Guide
Passive time tracking means software records what you do on your computer in the background, so you never start or stop a timer. Timing and Memtime win if you bill clients from that record. ActivityWatch wins if you want a free, open-source, local log. Toggl wins if your team already runs on timers. Rize adds AI categorization with cloud storage.
Passive time tracking is a way of recording your working time where software watches your computer activity in the background and builds the record for you. You never press start or stop, and you sort out what the time meant afterward.
People get it wrong in two directions. Some assume it is spyware with a friendlier name. Others assume it produces a finished timesheet with no effort. Neither is true. Passive tracking produces a raw record that you own, and that record still needs a short human review before it means anything.
A note before we start: this guide is published by Dayflow, which makes a passive tracker for Mac. Dayflow appears in the tools section, alongside the alternatives and the cases where something else is the better choice.
Passive time tracking is any tracking method where the default action is to record, and the person doing the work does not have to remember anything during the day. A small program runs in the background, notices which application is in front, and logs that along with a timestamp. Most tools also note when you stop touching the keyboard and mouse, so a coffee break does not show up as an hour of email.
The word “passive” describes your role, not the software’s. The software is busy. You are not. That is the whole appeal: the record exists whether or not you were disciplined that day.
The record that comes out the other end is usually a timeline. Think of it as a strip of colored blocks for each app or activity, from the moment you opened the laptop to the moment you closed it. Some tools stop there. Others group the blocks into categories, suggest which project they belong to, or have AI write a plain-language description of what you did.
You will also see the same idea called automatic time tracking. The terms overlap almost completely. If you want the longer version of that framing, what an automatic time tracker is covers it from the tool side.
Passive tracking gets confused with three other things. They share vocabulary but answer different questions.
| Approach | Who starts it | What gets recorded | Where it breaks |
|---|---|---|---|
| Passive tracking | Nobody, it runs all day | Apps, windows, pages, idle time, sometimes screen images | Does not know which project or client the work was for |
| Timer (active tracking) | You, per task | Only the tasks you remembered to time | Forgotten timers, untracked interruptions |
| Manual timesheet | You, after the fact | Your best memory of the day | Memory is vague by Friday |
| Employee monitoring | An employer | Activity sent to a manager by default | The worker does not control the data |
Timers are the classic form of active tracking. You click start when you begin a task and stop when you finish. The data is clean and already labeled, which is why billing-heavy teams like timers. The weakness is human. You forget to start one, you forget to stop one, and the five-minute Slack detour never gets logged at all.
Manual timesheets are reconstruction. At the end of the day or week you write down what you think you did. This is the least accurate method, and it is the one many people fall back on when timers fail.
Employee monitoring uses capture technology that can look like passive tracking, but the purpose is different. Monitoring exists so someone else can see your activity. Personal passive tracking exists so you can see it. The cleanest way to tell them apart is to ask who receives the data by default. There is more on that line in time tracking without surveillance.
Under the hood, almost every passive tracker has three layers.
1. A capture layer. A background process polls the operating system at short intervals and asks a few questions. Which app is in front? What is the title of the active window? Has there been any keyboard or mouse input recently? On a Mac, reading window titles and screen content requires permissions you grant in System Settings, so a passive tracker will ask for accessibility or screen recording access on first launch.
2. A storage layer. Each observation becomes an event: a start time, an end time and some attributes. Consecutive events with the same app and title merge into a single block. This store can live in a database on your device or in a vendor’s cloud. That single design choice decides who could ever read your history.
3. An interpretation layer. Raw events are noisy. Two hundred tiny blocks named “Google Chrome” tell you very little. The interpretation layer turns them into something readable. It can do that with rules (“anything with the repo name in the title goes to Project A”), categories (“Figma counts as design”), or AI that reads titles or screen images and writes a summary.
Most of the differences between passive trackers come down to how much the capture layer sees and how much work the interpretation layer does for you.
Capture depth is the most important thing to understand, because it decides both how useful the record is and how much it would hurt if it leaked. There are roughly four levels.
| Capture level | Typical signals | What you can answer | Sensitivity |
|---|---|---|---|
| App level | Active application, idle status | ”How long was I in email today?” | Low |
| Title and URL level | Window titles, browser tab titles and URLs | ”Which doc or ticket was I working on?” | Medium, titles can include names and subjects |
| Context level | Calendar events, calls, documents, email threads | ”How much of my day was meetings?” | Medium to high |
| Screen level | Periodic screen images, read by AI | ”What was I actually doing in that window?” | High, the screen shows everything |
App-level capture is enough to learn that you spend more time in chat than you thought. It is not enough to fill in a timesheet, because “Chrome, 3 hours” could be anything.
Title and URL capture is where passive tracking starts to replace memory. Window titles often contain the document name, the ticket number or the email subject. That is also why they are sensitive. A title can include a client’s name or a medical search.
Screen-level capture is the most complete and the most delicate. It can describe work that happens inside a single app with an unhelpful title, such as a design tool or a terminal. It also captures whatever was visible, including other people’s messages. If you go this route, check where images are processed and whether they are kept.
The general rule: capture the least detail that answers your actual question. If you only want to know where your hours go, app level is plenty. If you need to remember what you worked on at the level of tasks, you need titles or screen context.
Passive tracking only pays off if you do something with the record. This routine is a simple way to make that habit stick. The steps are ours, not a formal standard, but they match how most passive trackers are designed to be used.
The method works with any passive tool. The only thing that changes between tools is how much of step 4 the software does for you.
This is a fictional scenario to show how the method plays out, not a real person or real data.
Priya is a freelance product designer with two clients. She used to track time with a timer and kept finding gaps. Her invoices felt low, but she could not prove where the missing hours went.
She switches to a passive tracker and follows the method above. On day one she excludes her banking app and personal messages.
At the end of Wednesday, her timeline shows a long design block in the morning, a long chat block, and an afternoon broken into small pieces: design tool, browser, chat, design tool, video call, browser.
During her review, she notices three things. The morning design block has window titles with Client A’s file names, so that is easy. The afternoon browser blocks have page titles from Client B’s staging site, which means the “quick check” she never timed actually lasted most of an hour. And the chat block is split across both clients, so she assigns it by channel name.
She writes two rules: files containing Client A’s name go to Client A, and the staging domain goes to Client B. Thursday’s review goes faster.
At the end of the week, her one conclusion is that Client B’s review cycles generate short, scattered work she had never billed. She decides to raise it at the next check-in rather than absorb it.
Nothing here required a timer. It did require a few minutes of attention each day.
Treating the raw record as a timesheet. The record shows what was on screen. It does not know that the hour in your inbox was really project planning. Always reconcile before you bill or report.
Trusting auto-categories blindly. Rules and AI labels are drafts. A tool that files your research reading under “distraction” will skew any productivity score built on top of it. Spot-check categories in the first two weeks.
Capturing more than you need. Screen-level capture is powerful, but if your question is “how much time goes to meetings”, app and calendar data answer it with less risk.
Ignoring where the data lives. Local storage and cloud storage are different privacy decisions. Read the vendor’s privacy page before you grant screen permissions, not after.
Forgetting the other devices. A passive tracker on one machine misses work on another. If you split time across a laptop and a desktop, or across operating systems, your record will look thinner than your week was.
Never acting on it. The most common failure is quiet. People install a tracker, look at the dashboard twice, and stop. Without a weekly conclusion, the record is just storage.
The method behind this section is a comparison of each vendor’s own documentation and pricing pages as published on October 4, 2026. Prices can change, so check the vendor before you buy. For a broader roundup, see the best time tracker for Mac guide.
| Tool | What it does for this | Price |
|---|---|---|
| Dayflow | Records the screen at one frame every 10 seconds and has AI write the day as a readable timeline. Recordings and timeline stay on your Mac. Mac only, macOS 14 or later. | $0, MIT licensed. Optional Pro plan at $20 a month. |
| Timing (vs Dayflow) | Records apps, websites and documents on the Mac down to specific URLs and Mail threads. AI activity summaries and AI-suggested time entries. Stored locally unless you opt into sync. Mac only. | Professional: $9 per month billed annually, or $11 per month billed monthly. No free tier, 30-day trial with no credit card. |
| Rize (vs Dayflow) | Automatic app and website tracking with AI categorization and tagging. Google Calendar connection for meeting time. Cloud hosted on AWS. Mac and Windows. | Basic: $9.99/mo billed annually, or $12.99/month billed monthly. Pro: $23.99/mo billed annually. Max: $39.99/mo billed annually. 7-day trial. |
| ActivityWatch (vs Dayflow) | Records active app, window title and away-from-keyboard status. Browser extensions add tab title and URL, editor plugins add coding time. Data stays on your device. Open source under MPL-2.0. Windows, Mac, Linux and Android. No AI summaries listed. | Free. |
| Memtime (vs Dayflow) | Records programs, documents, emails, calls, meetings and browser tabs as a timeline you turn into time entries. Data stays on your device. Mac, Windows and Linux. | Basic: $14 per user/month billed annually, $18 billed quarterly, $12 billed 2-yearly. No monthly option. 14-day trial. |
| Toggl (formerly Toggl Track) (vs Dayflow) | Mainly timers, timesheets and calendar integrations. The vendor also lists automated background tracking and a timeline in the desktop app, and states it does not take screenshots or record keystrokes. Cloud service. | Free for up to 3 users. Starter: $9 per user per month billed annually, or $12 per user per month billed monthly. Premium: $16 per user per month billed annually, or $24 per user per month billed monthly. |
Toggl sits on the active side of the line. It belongs here because it is what many people are moving away from, and because its desktop timeline gives timer users some passive backup.
Dayflow is our product. It fits if you are on a Mac and want the screen-level end of passive tracking with a written timeline, local storage and a free, open-source license. Analysis can run on your Mac or through a cloud provider. It does not fit if you need invoices, payroll approvals, team reports or website blocking, because it has none of those. Its AI summaries can also miss or misread work, so check them before you share them.
Passive time tracking replaces “remember to start the timer” with “review what was recorded”. That trade fixes the biggest weakness of active tracking, which is gaps, and introduces a new job, which is interpretation.
Pick your capture depth before you pick a tool. App names answer simple questions. Titles and URLs get you close to a timesheet. Screen-level capture gives the fullest picture at the highest sensitivity. Then check where the data is stored, and build the small daily review habit that turns a record into decisions.
If you bill clients on a Mac, start with Timing. If you bill across platforms, look at Memtime. If you want something free, local and open source, try ActivityWatch. If your team lives on timers, Toggl remains the practical default. For a wider view of the options, the Mac time trackers roundup goes tool by tool.
Passive time tracking is a method where software records your computer activity in the background, such as which app is in front, which window or page is open, and when you step away. You do not start or stop timers. Later, you review the record and decide what the time was for. It is sometimes called automatic time tracking, and its main advantage is that it captures work you would forget to log.
No. The capture technology can look similar, but the difference is who controls the data. In personal passive tracking, the record belongs to you, often stays on your own device, and you choose what to share. Employee monitoring sends activity to an employer or manager by default. Before installing any tracker, check where its data is stored and who can see it, because that answers the question better than the feature list.
Not always. A passive tracker shows what happened, but it cannot always tell which client or project a stretch of work belonged to, especially when two projects use the same apps. Many people use a passive record as the source and then assign time to projects during a short review. Timers still make sense when you need billable entries labeled at the moment the work happens, such as legal or consulting work billed by the task.
Yes. ActivityWatch is free and open source under the MPL-2.0 license, with no feature gates according to its developers, and it runs on Windows, Mac, Linux and Android. Dayflow is also $0 and MIT licensed, with an optional Pro plan at $20 a month, but it runs only on macOS 14 or later. Timing, Rize and Memtime have no free tier, though each offers a trial.
It depends on the tool. The lightest trackers record the active app name, the window title and whether you are at the keyboard. Browser extensions add page titles and URLs. Some tools add calendar events, calls and documents. Screen-based trackers capture images of the screen at intervals and use AI to describe them. More detail means a more useful record and a more sensitive one, so match the capture level to your privacy needs.
Dayflow is the wrong pick here because it has no invoicing, billable rates or team reports. Timing is built for billable-hour records on Mac, with billing status tracking, report rounding and GrandTotal invoicing integration depending on plan. Memtime turns its local timeline into time entries and syncs them to over 100 project and billing tools from its Connect plan up. Either beats Dayflow for client billing.
Some tools do. ActivityWatch runs on Windows, Mac, Linux and Android. Memtime runs on Mac, Windows and Linux. Rize covers Mac and Windows but lists Linux as not yet available. Timing and Dayflow are Mac only. If you split your week between operating systems, pick a tool that runs on all of them, or your record will have gaps that defeat the point of passive capture.
It varies by vendor. ActivityWatch and Memtime state that recorded activity stays on your device. Timing stores tracked time locally unless you opt into sync. Rize hosts data in the cloud on Amazon Web Services. Toggl is a web service that syncs across its apps. Dayflow keeps recordings and the timeline on your Mac, and analysis can run locally or through a cloud provider you choose.
It is accurate about what was on screen and when, and weaker about why. A tracker knows you spent a long stretch in a browser, but it may not know whether that was research or drifting. Idle detection, page titles and AI descriptions narrow the gap, yet categories and summaries can still be wrong. Treat the raw record as reliable and any automatic labels as a draft you check before sharing or billing.
Dayflow is $0 and open source. Full recordings stay on your Mac, with local AI available for on-device analysis.
Download for MacOS macOS 14+ · MIT licensed · no account required