever ask. So you just sit with it, slightly off for the next hour.

This is shoulder surfing. Not the dramatic, hooded-stranger version from a stock photo, but the everyday version: a coworker reading your salary letter, a manager catching a half-written Slack message, a teammate seeing a candidate's CV over your shoulder. It happens a lot more than people admit.

3M and the Ponemon Institute ran a visual hacking experiment across multiple companies, sending a "white hat" into offices to see what they could read off screens and desks. They succeeded in 91% of attempts, with over 1,000 individual pieces of sensitive information captured. The average person noticed nothing.

Most guides to fixing this recommend the same five or six things: privacy filters, MFA, sit with your back to the wall, lock your screen. All useful. All incomplete. Below are 8 methods, ordered from the obvious to the one almost nobody is talking about.

Method 1: Use a privacy filter (the obvious one)

A privacy filter is a thin sheet of micro-louvered plastic that sits over your screen. From dead center, it looks normal. From a 30-degree angle to either side, the screen goes black. They work, they're cheap, and they're a perfectly reasonable first step.

The trade-offs are real, though. Your screen is noticeably darker even when you're looking straight at it, so your eyes work harder by the end of the day. Color accuracy drops, which matters if you're a designer or you stare at charts. And the moment you want to show something to the person sitting next to you in a meeting, you're tilting your laptop like a child hiding a test score.

They also don't cover the angle directly behind you. Someone standing two feet back, looking down at your screen, sees roughly the same thing you do.

Buy one for your laptop. Don't expect it to be the whole answer.

Method 2: Position your desk and screen smarter

If you can choose where you sit, sit with your back to a wall. If you can't (most open offices), the next best thing is to angle your monitor so the most common walking path behind you doesn't line up with your screen's viewing cone. Even 10 to 15 degrees off-axis makes casual reading harder.

A few small habits help:

• Keep sensitive windows on the left or right half of your screen, away from the side a colleague would approach from.
• Increase your font size when you're working on something private. It feels counterintuitive (bigger means easier to read from across the room), but in practice, smaller text just means people stop and lean in.
• If you have a sit-stand desk, sit lower for private work. A lower screen has a tighter viewing cone for anyone standing.

Geometry only buys you so much in a room full of people walking around. But it costs nothing and you can do it today.

Method 3: Multi-factor authentication everywhere

MFA is non-negotiable, but it's solving a slightly different problem. It protects you against someone who has stolen your password. It does very little against someone who is reading your already-unlocked screen.

Where it does help with shoulder surfing: when someone watches you type a password into a public Wi-Fi captive portal, or sees the start of your password on a sticky note. With MFA on, that stolen credential alone won't get them in.

So treat MFA as a baseline for account security, not a screen privacy solution. Turn it on for email, password managers, finance tools, HR systems, anything cloud. Use a hardware key or an app, not SMS, if you can. Then move on. The harder problem is still right behind you.

Method 4: Lock-on-leave habits (auto and manual)

If you walk away from your machine, lock it. On a Mac, Control + Command + Q locks the screen instantly. Set a hot corner if you prefer mouse to keyboard: System Settings, Desktop & Dock, Hot Corners, set one to Lock Screen.

Auto-lock should be aggressive. Five minutes is a reasonable upper bound for most office settings. One minute is better if you handle anything sensitive. Yes, it's annoying. That's the point.

The catch: this is purely reactive. Locking your screen when you walk away doesn't help when you're actually sitting there working. Most shoulder surfing happens while you're at your desk, not while you're in the kitchen.

If your screen is only safe when you're not using it, your screen isn't really safe.

Peeker is one approach to the "while you're using it" problem. More on that in Method 8.

Method 5: A "screen privacy" team norm

This one is cultural, not technical. In some teams it's normal to glance at a colleague's screen. In others, people instinctively look away if they walk past someone's desk. The second culture is much better, and you can sometimes nudge a team toward it.

What works in practice:

• Bring it up once, casually, in a team discussion about meeting rooms or hot-desking. Not as a complaint, as a "hey, can we agree that we don't read each other's screens."
• When someone hands you their laptop to show you something, look only at what they're pointing at. People notice.
• If you manage people, name it as a value. "We respect each other's screens" is a sentence that costs nothing.

This won't solve it for contractors, visitors, cleaners, or that one colleague who just doesn't get it. But it raises the floor.

Method 6: Strategic window management

Treat your desktop like a filing cabinet, not a kitchen counter. The less sensitive content is visible at any given moment, the less there is to surf.

A few concrete moves on a Mac:

• Use Spaces. Put your inbox, HR portal, and password manager in one space. Put your meeting notes and shared docs in another. Swiping between them takes a second and keeps sensitive apps off-screen most of the day.
• Use Focus modes. A "Deep Work" Focus that hides notification previews stops the moment where a Slack DM about layoffs flashes on screen while a colleague is standing behind you.
• Get in the habit of minimizing sensitive windows (Command + M) the second you switch tasks. It's a tiny action and it builds up.

This is the cheapest method on the list. It's just behavior.

Method 7: Encrypt and redact by default

For documents you share, build a habit of using placeholders. Internal compensation review? Use [SALARY] in the draft, fill in real numbers only at the moment you need them, and clear them again before you walk away. Customer financials? Same pattern.

For passwords and secrets, never leave them on screen. Password managers like 1Password let you copy a value to the clipboard without ever revealing it. If you do need to reveal one, use the "quick reveal" feature that shows it for two seconds and then hides it again.

For chat: anything you wouldn't want a stranger to read, don't write into a window that's open all day. Use a separate app, a separate space, or a thread you can collapse.

The principle is the same as a clean desk policy, applied to pixels. The less sensitive content is sitting around in plain text, the less can be stolen by a glance.

Method 8: Camera-based detection (the one nobody's talking about)

Every method above has the same blind spot. They protect against situations you've already thought about: someone walking past, someone sitting next to you, someone using your machine when you've left. None of them tell you when an actual person is currently standing behind you.

Your laptop already has a sensor pointed at the room behind you. Your webcam. It's just normally pointed at your face for video calls.

Camera-based detection flips that around. A small app uses the webcam (locally, on-device) to watch the area behind you. When it detects a person in the background, it shows a live preview of what the camera sees in the corner of your screen. You see, in real time, who is behind you and how close they are. They don't know you can see them. You just do.

This sounds obvious in hindsight. It also raises an obvious concern: do you really want your webcam running all day? The answer depends on the implementation. The version we built (Peeker) runs entirely on-device. No frames leave your machine. Nothing is recorded. Nothing is sent anywhere. The only thing the camera does is generate a small preview window that exists for as long as someone is in frame, and then disappears.

Where this shines:

• Hot-desking and shared offices, where you can't control who walks behind you.
• Open-plan offices with a high-traffic walkway behind your row.
• Hybrid days when you're working from a co-working space or a cafe.
• Anyone whose work involves consistently sensitive information: HR, finance, legal, journalism, recruiting, executive assistants.

The limits, honestly:

• It needs your webcam unobstructed. If you have a physical privacy shutter, you'd need to open it.
• It doesn't help against someone who approaches outside the camera's field of view, which on most laptops is fairly wide but not 180 degrees.
• It doesn't replace the other seven methods. It complements them.

We built Peeker because none of the existing options solved the "while you're at your desk, working" version of the problem. It's a $5/year subscription for macOS. If this is the method that fits your setup, you can try it here.

Putting it together

Most people will get the best result from combining two or three of these. A privacy filter plus aggressive auto-lock plus a webcam-based detector covers most of the realistic threat model in an open office. Add Spaces and good window habits and you've moved from "anyone can read my screen" to "this would actually be hard to surf."

Pick by role. HR and finance probably want all eight. Engineers writing code mostly need the basics (lock-on-leave, sensible window management) and maybe Method 8 on the days they're reviewing salary bands or compliance docs. Journalists handling sources should treat this seriously, because their problem is closer to adversarial than accidental.

The point isn't paranoia. It's that a 91% visual hacking success rate is a real number, and most of the standard advice was written before "hot desking in an open office" was the default.

Try Peeker on your Mac

If Method 8 is the missing piece, Peeker is a small Mac app that does exactly this. Local processing, nothing recorded, nothing sent anywhere. $5/year. Works on any Mac with a built-in webcam.