Security安全

Last updated: 2026-07-23 · English primary · consent-based personal remote desktop最後更新：2026-07-23 · 英文為主 · 以同意為前提的個人遠端桌面

1. Consent model1. 同意模型

You may access only computers you own or are explicitly authorized to access, and only with informed consent from the person whose device, screen, files, audio, or input you control.您只能存取自己擁有或獲得明確授權的電腦，且必須取得裝置、螢幕、檔案、音訊或輸入受您控制之當事人的知情同意。

• Interactive (attended) sessions — the host side is expected to be aware of the session and to approve OS permission prompts (screen capture, input, accessibility) where required.互動（有人值守）工作階段——主機端應知悉該工作階段，並在需要時核准作業系統權限提示（螢幕擷取、輸入、輔助使用）。
• Unattended access — available only after explicit local opt-in on the host device. It is never enabled silently by remote action alone.無人值守存取——僅在主機裝置本機明確啟用後才可使用；絕不會僅憑遠端操作就悄悄開啟。
• Session permissions — clipboard, file transfer, audio, and input control are session-scoped capabilities, not permanent hidden rights.工作階段權限——剪貼簿、檔案傳輸、音訊與輸入控制皆為工作階段範圍的能力，而非永久性的隱藏權利。

2. Pairing and device enrollment2. 配對與裝置註冊

Devices join an owner account / personal workspace through an explicit enrollment or pairing path (sign-in, support code, or local unattended setup). Silent host enrollment without local awareness is not a supported product path.裝置透過明確的註冊或配對流程（登入、支援代碼或本機無人值守設定）加入擁有者帳號／個人工作區。在本機使用者不知情的情況下暗中註冊主機，並非本產品支援的方式。

• Pairing and device trust can be reviewed and revoked from the account / device surfaces.配對與裝置信任可在帳號／裝置介面檢視並撤銷。
• Support codes and short-lived join credentials are temporary; they are not permanent backdoors.支援代碼與短效加入憑證皆為暫時性，不是永久後門。
• Do not share unattended PINs, passwords, tokens, or private keys by email or chat.請勿透過電子郵件或聊天分享無人值守 PIN、密碼、權杖或私鑰。

3. Visible session indicator3. 可見的工作階段指示

When a remote session is active, the host client is designed to show a visible session indicator where the platform allows it. Operators and local users should be able to tell that a remote viewer is connected. Hidden or covert sessions are prohibited by product policy and the Acceptable Use Policy.遠端工作階段進行時，主機用戶端在平台允許的情況下會顯示可見的工作階段指示。操作者與本機使用者應能察覺有遠端檢視者連線中。隱藏或隱密的工作階段依產品政策與合理使用政策均屬禁止。

4. Unattended access is opt-in only4. 無人值守存取僅限主動啟用

• Unattended access requires local configuration on the host (for example a PIN or trusted-device setup).無人值守存取需要在主機本機設定（例如 PIN 或信任裝置設定）。
• It can be disabled or PIN-cleared on the host; revoke device trust from the account when compromise is suspected.可在主機端停用或清除 PIN；懷疑遭入侵時，請從帳號撤銷裝置信任。
• Rate limiting and lockout apply to credential guessing paths; brute-force against unattended credentials is not permitted.憑證猜測路徑套用頻率限制與鎖定；不允許對無人值守憑證進行暴力破解。

5. Kill switch and session stop5. 緊急停止與結束工作階段

Active control can be stopped from the host using the on-screen disconnect / emergency stop control, and from the viewer by ending the session. Ending a session is expected to stop further remote input on that connection path. For account-level compromise, also sign out other sessions, rotate the password, and review 2FA / device trust.主機端可用畫面上的中斷連線／緊急停止控制項停止進行中的控制；檢視端則可直接結束工作階段。結束工作階段即應停止該連線路徑上的後續遠端輸入。若帳號層級遭入侵，另請登出其他工作階段、更換密碼，並檢查 2FA／裝置信任。

6. Revoke access6. 撤銷存取

• Revoke or remove a registered device from the personal workspace.從個人工作區撤銷或移除已註冊的裝置。
• Clear or change unattended credentials on the host.在主機端清除或變更無人值守憑證。
• Sign out auth sessions and change the account password.登出驗證工作階段並變更帳號密碼。
• Disable 2FA recovery paths only after you control the authenticators again (via account security settings).僅在重新掌控驗證器之後，才透過帳號安全設定停用 2FA 復原路徑。

7. Audit trail7. 稽核紀錄

DeskRemote may store session and security metadata such as start/end time, participant or device identifiers, route category, quality state, and security events. That audit trail supports abuse investigation and operator awareness. It is not a substitute for local host awareness or a kill switch.DeskRemote 可能儲存工作階段與安全性的中繼資料，例如開始／結束時間、參與者或裝置識別碼、路由類別、品質狀態與安全事件。該稽核紀錄用於濫用調查與操作者掌握狀況，並不能取代主機本機知悉或緊急停止機制。

8. What the server does not store by design8. 伺服器依設計不儲存的內容

Remote screen contents, keystrokes, transferred-file contents, audio, and clipboard payloads are not intended to be persisted as ordinary server records. Explicit user-requested features (for example session recording or file transfer to a chosen endpoint) may create files at the endpoint or configured storage location — not as default cloud “always-on screen history.”遠端螢幕內容、按鍵輸入、傳輸檔案內容、音訊與剪貼簿內容，依設計不會作為一般伺服器紀錄持續保存。使用者明確要求的功能（例如工作階段錄影，或將檔案傳輸至選定端點）可能在端點或設定的儲存位置產生檔案——而非預設的雲端「隨時記錄的螢幕歷史」。

By design, the control-plane server is not treated as a trusted holder of remote desktop media or control payload secrets. Session media is encrypted end-to-end on supported paths so the control plane does not hold media keys for ordinary sessions. Peer identity is not fully machine-authenticated on every path yet — viewers may still need to compare a safety number (SAS) out of band; authenticated host identity, device attestation, and active-relay MITM closure remain pre-GA residual work. Do not read “E2EE” as “the host is cryptographically proven without any human check.”依設計，控制層伺服器不被視為遠端桌面媒體或控制內容機密的受信任保管者。在支援的路徑上，工作階段媒體採端對端加密，一般工作階段的媒體金鑰不會由控制層持有。對端身分在各路徑上尚未全部完成機器自動驗證 — Viewer 仍可能需要以離線方式比對安全碼（SAS）；已驗證的 Host 身分、裝置證明與主動中繼 MITM 閉環仍屬 Pre-GA residual。請勿把「E2EE」理解成「無需人工核對即可密碼學證明 Host 身分」。

9. Encryption honesty9. 誠實描述加密

DeskRemote uses modern transport and session-media encryption practices appropriate for a personal remote-desktop product. We do not use exaggerated encryption marketing labels, and we do not claim absolute invulnerability. No software product can guarantee protection against every future attack, endpoint compromise, social engineering, or misconfiguration.DeskRemote 採用適合個人遠端桌面產品的現代傳輸與工作階段媒體加密作法。我們不使用誇大的加密行銷標語，也不宣稱絕對無法被攻破。沒有任何軟體產品能保證抵禦所有未來的攻擊、端點入侵、社交工程或設定錯誤。

• Protect your account password, 2FA, unattended PIN, and host OS permissions.保護好您的帳號密碼、2FA、無人值守 PIN 與主機作業系統權限。
• Install only from official Store listings or verified DeskRemote download links.僅從官方商店頁面或經驗證的 DeskRemote 下載連結安裝。
• Keep the host and viewer applications updated.保持主機端與檢視端應用程式為最新版本。

10. Multi-factor authentication (MFA / 2FA)10. 多因素驗證（MFA／2FA）

Account two-factor authentication (TOTP) is available on the Free floor and is not a paid-only feature. Enable it from account security settings when available. MFA reduces risk from stolen passwords; it does not replace host consent or unattended opt-in controls.帳號雙因素驗證（TOTP）在 Free 方案即可使用，並非付費限定功能。功能提供時可在帳號安全設定中啟用。MFA 可降低密碼遭竊的風險，但不能取代主機端同意或無人值守主動啟用等控制。

11. Abuse prevention11. 濫用防範

• Unauthorized access, covert monitoring, credential harvesting, and consent bypass are prohibited — see Acceptable Use.未經授權的存取、隱密監控、竊取憑證與規避同意均屬禁止——詳見合理使用政策。
• Login and sensitive credential paths use rate limiting / lockout.登入與敏感憑證路徑採用頻率限制／鎖定。
• DeskRemote may suspend or terminate accounts that abuse the service or violate product terms.DeskRemote 得停權或終止濫用服務或違反產品條款的帳號。
• Report suspected abuse to [email protected] with subject line Abuse report (no passwords or PINs).若懷疑有濫用情事，請寄信至 [email protected]，主旨註明 Abuse report（請勿附上密碼或 PIN）。

12. Vulnerability reporting12. 弱點回報

If you believe you have found a security vulnerability in DeskRemote, email [email protected] with subject line Security vulnerability.若您認為在 DeskRemote 中發現安全弱點，請寄信至 [email protected]，主旨註明 Security vulnerability。

• Include product area, approximate version, steps to reproduce, and impact — without exploiting other users’ data.請附上產品範圍、大約版本、重現步驟與影響——過程中不得利用其他使用者的資料。
• Do not include live customer content, full receipts, tokens, or private keys.請勿附上真實客戶內容、完整收據、權杖或私鑰。
• We aim to acknowledge good-faith reports on a best-effort basis; there is no contractual bug-bounty SLA.我們會盡力回應善意回報，但不提供具契約效力的漏洞獎勵 SLA。

13. Implemented vs planned13. 已實作與規劃中

Honest status for merchant and customer review. “Implemented” means present on the current product line; “Planned / hardening” means roadmap or partial coverage that must not be over-claimed.供商家與客戶審閱的誠實狀態。「已實作」代表目前產品線已具備；「規劃／強化中」代表屬於路線圖或僅部分涵蓋，不得誇大宣稱。

14. Related pages14. 相關頁面

• Product overview產品總覽 — Host vs Viewer, plans, how to stop——Host 與 Viewer、方案、如何停止
• Acceptable Use Policy合理使用政策
• Privacy Notice隱私聲明
• Terms of Service服務條款
• EULA
• Contact聯絡 · Support支援