Can employers detect mouse jigglers? What actually gives them away

Flagging is about rhythm, not movement

A jiggler is not flagged for moving the mouse — every tracker expects a working mouse to move. It is flagged for moving the same way every time. Monitoring software does not watch your cursor with a camera; it reads the stream of input events your operating system reports, and it looks for the one thing a real person almost never produces: a perfectly regular pattern.

That single idea explains nearly every "my jiggler got caught" story. The tool worked exactly as advertised — it kept the session awake and the mouse moving — and that mechanical evenness is precisely the signature. Understanding what the log shows is the difference between input that reads as a person on a break and input that reads as a loop.

Four different things called a mouse jiggler

The phrase covers at least four very different tools, and they do not look the same to a tracker. A USB dongle plugs into a port and physically nudges a real mouse. A software mouse mover runs on the machine and moves the cursor through the operating system. An animated browser tab or a looping video only changes pixels on the screen.

That last distinction matters most. A tab that cycles a colour or a video that plays on loop moves nothing the tracker counts — no cursor, no keys — so an activity metric built on input records nothing at all. If a tool does not generate real input events, it does not keep an input-based score alive; it only keeps the display awake.

• USB dongle — physically moves a real mouse.
• Software mouse mover — moves the cursor through the OS.
• Animated tab or looping video — changes pixels, not input.
• DIY scripts (AutoHotkey, GitHub) — software movers on a fixed loop.

What the input log actually reveals

Detection is statistics on the input log, not computer vision. The tracker knows when each event arrived, roughly where the cursor went, whether a click or scroll followed, and which window held focus. From that it can measure regularity — and regularity is the tell.

A person moving a mouse produces curved, uneven paths, clicks mixed with movement, scrolling, pauses of different lengths, and a focus that hops between windows. A basic jiggler produces the opposite: one path repeated, movement with no clicks, identical gaps between events, and the same active window for hours. Nothing here requires artificial intelligence — a simple check for "too even to be human" is enough.

How specific trackers look at patterns

Different products name this differently, but the idea is shared. Hubstaff scores time in 10-minute intervals on the share of moments that contain input, so an interval identical to the one before it stands out against a human's uneven line. Time Doctor 2 runs an Unusual Activity Report that generally flags monotonous clicking and long mouse movement with no clicks. Upwork shows clients the Work Diary, where activity segments sit next to screenshots the client reads directly.

In every case the tracker is reading the shape of the input, not the presence of a device. That is why "is it hardware or software" is the wrong first question — both are visible only through the pattern they leave in the same log.

Why hardware is not safer than software

A popular belief is that a USB dongle is invisible because the operating system sees it as an ordinary mouse. The OS does — but the tracker is not reading the device list; it is reading the data. And a dongle usually produces the most repetitive data of all, because its motion is a single fixed loop with nothing tied to what is on screen.

There is a second catch on a work computer. Managed laptops often log connected USB and HID devices, so an unknown input device that appears every day is itself a flag, independent of the activity metric. DIY scripts fare no better: an AutoHotkey loop or a GitHub jiggler leaves the same even signature a cheap dongle does.

The signatures that get flagged

It helps to know exactly what an over-regular pattern looks like in a report, because these are the things that draw a second look:

None of these is "movement." Every one of them is regularity — the fingerprint of a loop. A report that sits in a slightly uneven mid-range, dipping and climbing through the day, is what a working person looks like; a report that is too even is what draws attention.

• Intervals that repeat almost identically, minute after minute.
• Mouse movement with no clicks or scrolling attached.
• The same active window held for hours on end.
• Gaps between events that are always the same length.
• A line pinned at or near a flat 100% for days.

What does not stand out

The opposite of a jiggler is input that varies. Curved cursor paths at changing speeds, occasional clicks and scrolling, a focus that moves between windows, and real pauses between actions all read the way a person on a quiet stretch of work reads. The goal is not more movement — it is less regularity.

This is also why aiming for a natural band matters more than aiming for the top of the scale. A steady 60-85% with human unevenness blends in; a flat 100%, however it is produced, is the pattern that stands apart.

• Varied paths and timing, not one repeated motion.
• Input tied to real windows, scrolling and clicks.
• An activity band near 60-85%, not a flat 100%.

Where Reaction fits

Reaction is built for the narrow case a jiggler is misused for: the stretches when you step away from the keyboard but the session should stay alive — coffee, a stretch, the school run. Instead of one repeated motion it produces varied cursor paths, a living keyboard rhythm, occasional scrolling and window switches, and it holds a presence level within a range you set rather than pinning the line at 100%.

Its limits are deliberate. It runs only when the computer is genuinely idle and steps aside the moment you touch the mouse, so it cannot make low-input work look like high-input work while you are actually at the desk — that is a limit of the metric, not something to promise around. What it does is keep an ordinary break from reading as an absence, without the mechanical regularity that gets a plain jiggler noticed. Use it within your agreements; see the acceptable-use note below.