Your Laptop is Closed. Is It Still Connected?

Your Laptop Screen Is Off. Is It Still Connected? Modern Standby Explained

Hacking a laptop in sleep mode
Hacking a laptop in sleep mode

Your Laptop Screen Is Off. Is It Still Connected? Modern Standby Explained

You finish working, close your laptop, and put it in your bag. The screen goes dark, and you assume the computer has stopped communicating with the outside world.

But a dark screen does not necessarily mean that every component has powered down completely.

Modern laptops use sophisticated power-management systems to balance battery life, convenience, and responsiveness. Depending on the device and its configuration, certain components may remain in low-power states, network connectivity may be maintained, or selected background tasks may run.

For people concerned about digital privacy, this raises an important question: what can a laptop do while it appears to be asleep—and what does that mean for wireless security?

The answer differs between Windows PCs and Apple Macs.

What is Modern Standby?

Modern Standby is a Windows power-management model designed to make compatible computers resume quickly while consuming little power.

Traditional sleep modes generally suspend more of the computer's operation. Modern Standby instead uses a low-power idle state that allows the system to transition between deeper idle periods and brief periods of activity when needed.

This can support features such as notifications, selected background tasks, and a fast return to work.

However, Modern Standby does not mean that the processor is running at full capacity throughout the entire sleep period. The system is designed to spend as much time as possible in low-power states.

Nor does it mean that every Modern Standby computer continuously exchanges data with the internet.

Can a Windows laptop remain connected while asleep?

Yes, in some circumstances.

Microsoft documents that Windows can manage network connectivity during Modern Standby. Depending on the device and configuration, the system may allow selected background activity or maintain certain network functions while the main processor remains in a low-power state.

The behaviour is not identical across all computers. Windows version, hardware, power source, network configuration, and enabled features can affect what happens during sleep.

Microsoft also documents Adaptive Connected Standby, which can reduce network activity during sleep when continuous connectivity is not needed.

This distinction matters: the ability to maintain connectivity is not proof that a laptop is constantly transmitting data or that someone is remotely accessing it.

Network maintenance, notification delivery, and remote access are different activities. Their availability depends on the system's configuration and security controls.

What about MacBooks? Does Apple have Modern Standby?

Apple does not use the Windows feature name Modern Standby for Macs. Mac computers have their own sleep and power-management mechanisms, and their behaviour varies by model, hardware, macOS version, and settings.

Nevertheless, some of the broader questions are similar: can the computer wake while asleep, perform selected background tasks, or allow network access under certain conditions?

Apple documents a Mac setting called Wake for network access. When enabled, a compatible Mac may wake to provide access to shared resources, such as shared files or printers. The available options depend on the Mac.

Apple has also documented Power Nap, a feature that allows supported Macs to perform selected updates while asleep. Apple notes that Power Nap is available only on Intel-based Mac computers; it should not be assumed to be a feature of every modern MacBook.

These features are not identical to Windows Modern Standby. They illustrate a broader point: a computer's sleep behaviour depends on its platform and configuration, not simply on whether the display is off.

How to review network-wake settings on a Mac

On supported Mac laptops, Apple provides a setting to control whether the computer can wake for network access.

Depending on your macOS version, look under:

Apple menu → System Settings → Battery → Options → Wake for network access

If the option is available and you do not need this functionality, you can select Never.

Menu names and available options may differ across Mac models and macOS versions. Also review the sharing services enabled on your Mac, especially if you do not need to share files or other resources over a network.

Changing this setting can limit a particular form of network access, but it should not be interpreted as proof that every wireless component is completely powered off in every sleep state.

What about iPhones and iPads?

iPhones and iPads are also designed to perform selected background activities while the screen is off. Apps may receive notifications, maintain permitted network activity, or perform tasks according to Apple's operating-system rules and the user's settings.

However, iPhones and iPads do not use Windows Modern Standby. Their behaviour should be considered separately from the sleep behaviour of Windows laptops and Macs.

For cellular-enabled Apple devices, the cellular connection is also a separate consideration. A device may continue using its mobile network while its screen is locked. That is normal operation and does not, by itself, indicate that someone is tracking or accessing the device.

The key is to distinguish ordinary background connectivity from an actual security incident.

Does sleep mode create a security vulnerability?

Not by itself.

Background connectivity can support useful functions, including notifications, syncing, updates, and access to shared resources. These functions also mean that some network activity may remain possible under particular conditions.

Whether this creates a meaningful risk depends on other factors:

  • Network settings: Which connections and network-wake functions are enabled?

  • Sharing and remote-access features: Are services enabled that you do not need?

  • Software security: Is the operating system up to date, and is the device protected against known vulnerabilities?

  • Physical security: Could another person access the device, its ports, or its stored data?

  • Your threat model: Are you mainly concerned about unwanted network communication, remote access, physical theft, or a more specific threat?

A laptop that performs background network maintenance is not necessarily vulnerable to remote control. Likewise, a device that has been put to sleep is not automatically isolated from every possible wireless signal.

Good security involves understanding what the device is configured to do, keeping it updated, and limiting unnecessary functionality.

Is closing the cover the same as turning wireless communication off?

No. Closing the cover usually initiates a sleep-related action, but the exact behaviour depends on the device and its configuration.

On a Windows laptop that supports Modern Standby, the system may enter a low-power state that permits selected activity. On a Mac, the computer follows Apple's own sleep and wake behaviour, which can include configured network-access features.

The display turning off is therefore not a reliable way to establish that every radio has been disabled.

If you need to limit wireless communication, review the device's connectivity settings rather than relying on the display or lid position alone.

Airplane mode can disable supported wireless connections, but its precise effect depends on the operating system, device, and which radios are controlled by the setting. It should not automatically be treated as a verified, complete radio-frequency isolation method.

Can a Faraday sleeve help?

A properly designed Faraday sleeve can provide a physical layer of radio-frequency isolation while a device is enclosed.

Unlike a software setting, conductive shielding is intended to reduce the passage of radio signals through the enclosure. This can be useful when the goal is to prevent a device from communicating wirelessly while it is stored inside the sleeve.

But the result depends on the actual product. Shielding performance can vary by frequency, construction, seams, closure, wear, and how the device is positioned inside it. A sleeve should not be described as blocking every signal unless that claim is supported by appropriate testing across the relevant frequency ranges.

It is also important to understand what the sleeve does not do. It does not remove malware, encrypt stored files, prevent physical access, or secure a laptop while it is outside the enclosure.

A device may also continue performing local tasks while enclosed. Radio isolation is not the same thing as powering the computer off.

For anyone who needs a higher degree of assurance, the appropriate question is not simply whether a sleeve is marketed as a Faraday product. It is whether its shielding performance has been tested for the intended use.

What should you do if you are concerned?

Start with the simplest measures:

  1. Review your settings. On Windows, understand which sleep and network features are enabled. On a Mac, check network-wake and sharing options where available.

  2. Disable features you do not need. This may include remote-access or resource-sharing functions, depending on how you use your computer.

  3. Keep your device updated. Install security updates from trusted sources.

  4. Use appropriate wireless controls. Turn off Wi-Fi, Bluetooth, or cellular connectivity when you do not need them, taking account of how your device implements those controls.

  5. Choose physical isolation when that is your goal. If you need to reduce wireless communication while storing a device, consider a properly tested shielding product and follow its instructions.

The right measures depend on the actual threat you are trying to address. No single setting or accessory replaces a broader security approach.

The bottom line

A laptop's screen can be off while some background or network-related activity remains possible. Windows Modern Standby and Apple's Mac sleep features approach power management differently, but both are designed to balance responsiveness, energy use, and functionality.

This does not mean every sleeping laptop is constantly transmitting, nor does it mean that a person nearby can automatically access its contents.

Understanding the difference between background activity, network connectivity, remote access, and radio-frequency isolation is essential to making informed security decisions.

When privacy matters, do not rely on appearances alone. Understand how your device behaves, check its settings, and choose protection based on your actual needs.