Why Your Employee's Screenshots Only Show One Monitor

If your employee runs two screens but every screenshot shows only one, nothing is broken and nobody is hiding anything: most desktop trackers capture a single display, and on many of them the employee picks which one at the start of the session. The useful question is not "why is a monitor missing" but "how many monitors does this machine actually have, and does the tracker tell me?" Those are two different capabilities, and a tracker can have one without the other.

Screen capture is per-display, not per-computer

Operating systems do not hand an application "the screen." They expose a list of displays, each with its own coordinates, resolution and refresh rate, and a capture API that copies pixels from a chosen region. A tracker has to decide what to ask for: one display, every display separately, or one stitched canvas covering all of them.

That decision is invisible from the outside. Two trackers can both advertise "screenshots" and behave completely differently on a two-monitor desk. It is also why the answer changes when an employee plugs in a laptop dock — the machine gains a display, and whether your evidence follows depends entirely on which of those three designs your tracker chose.

In browser-based trackers the choice is not even the vendor's to make. The Screen Capture API requires a user-mediated picker, and the person sharing chooses a tab, a window or a screen. Silent whole-desktop capture is impossible there by design, which is worth knowing before assuming a Chromebook or extension-based tool behaves like a desktop agent.

What the major trackers actually do

Learn how SCREENish saves you money Time tracking with screenshots, honest reports and hands-off payroll. Free to try — no credit card. Start free →

This is documented, so it can be checked rather than assumed.

Hubstaff captures every connected display, as separate images. Its support documentation states plainly that "Hubstaff will capture all active monitors connected to a computer when the user is tracking time", and spells out the arithmetic: "With a dual monitor setup and a screenshot frequency of 1x, Hubstaff will capture 2 screenshots — one from each monitor every 10 minutes." A third monitor means three images per interval.

Time Doctor also covers all displays. Its screencasts documentation states that "Screencasts will capture and display content from all the connected monitors."

SCREENish today captures the display the employee selects, and reports the rest of the hardware picture separately — see the next section, because that combination is the part most teams overlook. Multi-monitor capture is announced and takes a deliberately different shape: one composite image containing every monitor rather than one image per monitor. More on why that distinction matters below.

The general lesson: check your own tracker's documentation for the words "all monitors" or "connected displays" before assuming either behavior. A tracker that captures one screen is not defective — it is a design choice with real trade-offs — but you should know which one you bought.

The question worth asking: how many displays does the machine have?

Capture and inventory are separate features, and inventory is the one that answers your actual worry. A tracker can capture a single screen and still tell you, per machine, that the employee has two displays attached at 1920x1080 and 144 Hz. Once you can see that, a single-screen screenshot stops being ambiguous: you know exactly how much of the desk you are seeing.

SCREENish records a hardware profile per tracked machine — operating system, CPU, RAM, cameras, and a display list with each monitor's label, resolution and refresh rate, plus the total screen count. It appears in the work logs alongside the screenshots, and it is what turns "why is there only one screen here" into a settled fact rather than a suspicion. The feature guides cover where to find it.

If your tracker has no equivalent, you can still establish the same thing without accusing anyone:

• Ask. "How many monitors are you working across?" is a normal question with a normal answer, and asking it directly is faster than inferring it from image edges.
• Look at the resolution. A screenshot whose dimensions match a single common panel size, on a machine you know is docked, tells you the capture is per-display.
• Check window behavior. Applications that appear and disappear between consecutive screenshots without a visible minimize are often moving to another display, though they can equally be moving to another virtual desktop.

Composite versus separate: why the shape of the capture matters

"Captures all monitors" hides a second design decision with consequences you will feel every week: does the tracker produce one image per monitor, or one image containing all monitors?

Separate images are simpler to implement and preserve full per-monitor resolution. The cost is multiplication. Every downstream count doubles or triples: screenshots to review, items to approve or reject, storage consumed, rows in a work log, entries in an audit trail. A manager reviewing a three-monitor developer's day is looking at three times the images for the same eight hours, and approval workflows that were designed around "one capture, one decision" quietly become three decisions.

A composite keeps the cardinality flat. One capture stays one image, one review unit, one approval, one deletion record. The trade-off is resolution: to keep a multi-monitor canvas from becoming enormous, each display has to be downscaled, so small text on a 4K screen may not be readable. That is a real limitation and worth stating plainly rather than discovering later.

SCREENish's announced multi-monitor capture takes the composite route — every connected monitor stitched into a single image, each downscaled to at most 1920x1080 — precisely so that work logs, approvals, activity review and deletion tombstones keep working exactly as they do now. It is not yet available: the dashboard option is visible ahead of the tracking app that will implement it, and it will require the latest beta app. If someone tells you it is live today, they are wrong.

Neither shape is universally better. Choose separate images if you genuinely need to read fine detail on every screen; choose a composite if review time and approval simplicity matter more than pixel-level legibility. Just make the choice knowingly.

What a second monitor usually means

Before treating an uncaptured display as a problem, it helps to be honest about the base rate. Second monitors are ordinary equipment: documentation open beside code, a spreadsheet beside the system it feeds, a reference design beside the file being edited, a video call parked on the side during pair work. The overwhelming majority of second screens hold exactly the boring thing you would expect.

Treating a display gap as evidence of concealment is the same error as treating a mouse jiggler flag as proof of fraud — the signal is real, the conclusion is not. Our writeups on what the OS can and cannot tell you about faked input and reading overemployment signals both land on the same discipline: a signal is a reason to ask a question, never a verdict on its own.

The genuinely useful case for full-desktop capture is narrower and more mundane than catching anyone. It is evidentiary completeness — a client dispute over billed hours, a regulated environment where the record must be whole, a security review after an incident. If that is your reason, capture everything. If your reason is a hunch about a colleague, a conversation will resolve it faster and cost you far less trust.

Tell people what you capture

Whatever your tracker does with multiple monitors, the employee should know before the first screenshot lands, not after asking about a gap. This is both good practice and, in the EU and UK, a legal expectation: workplace monitoring must be transparent and proportionate, and "we capture every connected display" is exactly the kind of specific detail a monitoring notice is supposed to contain. Our GDPR-compliant monitoring checklist and the guide to what a monitoring notice must actually say cover the requirements.

The practical version is one sentence in your policy: state whether one screen or all screens are captured, and whether the display inventory is visible to managers. Teams that write that sentence stop having the "why can't I see the other monitor" conversation entirely — in both directions, because employees stop wondering too.

The short version

• Single-monitor screenshots are usually a design choice in your tracker, not a fault and not evasion.
• Hubstaff and Time Doctor both document capture of all connected displays; Hubstaff produces one image per monitor.
• Capture and hardware inventory are different features — knowing how many displays a machine has often answers the question without capturing them all.
• All-monitor capture comes in two shapes: separate images (full resolution, multiplied review load) and a composite (flat review load, reduced resolution). SCREENish's announced version is a composite capped at 1920x1080 per display, and is not yet available.
• A missing monitor is a reason to ask, not a reason to conclude.

If what you actually want is a tracker whose screenshots, approvals and hardware inventory sit in one place, SCREENish is $5 per employee per month with every feature included, and you can compare it against the tracker you are using now.