Shoulder Surfing Protection

6 min read Updated Sep 23, 2026

Introduction¶

Shoulder Surfing Protection in GuacamoleID detects when unauthorized individuals are viewing your screen over your shoulder. When enabled, the system can automatically block the screen or alert you to protect sensitive information from prying eyes.

Understanding Shoulder Surfing¶

What is Shoulder Surfing?¶

Shoulder surfing occurs when someone views your screen without authorization:

Physical Proximity: Someone standing behind you
Peripheral Viewing: Co-worker glancing at your screen
Intentional Spying: Deliberate attempt to view sensitive data
Casual Observation: Unintentional viewing in public spaces

Why Protection Matters¶

Shoulder surfing can expose:

Confidential business data
Personal information
Login credentials
Financial information
Private communications

How It Works¶

Detection Technology¶

GuacamoleID uses facial recognition to detect multiple faces:

Continuous Monitoring: Camera scans for faces
Face Counting: Detects when more than one face is visible
User Identification: Distinguishes authorized users from others
Position Analysis: Determines if faces are viewing the screen

Detection Scenarios¶

Scenario	Action
Only authorized user visible	Normal operation
Unknown face detected behind user	Trigger protection
Multiple authorized users	Configurable response
User looks away but others present	Trigger protection

Enabling Shoulder Surfing Protection¶

Basic Setup¶

Open GuacamoleID settings
Navigate to Security > Shoulder Surfing
Toggle Enable Protection
Configure response action
Save settings

Configuration Options¶

Option	Description
Enable Protection	Turn feature on/off
Detection Sensitivity	How quickly to detect
Response Action	What happens when detected
Alert Sound	Audible notification
Visual Alert	On-screen indicator

Protection Modes¶

Alert Mode¶

Notifies you without blocking the screen.

Configuration: - Display warning icon in system tray - Optional audible alert - Log the event

Best For: - Open office environments - Training and awareness - Low-security situations

Dim Mode¶

Reduces screen brightness when someone is detected.

Configuration: - Screen dims to configurable level - Returns to normal when clear - Optional alert notification

Best For: - Moderate security needs - Quick peek protection - Less disruptive workflow

Block Mode¶

Activates full block screen when detected.

Configuration: - Full screen overlay - Requires authentication to clear - Logs security event

Best For: - High-security environments - Sensitive data handling - Compliance requirements

Custom Mode¶

Create your own response configuration.

Configuration: - Combine multiple responses - Set different actions for different scenarios - Configure delays and thresholds

Sensitivity Settings¶

Detection Sensitivity¶

Control how quickly the system responds:

Setting	Detection Time	False Positive Risk
Low	3-5 seconds	Minimal
Medium	1-2 seconds	Low
High	< 1 second	Moderate
Very High	Immediate	Higher

Distance Threshold¶

Configure how far away someone must be to trigger detection:

Close: Only detect faces very near (< 3 feet)
Medium: Detect at typical office distance (3-6 feet)
Far: Detect faces across the room (> 6 feet)

Angle Threshold¶

Set the viewing angle that triggers detection:

Narrow: Only faces directly viewing screen
Medium: Faces at moderate angles
Wide: Any face in camera view

Whitelisting¶

Authorized Viewers¶

Allow certain people to view your screen without triggering protection:

Go to Shoulder Surfing > Whitelist
Click Add Person
Either:
Select from registered users
Register a new face for whitelist only
Save whitelist

Team Mode¶

For collaborative environments:

Enable Team Mode
All registered organization users are whitelisted
Only external faces trigger protection

Temporary Whitelist¶

Grant temporary viewing access:

Click system tray icon
Select Pause Shoulder Surfing
Choose duration (5/15/30 minutes)
Protection resumes automatically

Use Cases¶

Open Office Environment¶

Challenge: Colleagues frequently walk by.

Configuration: - Sensitivity: Medium - Mode: Alert - Whitelist: Immediate team members - Distance: Close

Working with Sensitive Data¶

Challenge: Handling confidential information.

Configuration: - Sensitivity: High - Mode: Block - Whitelist: None - Distance: Medium

Public Spaces (Cafes, Airports)¶

Challenge: Unknown people constantly nearby.

Configuration: - Sensitivity: Medium (reduce false positives) - Mode: Dim or Block - Distance: Close - Alert: Enabled

Shared Workstation¶

Challenge: Multiple authorized users, prevent unauthorized viewing.

Configuration: - Enable Team Mode - Mode: Block - All registered users whitelisted

Integration with Block Screen¶

Combined Protection¶

Shoulder surfing protection works with the block screen:

Same block screen appearance
Same unlock methods
Unified security logging
Consistent user experience

Priority Handling¶

When multiple triggers occur:

User absence always blocks
Shoulder surfing blocks if user present but others detected
Screen unblocks only when authorized user alone

Best Practices¶

Workspace Setup¶

Camera Position: Face camera toward entry points
Desk Location: Back to wall if possible
Monitor Angle: Reduce viewing angles for others
Privacy Screens: Combine with physical privacy filters

Security Recommendations¶

Use Block mode for sensitive work
Keep whitelist minimal
Review logs regularly
Train users on the feature
Test detection periodically

Reducing False Positives¶

Adjust sensitivity to your environment
Use appropriate distance threshold
Whitelist regular collaborators
Position camera optimally

Troubleshooting¶

Too Many False Alarms¶

Symptoms: Protection triggers frequently without actual threats.

Solutions: 1. Lower detection sensitivity 2. Increase distance threshold 3. Whitelist regular nearby coworkers 4. Adjust camera angle 5. Use Alert mode instead of Block

Not Detecting Threats¶

Symptoms: People can view screen without triggering protection.

Solutions: 1. Increase sensitivity 2. Extend distance threshold 3. Verify feature is enabled 4. Check camera is working 5. Ensure adequate lighting

Performance Impact¶

Symptoms: System slows down with protection enabled.

Solutions: 1. Lower detection sensitivity 2. Reduce camera resolution 3. Check CPU usage 4. Close unnecessary applications

Conflict with Video Calls¶

Symptoms: Protection triggers during video meetings.

Solutions: 1. Pause protection during calls 2. Whitelist regular meeting participants 3. Use Alert mode during meetings 4. Consider disabling during scheduled meetings

Privacy Considerations¶

What Data is Collected¶

Shoulder surfing protection:

Analyzes camera feed in real-time
Does not store images of non-authorized faces
Logs detection events (time, response)
Does not identify unknown individuals

Compliance Notes¶

For organizations:

Inform users of monitoring
Include in privacy policy
Consider local regulations
Document security measures

Logs and Reporting¶

Event Logging¶

Shoulder surfing events logged include:

Timestamp
Detection type
Action taken
Duration of threat
User present