AeroAdmin uses AES + RSA end-to-end encryption to protect screen data, keyboard and mouse input, and transferred files between the connected computers.

Only the connected computers can decrypt session content. When a connection passes through AeroAdmin relay servers, the content remains encrypted and cannot be decrypted by those servers.

Private Router: Organizations can deploy an AeroAdmin Private Router on their own infrastructure for greater control over connection routing. This private remote desktop router relays session content with end-to-end encryption intact. It is available with the CORPORATE license at no additional charge under current AeroAdmin terms.

Remote access requires the user's approval or password-based authorization configured in Access Rights for unattended access.

AeroAdmin's anti-brute-force system applies progressively longer timeouts to repeated failed authentication attempts, helping limit password guessing.

Create an allowlist of trusted operator IDs and assign an individual password and permissions to each operator.

Control which operators can view the screen, use remote control, transfer files or change access settings. Grant only the permissions needed for each task.

Unattended access passwords are created and managed locally on the user's computer. They are stored there in encrypted form, not on AeroAdmin servers.

Privacy and data protection: Encrypted session content is separate from connection metadata. AeroAdmin may process or store technical data for service operation, including computer IDs, IP addresses and connection timestamps, as described in the Privacy Statement. Computer names may also appear in session reports.