Camera privacy shutters versus kill switches: why the LED stays on, and what happens to face sign-in
A physical shutter and a camera kill switch are sold in much the same words, but they are different designs. Microsoft publishes guidance to device makers that classifies them, says which it recommends, and states what the LED and the camera do when the shutter is closed, including the case of more than one camera on the same panel. This guide was written on 2026-09-21 from that document and turns it into what to check before buying and what to expect when you close the shutter. It is guidance to manufacturers, not a guarantee about the product in front of you, and this guide is written on that footing.
Published · Updated · FaultNote editorial policy
Who this guide is for and what to prepare
- Anyone choosing a laptop or webcam with a shutter who wants to know how the designs differ
- Anyone whose in-use LED lights up with the shutter closed and suspects a fault
- Anyone using face sign-in who wants to know how the shutter interacts with it
What you need
- Check whether the product has a sliding shutter, a button-operated shutter or a switch
- Decide whether you intend to use Windows Hello face sign-in
- Arrange a way to see, in the shop or in the specification, how the in-use LED behaves when the shutter is closed
1. The two forms Microsoft defines
The document divides the field in two: Two forms of privacy controls are defined, camera privacy shutters (mechanical and electromechanical) and camera kill switches.
It also sets a condition they share: An important constant across all three is that they must act at the physical or hardware level, meaning no software is involved, since software can be compromised.
Two design tenets follow. One is consistency: once a customer learns how the shutter on their device behaves, that knowledge should carry to any other device with one. The second matters more here: Under no circumstances can a camera privacy control give a false impression of privacy:
That second tenet is the reason behind the requirements further down. The behaviours that look strange at first, an LED that stays lit and a camera that keeps running, both follow from it.
2. How the designs differ, and what Microsoft recommends
On kill switches the position is explicit: Accordingly, Microsoft doesn't recommend or support the use of camera kill switches that remove the entire camera from the system.
The reasoning is given as well. Because switching it off removes the device, the system cannot tell that the chassis still has a camera that is merely turned off. A user unaware of the switch gets applications reporting that no camera is connected, and the document notes that certain applications can crash or misbehave if the camera disappears during use or appears while the app is running.
Two alternatives are named instead: a physical shutter, mechanical or electromechanical, or a kill switch that disconnects the sensor rather than the ISP and causes the ISP to synthesize black frames. With the second, the camera still appears in the system, apps can continue to use it, and the ISP responds to commands normally.
The table below restates that classification from a buyer's point of view. The third column summarises the document's position; it is not a rating by this site.
Scroll horizontally to see the full table →
| Design | How the document describes it | The document's position | What it means in use |
|---|---|---|---|
| Mechanical shutter (slider) | A sliding opaque lens cover the user moves by hand; fully blocks the lens when closed | One of the recommended designs | The state is visible to the eye, and software cannot move it |
| Electromechanical shutter (button) | Opens and closes in response to a physical button; firmware is involved but is required to be isolated | One of the recommended designs | Operated by a button, but software control is prohibited |
| Kill switch that removes the whole camera | Physically disconnects the camera from the system when turned off | Not recommended or supported | Applications report that no camera is connected; stated as a possible cause of misbehaviour |
| Kill switch that disconnects the sensor | Disconnects the sensor rather than the ISP, which synthesizes and streams black frames | The recommended alternative | The camera stays in the list; only the picture goes black |
3. An LED that stays lit with the shutter closed is by design
It is not a fault. The LED requirements state: This means that if any camera on the panel is on, a visible wavelength camera in-use indicator LED must remain on regardless of if the shutter is open or closed.
The reason is the tenet above. The LED reports that a camera is running; it does not report the position of the shutter. Turning it off because the shutter is closed would give one light two meanings.
There is an allowance, though. The document says it is acceptable for the shutter's physical design to cover the LED when closed, so a machine where the light is on but not visible is a legitimate design.
A second requirement is just as counter-intuitive: When a camera is equipped with a physical shutter, the camera must continue operating normally regardless of shutter state. If an app is streaming from the camera, it continues to capture and transmit real sensor data even if the shutter is closed. And: Full occlusion of the sensor by a closed shutter is expected to produce an image that is black or very close to it. Some makers replace that with a static image, which the document requires to be unchangeable from software.
4. Face sign-in and the infrared camera
For anyone who signs in with their face, this is the sentence that matters: Windows Hello Face requires both an RGB and IR camera. If the RGB camera is occluded, Windows Hello will not function correctly. Both RGB and IR streams are used to enable anti-spoofing counter measures.
So face sign-in will not go through with the shutter closed. That is not a defect, it follows from the design, and anyone who signs in that way several times a day should price in opening the shutter each time before choosing the machine.
The infrared side is covered too. Where a panel carries more than one camera, the document states: Due to this, the shutter must cover all cameras on the panel. The reason given is that the IR camera can also be accessed by applications and can produce reasonably high-fidelity images of the scene.
An exemption exists today, however. The document supports an exemption for mechanical shutter designs that do not cover the IR camera: while a physical shutter occludes the RGB camera, the ISP firmware may discard the IR output and replace it with a synthesized black image. It also says that where the IR sensor is used for Presence Sensing, it is recommended not to cover it and to keep that sensor functional, and that a future HLK update will require physical shutters to occlude only the RGB camera.
05. What to check before buying
The document is guidance to manufacturers, not the specification of the product in front of you, so the checking has to happen on the product side. Three things are worth the effort.
First, the design. Slider, button or switch. If it is a switch, whether it removes the camera from the system or only blackens the picture changes what applications see, and Microsoft does not recommend the former. If the specification does not say, either ask the maker or choose in the knowledge that this point is unresolved.
Second, whether it coexists with face sign-in. If you use Windows Hello Face, the shutter has to be opened every time. That bears on pairing it with a fingerprint reader, and on the choice of sign-in method itself.
Third, whether the infrared camera is covered. As above, designs that do not cover it are currently permitted as an exemption. How much a privacy control is expected to cover turns on this point. Where the specification is silent, this site assumes neither that it is covered nor that it is not.
06. What this guide does not say
It does not say whether any particular product follows this guidance. No device was opened or tested here.
It does not cover stick-on camera covers either. The document is about how devices are designed and says nothing about adhesive covers. Since the LED and camera behaviour above follow from the sensor being occluded, an application would receive a black picture whatever does the occluding; that inference is this site's, not the document's.
It does not tell you to avoid products with a switch. What Microsoft does not recommend is the kind that removes the whole camera from the system; the kind that disconnects the sensor is named as a recommended alternative. In practice a specification often does not say which it is, and that uncertainty is itself part of the decision.
It does not cover presence sensing in detail. The document points at a partner whitepaper for that, which was not read for this guide.
0Limitations and requirements
- This document is design guidance for device makers. It is not a guarantee about how your product was built.
- An in-use LED that stays lit with the shutter closed matches the document's requirement. It is not necessarily a fault.
- Windows Hello face sign-in will not function correctly with the shutter closed, because the RGB camera is occluded.
- Shutter designs that do not cover the infrared camera are currently permitted as an exemption. Do not assume it is covered.
- Everything quoted here was read on 2026-09-21.
Frequently asked questions
The camera LED is lit even with the shutter closed. Is it faulty?
Most likely it is behaving as the requirement describes. If any camera on the panel is on, a visible wavelength in-use indicator LED must remain on regardless of whether the shutter is open or closed. The LED reports the camera, not the shutter.
With the shutter closed, will a video call show no camera?
Not with a physical shutter. The document states the camera continues to operate normally regardless of shutter state, and that full occlusion is expected to produce an image that is black or very close to it. A kill switch that removes the whole camera is different: applications then report that no camera is connected.
Can face sign-in work with the shutter closed?
No. Windows Hello Face requires both an RGB and an IR camera, and the document states that if the RGB camera is occluded, Windows Hello will not function correctly.
Does the shutter cover the infrared camera as well?
The principle is that the shutter must cover all cameras on the panel, but an exemption is currently supported for mechanical designs that do not cover the IR camera; in that case the ISP firmware may discard the IR output and replace it with a synthesized black image. It varies by product, so check the specification.
Sources and verification date
Sources checked: . These sources support the specifications, procedures or prices discussed here. Check each source for applicable conditions and current information.
Related practical guides
- Choosing a Webcam: Resolution and Frame Rate Pairs, Field of View, Fixed Focus vs Autofocus
- Adding Windows Hello: fingerprint reader or IR camera, and what Enhanced sign-in security rules out
- Wake on approach, lock on leave: telling Windows presence sensing from an OEM lookalike
- USB-C Monitor Not Working or Stuck at a Low Refresh Rate: Check DP Alt Mode and Lane Allocation
- Measure Laptop Battery Wear: Reading the Windows Battery Report and Deciding When to Replace
- Single-cable USB-C monitors: match the monitor's supply wattage against your laptop's rating