Zero-knowledge architecture
We cannot see what we're not given the keys to decrypt. Keys are derived between your devices and never leave them — even a court order couldn't produce a copy we don't hold.
✦Security
Remote desktop security — your privacy is not optional. Security without compromise.
Remio's zero-knowledge architecture means we can't see your data — even if we wanted to. No account, no middleman, nothing stored.
E2E
encrypted, every session
Zero
accounts stored
P2P
direct by default
PFS
forward secrecy
✦Architecture
Eight principles, plainly stated.
Zero-knowledge is a property of how Remio is built — not a policy we ask you to trust.
No account, no target
No email, no password, no user database to breach. When AnyDesk was breached in 2024 and TeamViewer hit by APT29, they had credentials to lose. Remio has nothing on file.
Direct device-to-device
Your data flows directly between your devices. The connection server only performs the handshake; when a relay is unavoidable it forwards packets it cannot read.
End-to-end encryption
DTLS-SRTP — the same industry-standard encryption trusted across real-time video and voice. Keys are negotiated only between your devices; even the relay sees nothing but ciphertext.
Perfect forward secrecy
Every session derives a fresh, single-use ephemeral key, destroyed when you disconnect. Past sessions stay protected even if a future key leaks.
Pairing you approve
A device gets in only once you let it — by scanning the host's QR code, typing the Device ID and PIN it shows, or signing in to your Remio account on both. The PIN renews itself every five minutes.
Keys stay on your devices
Each device keeps its pairing key in the protected storage its system provides — the Keychain on Apple devices, the Android Keystore, encrypted system storage on Windows, a private file on Linux. It never reaches our servers.
One design, every device
The same end-to-end encryption and the same pairing rules on iPhone, iPad, Mac, Android, Windows and Linux. There is no weaker app in the family.
Why go account-free? Read the zero-account philosophy essay →
✦Threat model
What changes when the vendor gets breached?
The honest test of any remote-desktop tool is what a break-in exposes. With Remio, the answer is nothing.
| Dimension | Remio | AnyDesk / TeamViewer |
|---|---|---|
| Stream routing | Direct peer-to-peer | Through vendor servers |
| Account required | None — PIN only | Yes, email + password |
| Can the vendor decrypt? | Impossible by design | Technically possible |
| What a breach exposes | No user data to leak | All users (2024 incidents) |
| Past-session protection | Perfect forward secrecy | Unclear |
| Ads & data brokers | Never | Varies by vendor |
✦Cryptography
The keys never leave your devices.
The stream is protected with DTLS-SRTP and ECDHE key negotiation — the same key-exchange family behind Signal, WireGuard and modern HTTPS. Session keys live only in memory, for the length of a session, then vanish.
No ads, no data brokers, no account profile — your screen content is never logged, inspected, or decryptable on our side.
✦Compliance
Nothing to leak, nothing to report.
Some protections are already in place; others are on the way. We only claim what we can prove.
Already in place
GDPR by architecture, keys on your devices, forward secrecy
No personal data is collected, so there is nothing to protect — plus rate-limiting at our connection server, and keys held in each device's own protected storage.
Roadmap
Bug bounty programme
Responsible-disclosure rewards. Until it launches, reports go to security@remio.net.
Reference
Full technical whitepaper
Encryption, threat model, transport, pairing and key lifecycle in depth — read the whitepaper →
✦Locked machines
A locked computer, reachable on your terms.
Remio does not bypass your computer's lock — it streams the real lock screen and passes your keystrokes to it, so the machine asks for your password exactly as it would if you were standing in front of it.
The lock stays the lock
Your operating system validates the password, not Remio. Your account password is never stored, never seen by our servers, and never transmitted as anything other than the encrypted keystrokes of the session.
Unlocking is a setting
Each host decides whether a connected device may type at its lock screen. Switch it off and your device can still see that the machine is locked — but no keystroke reaches it, and the client says so plainly instead of pretending to work.
Only devices you paired
A device reaches a host only if it is paired — by QR scan, by Device ID and PIN, or by signing in to the same Remio account as the host. The host lists every paired device, and removing one disconnects it on the spot. On your own device, Lock Remio asks for Face ID, Touch ID, your fingerprint, Windows Hello or your passcode when it opens, so someone who borrows your device can't reach your computers. A session that's running keeps running.
More detail on reaching a locked machine — including a lid-closed MacBook — on remote unlock at the lock screen →
✦Teams & individuals
Right for one person or a small team.
The same zero-knowledge design that protects a single Mac scales cleanly to a handful of paired devices. Because Remio has no central account store, there's nothing to provision and nothing to leak — every pair of devices holds its own keys. We're an independent project, so we don't yet offer enterprise support, SOC 2 attestation, or SLAs; what we do offer is an architecture laid out in full in our security whitepaper.
✦Questions
Frequently asked questions
Can Remio see my screen?
No. Remio uses end-to-end encryption with DTLS-SRTP and ECDHE key negotiation. Encryption keys are derived between your devices and never leave them. Our server only introduces your devices — it cannot decrypt the stream, even if compelled to. The cryptographic keys do not exist on our side.
Is there a Remio account or password?
No. There is no email, password, or central account database. Devices pair using a QR code or a Device ID and PIN displayed on the host computer. The PIN authorises a specific device, not an identity. Nothing about you is stored on our servers.
What happens if Remio's servers are breached?
Our connection server only relays connection-setup messages — it never holds streaming data, encryption keys, or user credentials. There is no user database to leak. A breach of Remio's infrastructure would not expose past sessions because each session uses unique ephemeral keys (perfect forward secrecy).
What encryption does Remio use?
DTLS-SRTP — the industry-standard encryption for real-time media — with ECDHE key negotiation between your devices. Each session uses unique ephemeral keys, providing perfect forward secrecy — past sessions remain protected even if a future key were somehow compromised. The exact protection profiles are documented in the security whitepaper.
Has Remio been independently audited?
Not yet. Remio is an independent project and has not had a third-party audit or SOC 2 attestation. The whole design is laid out in our security whitepaper, and security reports go to security@remio.net — a bug-bounty programme is on the roadmap.
Privacy should not be premium.
Your computer from anywhere — free to use, no account, nothing stored on our side.