Screen Recording Detection
| Plan | Platforms | MASVS |
|---|---|---|
| Team | Android | MASVS-STORAGE-2, MASVS-PLATFORM-3 |
Overview
Screen Recording Detection identifies signs that Android app content may be actively recorded or captured through platform screen-recording or mirroring behavior. It helps teams protect credentials, one-time passcodes, identity documents, medical information, financial data, and confidential enterprise content.
This is a detection control. It raises a configured response when recording risk is detected. For active Android visual blocking, use Android Screen Capture Protection where appropriate.
When To Use It
Use this control for:
- Login, MFA, payment, wallet, account recovery, or approval screens.
- Apps displaying regulated, confidential, or personally sensitive information.
- Environments where user-initiated or malicious screen recording violates policy.
- Risk scoring where screen recording should change session trust.
How It Works
The protected Android app monitors platform display and capture signals associated with screen recording, casting, or virtual display capture. To avoid exposing bypass guidance, public documentation does not describe the exact polling cadence, thresholds, display flags, property names, or implementation sequence.
When recording risk is detected, AppTego fires your configured response and records the event if telemetry is enabled.
How to Enable the Control
Navigate to Detection & Response from the AppTego portal, and expand the Screen And Input Detection section. Under this section you will find the Screen Recording Detection control. Click Enable Configuration, choose the response action, and save the configuration for the next build or for it to be applied with a live push (if enabled).
API Configuration Example
{
"ScreenRecordingDetectionResponse": {
"detection": true,
"action": "alert",
"title": "Screen Recording Detected",
"message": "Please stop screen recording before continuing.",
"buttons": ["OK"],
"actions": ["close"],
"redirects": [""]
}
}
| Field | Purpose |
|---|---|
detection | Enables or disables screen recording detection. |
action | Selects the response style, such as alert, close, log, or warn. |
title / message | User-facing text shown when a response is displayed. |
buttons / actions / redirects | Defines the available response buttons and their outcomes. |
Compatibility Notes
- Screen recording detection cannot identify every possible capture path, including external cameras or some privileged device behavior.
- Mirroring, casting, conference-room displays, and accessibility workflows can look similar to recording risk. Test expected user journeys before hard blocking.
- iOS screen recording and mirroring behavior is covered through Screen Mirroring Detection.