Can Canvas Detect Cheating? What It Actually Records

This question gets answered badly almost everywhere, in a specific direction: pages list the “red flags teachers look for” and imply Canvas is watching you. Canvas is a learning management system. It logs activity the way any web application logs activity, and the company that builds it has said plainly that those logs are not a cheating detector.

What follows is what Canvas actually records, what it cannot see, what changes when a proctoring tool is added, and what to do if you have been accused on the strength of a log.

What Canvas records, and what it does not

Canvas gains webcam, screen and lockdown capability only when a school adds a separate proctoring product. Those are covered further down.

The distinction that matters is between recording activity and detecting misconduct. Canvas does the first thoroughly and the second not at all. Everything a page describes as “Canvas catching” someone is really a human being interpreting an activity log.

What Instructure itself says about using quiz logs as evidence

This is the part almost every other page on this question leaves out. Canvas quiz logs were not built to catch cheating, and the company says so. As documented by the Electronic Frontier Foundation, Instructure’s own guidance states that quiz logs “are not intended to validate academic integrity or identify cheating for a quiz.”

Universities say the same thing to their own faculty. Yale’s Poorvu Center for Teaching and Learning puts it directly: “Canvas was designed to support teaching and learning, not to detect academic dishonesty.” It adds that Canvas analytics “are not effective for monitoring individual student actions with the level of precision necessary for the data to be considered suitable evidence of student action or inaction.”

Cornell’s Center for Teaching Innovation reaches the same conclusion: CTI “advises against using Canvas Quiz audit logs as standalone evidence of cheating”, suggesting instead that a log “might better serve as a warning of a potential problem that warrants further investigation, including conversation with the student.”

“Stopped viewing the quiz-taking page” — why it fires when you did nothing

This single log line causes most Canvas cheating accusations, and it is far less specific than it sounds. It records that the quiz page stopped being the focused page. It does not record where attention went, or whether a person was involved at all.

EFF notes that logs can only demonstrate “that a page, document, or file was accessed by a device—not necessarily why or by whom (if anyone),” and that entries can appear “due to delayed loading on a device or due to automatic refresh processes that are commonplace in most websites and online services.”

Cornell makes the same point to instructors: “Log data may capture clicks that are triggered by innocent actions such as notifications, updates, or connectivity issues.”

Ordinary things that can produce the event:

• A notification banner from your operating system taking focus for a moment.
• The device sleeping, locking, or switching network.
• An automatic page refresh, which is routine web behavior rather than anything you did.
• Closing a laptop lid, or a browser reloading after a connection drop.
• On some devices, simply scrolling in a way the browser treats as a focus change.

None of that is a defence of cheating. It is a statement about what the measurement can and cannot distinguish — which is exactly why the vendor and both universities above say it should not stand alone.

The other data your instructor can see

Quiz logs get all the attention, but they are one of several activity surfaces in Canvas. None of them is a monitoring tool, and each has its own limits worth knowing.

New Analytics

This shows page views, participation and grade trends across a course. It is designed to spot a student who has disengaged, not to reconstruct a particular hour. Instructure’s own guidance on the underlying number, quoted by Yale’s Poorvu Center, is explicit: “Page view data is based on requests to the server, use page view data only as a good approximation to activity and not an absolute metric.” An approximation is not a timeline of what someone was doing.

The access report

For each student, an instructor can open a report showing which course items were viewed, how many times, and when they were last accessed. It covers material inside the course — pages, files, assignments — and nothing outside it. The count answers “did this get opened”, not “was this read”, and a page left open in a background tab keeps accruing time it did not earn.

Submission history

Canvas keeps each submitted version with its timestamp, which is how an instructor sees that an assignment was resubmitted or submitted late. This is the most straightforwardly reliable of the surfaces here, because a submission is a deliberate act with a clear record — covered in can professors see previous submissions on Canvas.

The quiz settings that shape your exam

A lot of what feels like surveillance during a Canvas quiz is actually a setting the instructor chose when building it. Knowing which is which removes a good deal of anxiety.

All of these are ordinary Canvas quiz options. None of them monitors your device.

What changes when your school adds a proctoring tool

Canvas integrates with separate proctoring products, and those genuinely do the things Canvas does not. If your exam requires an install, a room scan, or a camera check, you are not being watched by Canvas — you are being watched by one of these.

These are separate products a school licenses. Canvas by itself has none of these capabilities.

If you want the full picture across every tool a school might use, we keep a tool-by-tool guide to what online tests can actually catch.

Plagiarism and AI writing

Text checking is a separate system again. Canvas can pass submitted work to a similarity service such as Turnitin, which compares it against a corpus and returns a similarity score. That is a text-matching process, not surveillance of how you wrote. AI-writing detection is a newer and considerably less reliable layer on top — we cover what Canvas can and cannot conclude about that in does Canvas detect ChatGPT, and the narrower question of whether Canvas flags Grammarly separately.

Canvas compared with the other systems

The pattern is the same across every major learning management system, which is itself the clearest evidence that this is a category fact rather than something specific to Canvas. Each one logs activity inside itself. None of them proctors an exam without an add-on.

“Proctors natively” means camera, microphone or screen monitoring built in, with no separate product licensed by the school.

The consistency matters if you are trying to work out whether a claim about your own exam is plausible. If someone tells you the LMS itself saw your screen, that is not how any of these products work.

Why this question gets asked so much

It is worth naming who actually searches this, because the answers online are mostly written as though everyone asking is planning something. In practice the question comes from three very different places:

• Anxiety. Someone sat an online exam, their laptop did something odd, and they now want to know whether an innocent moment will be read as misconduct. This is the largest group by some distance.
• An accusation already made. Someone has been told a log shows they left the exam, and they are trying to understand what the log actually says.
• Ordinary curiosity about the technology. Including from instructors, who often do not know what the logs do and do not mean either.

All three deserve the same answer, which is the mechanism: what the system records, what that record can support, and what it cannot. An answer that treats the reader as a suspect serves none of them.

The specific Canvas questions people ask

This page answers the general question. Each of these has its own answer, because each one turns on a different Canvas feature rather than on a single “can Canvas see you” rule:

• Can Canvas detect switching tabs? — what the focus event does and does not prove.
• Does Canvas detect ChatGPT? — what actually runs against your text.
• Can professors see previous submissions on Canvas? — submission history and what an instructor sees of it.
• Can teachers see if you download a file on Canvas? — course file access logging.
• Can Canvas detect Grammarly? — editing tools and similarity checking.

Using a different system? The same structure applies to Blackboard, which publishes a comparable position — its maker has stated that “inaccurate conclusions can be drawn from the use of such data” and does not recommend using logs alone to detect misconduct.

If you have been accused on the basis of a log

Being accused is not the same as being guilty, and log-based accusations are unusually prone to error for the reasons above. The practical steps are procedural rather than technical.

• Ask for the evidence in full. EFF advises requesting “copies of any logs that are being cited as evidence of cheating, and any logs that may be exculpatory.” The second half matters: the same log usually contains activity that supports you.
• Ask what the specific entry means. A “stopped viewing” event is not a record of leaving the exam, and asking the institution to state what it believes the entry proves is a reasonable request.
• Cite the vendor. Instructure’s own documentation says the logs are not intended for this purpose; Yale and Cornell both advise their faculty accordingly.
• Use your institution’s process. Most have an academic-integrity procedure with a right to respond, and often a student advocate or ombudsperson who does this regularly.

We have a fuller guide to what to do when a teacher accuses you of cheating, including how these conversations usually go.

Does Canvas alert the instructor in real time?

No. There is no live notification when a quiz page loses focus, and no dashboard flashing during your exam. Quiz logs are a record an instructor opens afterwards, usually only if something else already prompted them to look — an unusual score, a pattern across a class, a report from someone else. This is worth knowing mainly because the alternative belief drives a lot of exam-day panic that the technology does not justify.

Live monitoring, where it exists, comes from a proctoring product rather than from Canvas — and those announce themselves, because they require an install, a permissions prompt, or a room scan before the exam starts. If none of that happened, no one was watching in real time.

If you are the instructor

A meaningful share of people asking this question teach the course. The guidance from the people whose job is to advise faculty is more cautious than the internet’s.

Cornell’s Center for Teaching Innovation suggests that rather than direct evidence, “audit logs might better serve as a warning of a potential problem that warrants further investigation, including conversation with the student.” Yale’s position is that the analytics simply are not precise enough at the individual level to be suitable evidence at all.

What that suggests in practice:

• Treat a log as a prompt, not a finding. It tells you to look; it does not tell you what happened.
• Ask before concluding. The conversation frequently produces an ordinary explanation — a notification, a dropped connection, a device that slept — that the log cannot distinguish from anything else.
• Do not build the case on the log alone. The vendor says it is not for that, and an integrity process that rests on it is fragile for exactly that reason.
• If the assessment genuinely needs proctoring, license proctoring. Using activity logs as a substitute produces false positives against honest students while missing anyone who prepared for it.

The design levers in the table above — question banks, shuffled answers, one question at a time, tight availability windows — do more to protect an assessment than log review does, and they do it without accusing anyone.

Frequently asked questions

Can Canvas detect cheating?

Not by itself. Canvas records activity — when a quiz was opened, answered, submitted and when the page lost focus — but Instructure’s own documentation says quiz logs are “not intended to validate academic integrity or identify cheating for a quiz.” Detection requires a separate proctoring tool.

Can Canvas see your screen?

No. Canvas has no access to your screen, camera or microphone. A proctoring product such as Proctorio, Honorlock or Respondus Monitor can, but those are separate systems your school has to license and enable.

Can Canvas tell if you open another tab?

Canvas records that the quiz page lost focus. It does not record what you switched to, or whether you switched at all — the same event can be produced by a notification, an automatic refresh or a connection drop.

Do professors actually look at quiz logs?

Some do. But Cornell’s Center for Teaching Innovation advises against using them as standalone evidence, suggesting a log is better treated as a prompt for a conversation than as proof.

Can Canvas detect ChatGPT or AI writing?

Canvas itself does not analyze your writing. It can pass submissions to a similarity service like Turnitin, and some institutions enable an AI-writing indicator, which is a separate and much less reliable layer.

Is a Canvas quiz log enough to prove cheating?

The vendor says it is not intended for that, and both Yale’s Poorvu Center and Cornell’s CTI advise their own faculty against relying on it alone. Yale notes the analytics are “not effective for monitoring individual student actions with the level of precision necessary” to be suitable evidence.

Can Canvas see if you use a phone or second device?

Canvas has no visibility of any device other than the one loading the page — it is a web application, not device software. This is precisely why institutions that need that assurance license proctoring: tools such as Honorlock are built to detect a second device querying exam content, and a proctored exam typically requires a room scan as well.

Does Canvas know if you copy and paste?

Canvas does not log clipboard actions in a quiz. Where a school wants that restricted it uses a lockdown browser, which disables copy, paste and printing during the exam. Similarity checking on a submitted essay is a separate process again, run on the finished text rather than on how it was produced.

What does “stopped viewing the Canvas quiz-taking page” mean?

It means the quiz page was no longer the focused page at that moment. EFF notes logs show only that a page “was accessed by a device—not necessarily why or by whom (if anyone),” and that entries can come from delayed loading or automatic refreshes.

Sources

• Electronic Frontier Foundation — What to Do When Schools Use Canvas or Blackboard Logs to Allege Cheating (2021)
• Yale Poorvu Center for Teaching and Learning — Canvas Data & Academic Integrity
• Cornell Center for Teaching Innovation — Canvas Quizzes and Academic Integrity