In some online banking sites, they provide a virtual onscreen keyboard(the keys will be shifted randomly when each time you open it. Not in the QWERTY order).

If we use such keyboard, any keylogger application can log/capture the keys clicked.

Assume The input element for username and password is not accessible.

marked as duplicate by Steffen Ullrich, paj28, Serge Ballesta, Anders, Xander Jun 21 '17 at 16:34

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • @SteffenUllrich but here, the keys are arranged randomly. In QWERTY virtual keyboard, it can be done. But I would like to know this specific case – i-- Jun 20 '17 at 17:41
  • 2
    This case is actually covered in the question I've linked too. And it is also covered by screen recording since both mouse position AND screen content gets recorded. – Steffen Ullrich Jun 20 '17 at 17:43
  • OS-based key capture should not work if the web keyboard is made correctly, but screen-shot software might be able to read any visual feedback such a keyboard produces, as well as the mouse/touch coords; info which might be enough to decode the password entry. – dandavis Jun 20 '17 at 18:14

Browse other questions tagged or ask your own question.