Security
How your workspace is protected
Effective 15 August 2026
This page explains how CloakRDP protects your Windows workspace: private access, privacy-focused internet egress, and how account credentials are stored. It describes product protections, not CloakRDP’s internal engineering.
Private access to your workspace
Remote-desktop access to your workspace is not offered as a public internet service. You connect through CloakRDP’s private VPN access path, so the workspace is not exposed directly on the public internet.
Privacy-focused internet egress
Internet traffic from your workspace is intended to leave through a privacy-focused VPN path rather than the datacenter’s direct internet connection. The product is designed so that path is not replaced by a direct datacenter exit when VPN egress is unavailable.
This is CloakRDP’s intended network design. VPN traffic logs are not kept; account, payment, and operational records are separate, as described in the Privacy policy.
Account credentials
Your password and recovery code are stored as hashes, not as reusable plaintext. CloakRDP does not reset access by email. Keep your customer number, password, and recovery code in a place only you control.
How secrets are stored
Credentials used to operate your workspace are stored encrypted. They are not published on marketing pages or in customer-facing HTML.
Related policies
For the records CloakRDP keeps, see the Privacy policy. For use restrictions, see the Acceptable Use Policy.