Four minute read

Can Moodle Detect Cheating? What It Logs and What It Cannot See

Moodle by itself cannot see your tabs, your clipboard or your second device. What it does keep is a detailed attempt log, and plugins can change the picture completely. Here is what is native, what is bolted on, and how to tell which one your course runs.

Short answer. Out of the box, Moodle cannot detect tab switching, cannot read your clipboard and has no idea what else is open on your computer. It keeps a thorough attempt log of what happened inside the quiz. The complication is that Moodle is modular, so an institution can add proctoring, Safe Exam Browser enforcement or a tab-focus plugin, and the answer changes entirely depending on what your admin installed.

What Moodle records natively

Moodle's attempt log is more detailed than most students expect, and more boring than they fear. For each quiz attempt it stores:

  • When the attempt started and finished, and whether it was submitted or auto-submitted at the time limit.
  • Every answer saved, including each revision, with a timestamp. Moodle autosaves as you go, so a long attempt has many entries.
  • The IP address the attempt came from, and when it changed.
  • The order pages were viewed, on multi-page quizzes.
  • Grade and regrade history.

That produces a clear picture of pacing. A professor can see that a student spent nine seconds on a question that took the class an average of ninety, and they can see it per question across the whole cohort.

What is not in there: which window had focus, what was on your clipboard, what other applications were running, or anything at all about a phone.

The tab switching question

This is the query that brings most people here, and the honest answer is layered.

  • Plain Moodle: no. There is no native tab or focus tracking in a standard Moodle quiz. Leaving the page does not create a log entry the way it does in a Canvas quiz log, which is a real difference between the two platforms and one we compared in Canvas, Blackboard, Moodle and Schoology.
  • With a focus-tracking plugin: yes. Plugins exist that fire on the browser's visibility and blur events and record them against the attempt. These are not standard, but they are cheap to install, and you will not see them advertised.
  • With Safe Exam Browser: the question disappears. SEB is a locked-down application, like Respondus. There are no other tabs to switch to.

Because you cannot tell from the student side which of these is running, the safe assumption for any graded Moodle quiz is the middle one.

How to tell what your course is actually using

Some signals are visible before you start:

  • A download prompt or a required browser. If the quiz says it requires Safe Exam Browser, or refuses to open in Chrome, you are in a locked environment.
  • A quiz password you did not choose. SEB configurations often pair with a quiz password that the browser supplies automatically.
  • A webcam permission prompt. That means a proctoring plugin, not Moodle itself.
  • An access rule notice on the quiz page. Moodle lists attempt limits, time limits and browser requirements up front. Read that block before you plan anything.

What actually gets students caught on Moodle

Not the technology. The same three things as everywhere else:

  1. Pace that does not match the work. The attempt log makes per-question timing very legible, and a whole class is a comparison set.
  2. Answers that match another student's exactly, including the wrong ones. Shared answers are the most common finding in group cheating cases, and no browser tool changes that.
  3. Not being able to explain the answer afterwards. An oral follow-up costs a professor five minutes and settles the question completely. We wrote about how that plays out in A Student Aced a Test They Couldn't Explain.

The risk difference, stated plainly

A Moodle quiz you take in ordinary Chrome, with no SEB and no proctoring plugin, is one of the least monitored assessment environments in common use. A Moodle quiz behind Safe Exam Browser with a proctoring plugin is one of the most. They look almost identical in the course menu.

Check which one you are in before exam week, not while the timer runs. The same advice applies across platforms and we made the general case in Unproctored vs. Proctored Online Exams.

Finishing a Moodle quiz faster, without leaving the page

ExamClutch works on Moodle quizzes in ordinary Chrome. It reads the question straight from the page, gets the answer, and applies it when you double-click, so nothing depends on a second window or a second device. If your institution has added focus tracking, there is no focus change to record, because your browser never leaves the quiz.

It supports Moodle alongside Canvas, Blackboard, Brightspace, Schoology, McGraw Hill and Google Forms, across multiple choice, multi-select, dropdown and fill-in-the-blank. It fills the answer in and leaves the submit to you, and it does not run under Safe Exam Browser, because no Chrome extension does.

Ready to stop fighting your LMS?

Get ExamClutchSee pricing