How Dhatas Remote keeps you secure
Dhatas Remote encrypts every session end to end, requires the person at the PC to click Accept (or a password they set), stores secrets encrypted by Windows, and lets you block IDs and switch to view only at any time. Screen content and keystrokes are never recorded.
Sessions
- Screen, mouse and keyboard data are encrypted end to end between the two PCs using industry-standard WebRTC encryption (DTLS-SRTP).
- When a direct link isn't possible, data passes through our relay in encrypted form; the relay cannot read it.
- Every connection needs an Accept on the controlled PC, or an unattended password set by that PC's owner.
- A visible banner with Disconnect is shown for the whole session.
Passwords and identity
- Unattended passwords are stored only on the PC, hashed with scrypt and encrypted by Windows.
- Five wrong passwords lock password access for 15 minutes.
- Each installation has its own secret key, so its ID cannot be taken over.
The app
- The app only allows screen capture. It cannot use your camera or microphone.
- It cannot open web pages inside the app, and refuses to start with debugging switches.
- Updates are delivered over HTTPS and checked against a SHA-512 checksum before installing.
Abuse prevention
To protect users from scams, we record device and session details (described in the privacy policy). Devices used for misuse can be blocked from the service. Repeated connection requests are rate-limited.
Read our guide: Is remote desktop safe? How to avoid scams.