How to See Which App Is Using Your Microphone or Camera on Mac
When a small orange or green dot appears near the top-right of your Mac's screen, something just turned on your microphone or camera. The dot tells you it happened; it does not tell you which app. Here is how to find that out, and the honest limit of what macOS will reveal.
The dots: orange is the mic, green is the camera
macOS shows a colored indicator in the menu bar whenever an input is live. Orange means the microphone is recording. Green means the camera is on. The camera also has a hardware green light next to the lens that software cannot switch off or fake, so if that light is on, the camera genuinely has power, no matter what any app claims.
Seeing the dot without having started a call is worth a look. Sometimes it is harmless, a browser tab that grabbed the mic, a shortcut, a meeting app checking its devices. Sometimes it is an app you would rather did not.
Find the app in Control Center
The fastest way to name the culprit is Control Center. Click its icon in the menu bar, and when the mic or camera is active it shows the input with the app currently using it, along with what used it recently. That is usually enough to match the dot to a program in a second or two.
Check and revoke permissions
Control Center tells you what is using an input now; System Settings > Privacy & Security tells you what is allowed to. Open the Microphone and Camera lists there and you will see every app you have granted access. This is permission, not live usage, but it is where you take control: turn off the switch for anything you do not recognize or do not want listening, and it loses access until you grant it again.
What macOS will not tell you
Here is the limit worth knowing. The indicator and Control Center cover the current session well, but macOS keeps no built-in timeline of every microphone and camera access through the day, and it exposes no clean public way to name which app is using the camera at a given moment. Microphone use is easier to attribute; camera attribution is genuinely hard, which is why no honest tool can promise a perfect camera-by-app history. If you missed the dot, you often cannot reconstruct exactly what used the camera and when.
Under the hood: how a Mac knows the camera is on
The green and orange dots are not drawn by the app using the device. macOS draws them from the hardware layer: every camera is a Core Media I/O device and every microphone a Core Audio device, and the system tracks whether each is running. The instant any process opens the camera, that state flips, the indicator lights, and no app can suppress it.
What that running signal tells you is that the device is in use. It does not, on its own, always name the process, and for the camera macOS exposes no clean public way to attribute the app, which is exactly why microphone use is easy to pin down and camera use is not.
Mole listens to those same Core Media I/O and Core Audio device changes, so it learns that a device turned on at the instant the dot lights, and it attributes the source only as far as the signal allows: reliably for the mic, best-effort for the camera.
Where Mole helps
Because the indicator is easy to miss, Mole watches for the microphone and camera turning on and posts an alert the moment it happens, naming the source when macOS makes that possible (reliably for the mic, best-effort for the camera). So instead of happening to glance up and catch a dot, you are told when something starts listening or watching, and you can mute a source you did not expect. It does this locally and reports nothing off your Mac.
The short version
Orange is the microphone, green is the camera, and the hardware light by the lens cannot lie. Click Control Center to name the app using an input now, and manage what is allowed in Privacy & Security. macOS will not give you a full after-the-fact history, especially for the camera, so if you want to know the moment an input goes live rather than watch for the dot, an alert is the practical answer.