Remote desktop that never trusts the middle

Run one program on both machines, type a nine-digit ID, and control the other screen. Sessions are encrypted end to end between the two PCs; our server introduces them and can never watch.

Download for Windows Portable exe version 0.2.2 · Windows 10 and 11, Server 2019 and later · signed

Windows 7, 8 and 8.1 run the Windows 7 build: remote-win7.exe, no installer needed.

What you get

• Connect by ID. Every installation gets a nine-digit ID. Type it, the other side sees who is asking and clicks Accept. No account, no timer, no throttle.
• Verify together. Both screens show the same four words before a session starts. If a person on the phone reads different words, someone is in the middle — hang up.
• Permissions on the accept card. Keyboard and mouse, clipboard, audio and files are separate switches the host flips at any moment during the session.
• Unattended access with a password the server never sees. The password is proved with OPAQUE; five wrong guesses lock the guesser out for thirty minutes.
• A host service for the logon screen, UAC prompts, Ctrl+Alt+Del and restarts, installed by the installer and removable in one click.
• Every screen, a window per monitor, file transfer both ways, the host’s audio, a tamper-evident session log on the host.
• Optional account with an authenticator app: your address book follows you between devices, sealed with a key derived from your password. The server stores ciphertext.
• Signed updates in the background, with a stable and a beta channel.

How the trust works

Each installation holds an Ed25519 key that its ID names. Session keys come from a DTLS handshake between the two PCs; each side signs its certificate fingerprint with its identity key, and the other side checks it against the key it saw the first time. Our server relays only the introduction. The whole design, including what the operator can and cannot do, is written down in the security overview and the threat model.

Before you install

If someone on a call asked you to install this — a bank, a tax office, tech support — stop. That is a scam, every single time. Read safety first.

Source and licence

The source is on GitHub under the Functional Source License (FSL-1.1-ALv2): read it, build it, self-host it, change it; do not ship it as a competing service. Each release becomes Apache 2.0 two years after publication.