The present invention provides a secure input method based on a virtual machine, in which an application invokes directly a secure input interface provided by a virtual machine monitor and transfers the address and length of input buffer area of the application as input parameters when it requires a secure input, and the virtual machine monitor receives keyboard input information, converts it into a key value and saves the converted key value directly into the input buffer area for the application. This prevents another application from using different filtering drivers and keyboard hooks to acquire the user input and thus enhances the security for a user input.