# remote access Published articles for remote access. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Forensic Walkthrough of a Compromised MikroTik Router and Its Persistence Mechanisms DevFeed: [Forensic Walkthrough of a Compromised MikroTik Router and Its Persistence Mechanisms]() Original publisher: [Read original article]() Author: j2sw Published: 2026-09-16T13:32:46Z Content type: article Language: en Sources: [Justin Wilson (j2sw)]() Topics: [MikroTik](), [Vulnerabilities](), [Persistence](), [remote access](), [backdoor](), [ssh]() Tags: [backdoor](), [cybersecurity](), [firmware](), [forensics](), [incident-response](), [mikortrick](), [mikrotik](), [network-operations](), [network-security](), [persistence](), [remote-access](), [security](), [ssh](), [vulnerabilities]() ### AI overview A forensic walkthrough examines a compromised MikroTik router in a honeypot. The intruders established persistence and remote access through scheduled tasks, scripts, new users, and tunnels. The author suspects, but cannot prove, that the compromise involved the MikroTrick RouterOS vulnerability chain. ### Source excerpt What it looks like when an intruder tries to make your own router work against you. A note before we start: Anything in this post that could identify my network, my organization, or my router's real hostname and IP address has been redacted or made generic. The attacker's own infrastructure, such as IP addresses, ports, ... Read more The post A first-hand forensic walkthrough of a real router compromise appeared first on Justin Wilson (j2sw). ## How to Build an Endpoint Data Loss Prevention Strategy for Your Development Team DevFeed: [How to Build an Endpoint Data Loss Prevention Strategy for Your Development Team]() Original publisher: [Read original article]() Author: Alex Tray Published: 2026-09-15T21:03:09Z Content type: tutorial Language: en Sources: [freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More]() Topics: [data loss prevention](), [Development](), [Access Control](), [data]() Tags: [access-control](), [cybersecurity](), [cybersecurityawareness](), [data-loss-prevention](), [data-protection](), [database](), [development](), [encryption](), [endpoint-security](), [hardcoded-credentials](), [it-security](), [net-conf](), [remote-access](), [secrets](), [sensitive-data](), [web-development]() ### AI overview A tutorial for development teams on building endpoint data loss prevention strategies. It covers auditing laptops for secrets and sensitive data, removing unnecessary copies, rotating exposed credentials, and establishing access controls. ### Source excerpt A developer's laptop holds more sensitive data than most people realize: API keys, database credentials, staging environment secrets, and sometimes entire copies of production data pulled down "just f ## Microsoft patches Windows and Excel - breaks audio, remote access, and paste DevFeed: [Microsoft patches Windows and Excel - breaks audio, remote access, and paste]() Original publisher: [Read original article]() Author: Richard Speed Published: 2026-09-14T13:00:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Microsoft](), [Windows]() Tags: [excel](), [microsoft](), [os-platforms](), [remote](), [remote-access](), [windows]() ### AI overview Microsoft patches Windows and Excel, but the updates introduce problems affecting audio, remote access, and paste functionality. ### Source excerpt Redmond's quality drive takes another detour through the known issues list ## I ran my agents from my phone for two weeks DevFeed: [I ran my agents from my phone for two weeks]() Original publisher: [Read original article]() Author: Josh Sherman Published: 2026-09-06T00:00:00Z Content type: opinion Language: en Sources: [Josh Sherman]() Topics: [Claude Code](), [iOS](), [remote access]() Tags: [agents](), [claude-code](), [ios](), [remote-access]() ### AI overview A personal account of using the Claude Code iOS app on an iPhone 17 Pro to work with remote sessions during a two-week trip. The setup generally supported the author's productivity and autonomy goals, but a remote-access issue required using a laptop and configuring the home network. ### Source excerpt The last two weeks of my life have been quite transient. More so than the time I hopped a plane to San Francisco, interviewed for 5 hours, and hopped back on a plane back to Florida the same evening. The trek started in Texas with a road trip that passed through 11 states, ending up in Rhode Island where my daughter is attending college. The weather was beautiful, but only for a moment as the next leg included a flight down to North Carolina to give Charlotte a test run. As a newly minted empty nest couple, it's time for a change. Austin was fantastic when we moved there, but since the COVID-19 pandemic and the great migration of folks from California to Austin, the town feels like a shell of what it used to be. I refer to it as "The Formerly Weird City of Austin" (trademark pending). I'll talk more about Charlotte in another post, but the early feeling is that it feels more like the Austin we moved to than the one we'll be leaving. My intentionally limited technical stack So, this whirlwind trip felt like a good time to try to stay away from the computer as much as possible. That didn't mean I wasn't going to try to eke out some productivity. My on the go technical stack included my iPhone 17 Pro and the Claude Code iOS app connected to a remote session back at my house for the majority of everything I was able to get knocked out. Laptop was with me, and it made a brief appearance so I could write a couple of blog posts. There was also a small snafu with my remote session that warranted an actual keyboard (I'll touch on that in a bit), and once more to watch some late night Impractical Jokers, as that tends to be the thing we watch when vacationing. In addition to my thin tech stack, I did have one north star: don't walk back any of the autonomy we already have in place. I am working towards a system that needs me less and not more. Only one issue, but it was a doozy Generally speaking, everything "worked" just as you'd expect. Talk to the harness to start the game ## FanX Drive X3 Review/Preview - A $99 USB Dongle to Turn an Old PC into a NAS? DevFeed: [FanX Drive X3 Review/Preview - A $99 USB Dongle to Turn an Old PC into a NAS?]() Original publisher: [Read original article]() Author: Rob Andrews Published: 2026-09-02T16:00:42Z Content type: comparison Language: en Sources: [NAS Compares]() Topics: [USB](), [pc]() Tags: [crowdfunding](), [diy-nas](), [docker-nas](), [fanx](), [fanx-drive-x3](), [fanxiang](), [gadgets](), [home-lab](), [jellyfin-nas](), [mobile-backup](), [nas](), [nas-accessories](), [nas-news](), [network-attached-storage-nas](), [news](), [news-2026](), [pc-to-nas](), [private-cloud](), [remote-access](), [review](), [uncategorised](), [usb](), [usb-nas]() ### AI overview A hands-on preview examines whether the FanX Drive X3, a small USB device and software layer, can make an older PC function like a NAS without requiring expertise in TrueNAS, Linux permissions, Docker Compose, or remote access. ### Source excerpt The FanX Drive X3 is one of those odd little storage gadgets that immediately raises a useful question: can a small USB device and a software layer turn an older PC into something NAS-like without asking the owner to learn TrueNAS, Linux permissions, Docker compose files or remote access plumbing? In our hands-on preview, the [...] ## IoTorero joins Works with Home Assistant DevFeed: [IoTorero joins Works with Home Assistant]() Original publisher: [Read original article]() Author: Miranda Bishop Published: 2026-07-09T00:00:01Z Content type: news Language: en Sources: [Home Assistant]() Topics: [Home Assistant](), [Internet of things](), [Hardware](), [Open Source](), [Code](), [GitHub]() Tags: [community](), [customers](), [devices](), [firmware](), [github](), [hardware](), [internet-of-things](), [iot](), [manufacturing](), [open-source](), [products](), [remote-access](), [research-development](), [smart-home](), [works-with-home-assistant]() ### AI overview IoTorero joins the Works with Home Assistant program with seven certified devices pre-flashed with ESPHome. The company focuses on open source smart home hardware, including smart plugs and relays, and publishes device configuration files on GitHub. ### Source excerpt The Works with Home Assistant program powers up this month as we welcome our new partner, IoTorero! 🎉 Experts in pre-flashed smart home hardware, IoTorero bring the very first ESPHome-ready smart plugs and relays to the program (and that's not all). IoTorero enters the ring If you've spent any time browsing pre-flashed smart home tech online, there's a good chance you've come across IoTorero. And if you haven't, let us introduce you! Founded in 2020, the company (formerly Athom Technology) was tinkering with ESPHome right out of the gate. Their new name is a nod to the Internet of Things (IoT), but unlike standard IoT gadgets that stop working if your internet drops or a company closes its servers, IoTorero champion open source firmware. Other smart devices run manufacturer-written software, which is tuned to work well with Home Assistant for certification to the program. IoTorero go a step further to make sure their tech is accessible for all: all seven of their certified devices are pre-flashed with ESPHome, meaning there's no installation required - the devices will integrate into your Home Assistant setup straight out of the box. And because their devices are genuinely open, you can always tweak and customize them if you want to. "Since inception in 2020, IoTorero (Athom Technology) has been dedicated to the research, development, and manufacturing of open source smart home hardware products. We provide Home Assistant users with high-quality devices pre-flashed with ESPHome firmware. By joining the Works with Home Assistant program, we ensure that customers can select and purchase our products with complete confidence." - Aiden Tang, CTO and Co-Founder, IoTorero That same spirit of openness carried over to last year's Community Day, where IoTorero donated a stack of samples for attendees to try - a gesture we loved to see, and one that speaks to how seriously they take supporting our community 💪. It shows up in their approach to code, too: IoTorero maintain a pu ## @mastra npm scope takeover: 143 packages backdoored via compromised contributor account DevFeed: [@mastra npm scope takeover: 143 packages backdoored via compromised contributor account]() Original publisher: [Read original article]() Published: 2026-06-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [npm](), [Malware](), [Remote Access Trojan](), [Cryptocurrency](), [C2]() Tags: [c2](), [chainguard-libraries](), [chainguard-packages](), [command-and-control](), [crypto](), [malware](), [mastra](), [npm](), [npm-takeover](), [packages](), [provenance](), [remote-access](), [remote-access-trojan](), [secure-packages](), [software-packages](), [supply-chain](), [tls]() ### AI overview The article reports that an attacker used a compromised former contributor account to republish all 143 packages in the @mastra npm scope on June 17, 2026. The malicious versions could disable TLS verification, download a cryptocurrency wallet stealer and remote access trojan, and establish command-and-control access. It recommends auditing dependency trees and lockfiles and rotating credentials on affected hosts. ### Source excerpt A supply chain attack compromised all 143 @mastra packages. Chainguard customers stayed protected through malware blocking and source-built libraries. ## Remote Access That Works Behind NAT, CGNAT, and Uncontrolled Firewalls DevFeed: [Remote Access That Works Behind NAT, CGNAT, and Uncontrolled Firewalls]() Original publisher: [Read original article]() Author: info@goteleport.com (Steven Martin) Published: 2026-05-28T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [remote access](), [Authorization](), [ssh](), [Virtual Private Network](), [Firewall](), [Network]() Tags: [authorization](), [devices](), [firewall](), [guide](), [how-to](), [nat](), [network](), [remote-access](), [ssh](), [vpn]() ### AI overview This guide explains why inbound SSH and VPN access can fail for remote devices behind NAT, CGNAT, or customer-controlled firewalls. It introduces outbound connections and device identity as approaches for routing access and maintaining authorization across network changes. ### Source excerpt In this guide, learn how to securely access remote devices behind NAT, CGNAT, or uncontrolled firewalls. ## Modernizing Administrative Access for CMMC Level 2 DevFeed: [Modernizing Administrative Access for CMMC Level 2]() Original publisher: [Read original article]() Author: info@goteleport.com (Nicolas Morris) Published: 2026-05-27T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [Access Control](), [IAM](), [Cloud](), [ssh](), [remote access](), [Virtual Private Network](), [Kubernetes]() Tags: [access-control](), [audit](), [cloud](), [cmmc](), [governance](), [iam](), [kubernetes](), [least-privilege](), [remote-access](), [ssh](), [visibility](), [vpn]() ### AI overview The article discusses administrative access challenges faced by organizations pursuing CMMC Level 2 readiness. It describes fragmented access across VPNs, local accounts, static SSH keys, cloud IAM, and disconnected authentication workflows, and presents Teleport as an identity-native approach to centralize governance, reduce standing privileges, and improve audit readiness. ### Source excerpt Defense contractors pursuing CMMC Level 2 face persistent AC, IA, and AU findings. Coalfire outlines how Teleport addresses the enforcement and audit gaps assessors require. ## How to Secure Third-Party Remote Access to Data Centers (Without SSH Keys) DevFeed: [How to Secure Third-Party Remote Access to Data Centers (Without SSH Keys)]() Original publisher: [Read original article]() Author: info@goteleport.com (Mayur Pipaliya) Published: 2026-05-07T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [remote access](), [datacenter](), [Critical Infrastructure](), [ssh](), [Cloud]() Tags: [api-keys](), [audit](), [credentials](), [critical-infrastructure](), [data-centers](), [incident](), [infrastructure](), [passwords](), [remote](), [remote-access](), [ssh](), [vpn]() ### AI overview This article explains the security risks of third-party remote access to data center infrastructure, including shared SSH keys, VPN credentials, screen-sharing sessions, and other static credentials. It describes credential sprawl, identity fragmentation, persistent access, and limited auditability, and outlines identity-based approaches to securing this access. ### Source excerpt Explore the key challenges of third-party access to data center infrastructure and how to secure remote access without static credentials or identity blind spots. ## From Plaintext, to BLESS, to Identity: The Evolution of Secure Remote Access DevFeed: [From Plaintext, to BLESS, to Identity: The Evolution of Secure Remote Access]() Original publisher: [Read original article]() Author: info@goteleport.com (Leon Fong) Published: 2026-04-09T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [remote access](), [Security](), [ssh](), [Unix](), [MFA]() Tags: [mfa](), [remote-access](), [security](), [ssh]() ### AI overview A historical developer article traces secure UNIX remote access from plaintext telnet and rsh to SSH encryption and key-based login, then discusses the operational risks of long-lived SSH keys. It also describes Netflix's use of MFA and signed SSH certificates as a more secure remote-access approach. ### Source excerpt A senior Adobe security engineer traces the evolution of secure remote access from telnet to SSH keys, Netflix's BLESS, and modern certificate-based identity. ## How to choose a business VPN DevFeed: [How to choose a business VPN]() Original publisher: [Read original article]() Published: 2025-09-23T17:52:03Z Content type: tutorial Language: en Sources: [Learn on Tailscale]() Topics: [Virtual Private Network](), [tailscale](), [networking](), [Encryption](), [MFA](), [Single sign-on (SSO)](), [Logging](), [health checks](), [remote access]() Tags: [authentication](), [encryption](), [health-checks](), [how-to](), [logging](), [mfa](), [networking](), [remote-access](), [vpn]() ### AI overview This guide explains how to evaluate a business VPN, covering remote-access and site-to-site models, protocol support, identity integration, logging, encryption, SSO, MFA, device posture checks, and least-privilege policies. It presents Tailscale's peer-to-peer, identity-based approach as a way to avoid VPN backhaul bottlenecks and overly broad network access. ### Source excerpt Learn how to choose a business VPN that actually works for real teams. Cut through the noise and find secure, simple solutions that won't create headaches six months later. ## The 90s UNIX Utility That Fell Out of Favour DevFeed: [The 90s UNIX Utility That Fell Out of Favour]() Original publisher: [Read original article]() Author: Alex Ellis Published: 2025-08-15T08:09:48Z Content type: opinion Language: en Sources: [Alex Ellis' Blog]() Topics: [Unix](), [Linux](), [macOS](), [Bash]() Tags: [bash](), [linux](), [macos](), [network](), [remote-access](), [terminal](), [unix]() ### AI overview An essay revisits the UNIX finger utility, explaining its origins in a high-trust environment where it exposed user information such as login status, idle time, phone numbers, and email activity. It also reflects on the author's early experiences with Linux, MUD servers, telnet, and bash. ### Source excerpt I reminisce of the days of i386, Slackware Linux, and forgotten plaintext UNIX utilities that are still on modern Macs today. ## OpenVPN vs. Cloudflare: Which is Best for Developer-Friendly Networking? DevFeed: [OpenVPN vs. Cloudflare: Which is Best for Developer-Friendly Networking?]() Original publisher: [Read original article]() Published: 2025-03-24T21:17:43Z Content type: comparison Language: en Sources: [Learn on Tailscale]() Topics: [Virtual Private Network](), [tailscale](), [Cloudflare](), [SASE](), [Security](), [Cloudflare Access](), [remote access]() Tags: [alternatives](), [cloudflare](), [cloudflare-access](), [encryption](), [remote-access](), [sase](), [security](), [tailscale](), [vpn]() ### AI overview This comparison examines OpenVPN, Cloudflare, and Tailscale for developer and engineering-team networking needs, including security, performance, remote access, and management. It describes OpenVPN as a traditional VPN requiring dedicated servers and manual configuration, Cloudflare Access as an identity-based Zero Trust alternative, and Tailscale as a WireGuard-based peer-to-peer approach for accessing internal resources. ### Source excerpt As VPN alternatives go, OpenVPN, Cloudflare and Tailscale each serve different networking priorities for developers, making the right choice dependent on security, performance, and management needs. ## I self-hosted my own RSS reader to keep up with the news DevFeed: [I self-hosted my own RSS reader to keep up with the news]() Original publisher: [Read original article]() Author: Dhruv Bhutani Published: 2025-03-08T23:00:10Z Content type: opinion Language: en Sources: [XDA - RSS]() Topics: [RSS Feed](), [Homelab](), [Docker](), [Open Source](), [Deployment](), [hosting](), [Extension](), [GitHub]() Tags: [customization](), [deployment](), [docker](), [extensions](), [github](), [hosting](), [nas](), [open-source](), [privacy](), [remote-access](), [rss](), [self-hosted](), [speed]() ### AI overview The author self-hosts FreshRSS on a home NAS to retain control over RSS reading, avoid service shutdowns and paywalls, and address privacy concerns. FreshRSS is described as lightweight, customizable, performant, easy to deploy with Docker, and accessible remotely through Tailscale. ### Source excerpt Self-hosting FreshRSS gives you speed, privacy, and customization in one package ## How we improved SSH connection times by up to 40% DevFeed: [How we improved SSH connection times by up to 40%]() Original publisher: [Read original article]() Author: info@goteleport.com (Tim Ross) Published: 2023-08-29T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [ssh](), [Latency](), [tracing](), [gRPC](), [OpenTelemetry](), [Security]() Tags: [latency](), [opentelemetry](), [protocol](), [proxy](), [remote-access](), [security](), [ssh](), [tracing]() ### AI overview Teleport describes reducing SSH connection times by up to 40%. The article explains how Distributed Tracing and OpenTelemetry helped identify latency, including repeated proxy requests and the cost of creating SSH connections, and reports replacing SSH connections with gRPC while preserving security. ### Source excerpt Teleport boosted SSH connection speeds by 40%: from diagnosing latency with Distributed Tracing to replacing SSH connections with gRPC--without sacrificing security. ## Directory Sharing in a Web-Based RDP Client Using the File System Access API DevFeed: [Directory Sharing in a Web-Based RDP Client Using the File System Access API]() Original publisher: [Read original article]() Author: info@goteleport.com (Isaiah Becker-Mayer) Published: 2022-09-19T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Web](), [Filesystems](), [Protocol (disambiguation)](), [client](), [Windows](), [Network](), [implementation]() Tags: [api](), [how-to](), [implement](), [protocol](), [rdp](), [remote-access](), [web](), [windows]() ### AI overview This tutorial explains how directory sharing works in a web-based RDP client using the File System Access API. It introduces the RDPDR virtual channel, describes the client-server message flow for accessing files, and discusses how shared-directory functionality is implemented. ### Source excerpt Learn how to implement RDP directory sharing using the File System Access API. ## Choosing an RDP Client DevFeed: [Choosing an RDP Client]() Original publisher: [Read original article]() Author: info@goteleport.com (Rabo James Bature) Published: 2022-06-29T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [client](), [remote access](), [Protocol (disambiguation)](), [Security](), [Networks](), [servers](), [Microsoft]() Tags: [article](), [desktop](), [malware](), [networks](), [rdp](), [remote](), [remote-access](), [security](), [support]() ### AI overview This article explains how Remote Desktop Protocol (RDP) enables remote access to Windows computers and outlines criteria for choosing an RDP client, including ease of use and security. ### Source excerpt Remote Desktop Protocol or RDP lets teams remotely access systems. In this post, we'll look at how to choose a RDP client for your team. ## Is VPN or Zero Trust Access Best for Remote Working Security? DevFeed: [Is VPN or Zero Trust Access Best for Remote Working Security?]() Original publisher: [Read original article]() Author: info@goteleport.com (Sheekha Singh) Published: 2022-06-07T00:00:00Z Content type: comparison Language: en Sources: [Teleport]() Topics: [zero trust network access](), [Virtual Private Network](), [Zero Trust](), [Security](), [remote access](), [ZTNA]() Tags: [remote-access](), [security](), [vpn](), [zero-trust](), [zero-trust-network-access](), [ztna]() ### AI overview This article compares VPN-based remote access with Zero Trust Network Access for remote working security. It describes VPN benefits and limitations, including broad network access, weaker granularity, slower connections as usage grows, and management complexity, then introduces zero trust as an alternative and outlines the transition to a zero-trust architecture. ### Source excerpt This article will explore how zero trust access is a better alternative than a VPN for remote working. ## Alternatives to a Corporate VPN DevFeed: [Alternatives to a Corporate VPN]() Original publisher: [Read original article]() Author: info@goteleport.com (Shivashish Yadav) Published: 2022-04-20T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [Virtual Private Network](), [network security](), [remote access](), [Vulnerabilities](), [Network Segmentation](), [Zero Trust](), [Firewall]() Tags: [corporate](), [firewalls](), [network-segmentation](), [remote-access](), [security](), [security-vulnerabilities](), [vpn](), [zero-trust]() ### AI overview This article explains why corporate VPNs can create security and access-control risks, particularly for remote work and third-party connections. It discusses data-leak exposure, shared passwords, insufficient resource-level access controls, and the need for network segmentation, firewalls, least-privilege access, or a zero-trust model as alternatives or safeguards. ### Source excerpt VPNs were once the gold standard for network security, but they have limits. This post dives into perimeter-based security limits and offers modern VPN alternatives. ## TPM vs. HSM: Understanding the Difference DevFeed: [TPM vs. HSM: Understanding the Difference]() Original publisher: [Read original article]() Author: ev@goteleport.com (Ev Kontsevoy) Published: 2022-03-10T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Hardware](), [Encryption](), [Cryptography](), [Security](), [Amazon Web Services]() Tags: [aws](), [cryptography](), [encryption](), [hardware](), [remote-access](), [security](), [sensitive-data]() ### AI overview This tutorial explains how Trusted Platform Modules (TPMs) and Hardware Security Modules (HSMs) protect encryption keys and sensitive data. It introduces the cryptographic problem of storing keys securely and describes HSM capabilities such as encryption, decryption, signing, and tamper-triggered key destruction. ### Source excerpt On the surface, TPMs and HSMs seem similar. This post dives deeper to explain the difference between Trusted Platform Modules and Hardware Security Modules. ## SSH Hardening to Prevent Brute-Force Attacks DevFeed: [SSH Hardening to Prevent Brute-Force Attacks]() Original publisher: [Read original article]() Author: info@goteleport.com (Robert Watson) Published: 2022-01-14T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [ssh](), [Security](), [Authentication](), [remote access](), [Regular expression](), [Library]() Tags: [article](), [attacks](), [authentication](), [email](), [expression](), [fail2ban](), [filter](), [hardening](), [ip](), [limit](), [protection](), [reduce](), [remote-access](), [security](), [server](), [server-logs](), [ssh](), [tcp]() ### AI overview This tutorial presents four ways to harden SSH servers against brute-force attacks: limiting authentication attempts, using Fail2ban, and restricting SSH access with TCP wrappers. It also explains how Fail2ban filters server logs and responds to suspicious activity. ### Source excerpt In this article, we explore and explain four ways to harden SSH from brute-force attacks to help improve security. ## Passwordless Remote Access to Windows Servers and Desktops DevFeed: [Passwordless Remote Access to Windows Servers and Desktops]() Original publisher: [Read original article]() Author: sakshyam.shah@goteleport.com (Sakshyam Shah) Published: 2021-12-20T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [remote access](), [Windows](), [Authentication](), [Security](), [Protocol (disambiguation)](), [browser]() Tags: [authentication](), [browser](), [rdp](), [remote-access](), [security](), [vault](), [windows]() ### AI overview This article explains how Teleport provides passwordless remote access to Windows servers and desktops through an in-browser desktop client, certificate-based authentication, SSO, and RBAC. It also introduces how Windows Remote Desktop Protocol works and discusses the security and operational drawbacks of password-based access. ### Source excerpt Learn how Teleport implements an in-browser desktop client and certificate-based authentication that allows passwordless access to Windows Servers and Desktops. ## Identity-based, passwordless access to Windows hosts across all computing environments. DevFeed: [Identity-based, passwordless access to Windows hosts across all computing environments.]() Original publisher: [Read original article]() Author: ben@goteleport.com (Ben Arent) Published: 2021-12-15T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [Windows](), [passwords](), [active directory](), [Authentication](), [remote access](), [Security](), [servers]() Tags: [active-directory](), [authentication](), [password](), [rdp](), [remote-access](), [security](), [servers](), [windows]() ### AI overview The article introduces Teleport Desktop Access for Windows hosts, extending Teleport's passwordless, certificate-based access model from Linux to Windows. It discusses RDP, Active Directory, remote access, and security risks associated with password-based access and privileged directory services. ### Source excerpt An overview Teleport Desktop Access providing securing access to Windows Fleets. [Next page]()