RustDesk - Follow Up on Security in RustDesk - The stuff I should have said in Video 1.

This isn't the video I originally planned for this week, but given all of the questions around the security aspects of RustDesk, I feel it is necessary to cover it. I apologize for not including it in video one. I just mentioned the docs in the video, and the usage of a key for encrypted communication.

Here I show you how to find the key, how to use it, and how to include it in a downloadable .exe for your Windows clients so they don't have to set the values manually.

This is a fairly short video, but covers some important security aspects of RustDesk.

=== Links ===
Show Notes for RustDesk Install and Setup

RustDesk Docs Covering Security

Support my Channel and ongoing efforts through Patreon:

=== Contact ===
Twitter: @mickintx
Telegram: @MickInTx

Try out SSDNodes VPS Services! Amazing Specs for incredibly low costs. I'm running a 32 GB RAM / $ CPU Server for only $9 a month! Seriously. FOr long term server usage, this is the way to go!

Get a $50.00 credit for Digital Ocean by signing up with this link:

Use Hover as your Domain Name Registrar to get some great control over you domains / sub-domains:

Support my Channel and ongoing efforts through Patreon:

What does the money go to?
To Pay for Digital Ocean droplets, donations to open source projects I feature, any hardware I may need to purchase for future episodes (which I will then give to a subscriber in a drawing or contest).

=== Attributions ===

[ThomasSmoke]

id_ed25519 it is not a random numer, it is key algorithm like rsa or dsa like in ssh-keygen -t ed25519 which generates relatively short keys and offers better security than rsa or dsa

[awaddell]

if you are running your relay on windows you need to use the commands
pm2 start hbbs -- -k _
pm2 start hbbr -- -k _

in order to force encrypted connections.

The good news is that if you do not add the key to the client then they will not be able to initiate a connection through the relay but can be controlled. I find this useful when using a generic password for all clients on my lan but do not want users connecting out to other desktops.

[onderxyilmaz]

Thank you so much. Now it's safe. Thanks a lot.

[ardase]

Hi in the no show how to create a file for send a other usees for connect to the defined server how too?

[enrigp]

Thank you for your video. I have a Question. Is it possible to generate a compact client version like Teamviewer Host version? that only allows income connections? It is possible to customize the client? It is possible with Teamviewer, you can generate a light custom client version with a key presetted

[shippjable]

What??? Really?

Curious, so I fired up wireshark and rustdesk in a VM and transferred some plain text over rustdesk's file transfer interface, and also the clipboard, and also held down the X key for a few seconds, and none of that was visible in wireshark. Just gibberish.

Also, at the top of my client side window, there's a green shield icon - when I hover mouse cursor over it it reads "relayed and encrypted connection"

I can't find anything official that says the public relay servers are unencrypted. From what I see, the advantage in using private keys is to prevent strangers from using your private relay server. I'm assuming private relay servers still use another set of keys it generates for each session to encrypt the data streams - otherwise anybody with your private relay server's key could decrypt data streams belonging to other sessions on that server.

[alfredorodriguez]

Is there a way to script Rustdesk to have ID Server, Relay Server, API Server and the key information so it can be deployed to clients/friends machine?

[PP_Mclappins]

I know this is an old video, but is unattended access an option? Thanks 🙏

[sturingnico]

where or how i can create a preconfigure portable rustdesk.exe for client ?

[nikolaosgrigoropoulos]

My server runs on Ubuntu. When I try to run hbbs and hbbr with -k _ nothing happens. The client can still connect without the key. Any tips?

[SB-qmwg]

I'm interested. xrdp is old and vnc is a hog

[rahil]

RuskDesk has feature of "User ID and Password" login. How to set that up? The documentation doesn't have any guidance regarding it.

[arturitwo]

Why does applying the following command "docker-compose up -d" not generate the hhbr and hbbs files in the root folder?

[screege]

Does anyone knows how to create users so the users can have their own directory of rustdesk addresses? I am using my own server and it works perfect only thing I haven´t been able to do is to add users so they can have their own directories of rustdesk IDS

Regards

[CrynogarTM]

Commandline Parameters are too complicated for some End-Users. I like this approach for the Windows Executable to put the config values inside the executable name. *thumbs up*
Public Keys are no secrets the ment to be shared why you put this into Bitwarden? You need to put the Private Key into Bitwarden because this is the key to be secured

[salapolivalenta]

So, force encryption with -k _ and include server and key into windows exe file. Thank you! It works!

[billimantecas]

Excelent tutorial, how con i do this from Portainer

[spaciaarchviz]

What if someone gets access to the exe. They will have the server IP and public key. Can't they also use the server then and distribute the exe?

[jemmanou]

Is there any advantage for using docker in the installation? I am asking because the manual provides installation process without docker

[locslikes]

for some reason if i put the key into the rustdesk app it works but i can't get it to work by inserting it into the exe file. just says remote desktop is offline?