Mouse jiggler detection, how it actually works.

Software jigglers: the OS knows

When a program moves the mouse, it doesn't secretly become a physical mouse. On Windows it calls an API (SendInput), and the event that reaches the system is tagged as injected. A low-level hook can read a flag — LLMHF_INJECTED — that says, in effect, “this came from software, not hardware.” Any tool that wants to can check it. This is by design, and no user-space program can turn it off.

So when a jiggler claims to be “undetectable,” it's making a claim it can't fully keep. At best it means “the specific status indicator I care about doesn't check.” At worst it's simply wrong. Worth knowing before you count on it.

What monitoring can and cannot see

“Detection” isn't one thing. It's worth separating:

• Idle-based status (Teams, Slack, and similar): these watch the Windows idle timer. Any input — real or injected — resets it, so a jiggler keeps the status active. This is what most people actually want, and it works.
• Injected-input flags: endpoint and monitoring software can read the injected flag if it's written to look. Whether a given employer's tools do is another question, but the capability is real.
• Behavioural analysis: sophisticated monitoring can look at the pattern of movement. A cursor that jumps exactly one pixel every 60 seconds is a giveaway; human-like curved motion at randomized intervals is far less mechanical — but “less mechanical” is not “invisible.”
• Process lists: the tool is a running program with a name. Some sell “no suspicious process names” as a feature; hiding a process is itself a behaviour some monitoring watches for.

Hardware jigglers aren't magic either

A physical jiggler (a USB device or a little motorised mouse pad) avoids the injected-input flag because the OS sees a real HID device. But it has its own tells: an extra input device appears in the system, USB device policies on managed machines can flag or block it, and the motion is usually a dead-simple loop. “Hardware = undetectable” is just a different flavour of the same myth.

Where AwaySitter fits

AwaySitter is a software tool, so its input carries the injected flag — stated here and in the app. What it does:

• Human-curve motion, because a natural rhythm keeps an idle timer active without looking like a broken script.
• A real idle check, by tagging its own moves, so “are you actually away?” is measured from your input, not its own.
• Runs under its own name, with the price and the privacy story on the site.

What you do with a tool like this is your call. AwaySitter's job is to keep an idle-based status accurate while you're away from the keyboard.

ONE-TIME · 2 PCs · PORTABLE · 14-DAY REFUND · WINDOWS 10/11