The purpose of a keylogger in information security is to monitor and record keystrokes made on a computer or device. While often used for legitimate purposes like employee monitoring, keyloggers can also be malicious, capturing sensitive information such as passwords and credit card numbers, leading to unauthorized access and data breaches.