[Answered] Is Chrome Remote Desktop Safe?

Chrome Remote Desktop: Is it safe?

" I and my daughter run a small business together and my daughter used Chrome Remote Desktop to access my computer for work purposes. After finishing work, she shut down and went officially normally. It seems that all things go well. But I’m still worried about the security of the Google extension. Is Chrome Remote Desktop safe enough? Anyone can tell me?"

The answer to "Is Chrome Remote Desktop safe"

For normal users, Chrome Remote Desktop is safe and secure enough. During the remote session over Chrome Remote Desktop, all data will be sent directly from the client to the host, unless in some special circumstances. That is to say, even Google can’t see the transferred data. And it adopts an encrypted combination protocol and AES encryption algorithm to protect data security.

▪ SSL (Security Socket Layer) encrypted communication protocol is a solution for many well-known enterprises to protect the security of sensitive data transmission. It was originally proposed by Netscape and achieve secure transmission by constructing a secure channel between the browser and the Web server. It runs above the TCP/IP layer and below the application layer. It provides encrypted data channels for applications. Usually, it involves multiple algorithms, including symmetric and asymmetric algorithms.
▪ AES (Advanced Encryption Standard), also known as Rijndael encryption in cryptography, is a block encryption standard adopted by the US federal government. Among symmetric encryption algorithms, AES has the highest encryption strength.

However, AES is a symmetric encryption algorithm; regardless of the bit width, its security strength is inferior to asymmetric algorithms, like RAS, SM2, ETC. Then, as a business user, you’ll definitely be conceded of the security risk of Chrome Remote Desktop. In that case, you can employ remote access software that adopts an encrypted algorithm with higher security strength. Or you can use some easy ways to improve the security of CRD after setting up Chrome Remote Desktop correctly. 

3 ways to improve Google Chrome Remote Desktop security 

Is Chrome Remote Desktop secure? Surely you have a basic understanding of how safe Chrome Remote Desktop is. Now, you can keep reading and realize the 3 easy and useful ways to make Chrome Remote Desktop more secure. 

Way 1. Use a strong password or enable 2-Step Verification for your Google account

Since you need to log into your Google account before using CRD, the security of the Google account can greatly affect the security of CRD. Thus, you can improve the security of Google account to make your CRD safer by using a strong password and two-factor authentication. A strong password is to make your Google account password complex enough, like a combination of numbers and letters. At the same time, it’s important to change the password regularly. 

To enable 2-Step Verification for your Google account, refer to the steps below:

Step 1. Open the Chrome browser, go to Google account Security interface, and click “2-Step Verification”.

Step 2. In the pop-up window, click “Get Started” and follow the prompts to enable 2-Step Verification.

After setting a strong password and turning on 2-Step Verification for your Google account, its security will be further improved. That means the security of CRD will be improved as well.

Way 2. Set a long & complicated PIN

In the process of setting up Chrome Remote Desktop, you will see a PIN code setting prompt of "at least 6 digits". At this time, you should try to set a longer PIN code to improve security.

When setting up Chrome Remote Desktop PIN, you will have at least 6 numbers prompt; at this point, you should set a longer PIN code to improve security.

If you have set CRD PIN, you can find the connected remote device in the “Remote Device” and click the “pencil” icon to edit the PIN.

Way 3. Connect through VPN

A virtual private network (VPN) uses advanced encryption and tunneling technology to create a secure Internet connection between the user and the network. This means that before remotely accessing your computer, you must first connect to a secure private network, which can protect your computer from network attacks to the greatest extent.

Before using Chrome Remote Desktop, turning on the VPN connection can further improve security and protect your data and information. If you are a business user, it is recommended to use this method to improve security.

Free & safe alternative to CRD for Windows

If you are still worried about the security of using Chrome Remote Desktop, you can try this free & more secure remote access software, AnyViewer. The tool can be applied to multiple Windows operating systems, including Windows Server 2022/2019/2016/2012 R2 and Windows 11/10/8.1/8/7. It adopts ECC (elliptic curve encryption) algorithm, which isn’t inferior to the AES algorithm of CRD and is even stronger. It supports both unattended remote access and attended access. 

Download AnyViewer, install and launch it on both the remote computer and the local computer and see how it works.

Note: To control a computer from iOS or Android device, you can download AnyViewer mobile edition. 

Option 1. One-click unattended remote access via account

Step 1. On the main interface,  go to" Log in", and then click "Sign up" to create an AnyViewer account. (If you already have signed up on its official website, you can log in directly.)

Step 2. Log into the same account on your devices. 

Step 3. On the device where you want to start a remote session, click "Device" and choose the PC that you want to control. Then click "One-click control" and you can access the remote computer. 

Option 2. Access via security code

Step 1. Set a permanent security code for the remote computer. Go to “Settings” >  “Unattended > “Set my security code” and input the permanent security code for the remote computer. Then, click "OK". 

✍ Notes:

• It’s recommended to use a combination of uppercase and lowercase letters and numbers to improve security.
• If you disable "One-click connect to assigned device", this computer won't be able to be accessed via "One-click control".

Step 2. On your local PC, input the device ID of the remote computer and click “Connect”.

Step 3. Then, choose “Input Security Code”, type in the permanent security code of the remote computer, and click “OK” to establish a remote connection.

During the remote session over AnyViewer, you can adjust the resolution and image quality flexibly. What’s more, it’s available to complete corresponding operations by clicking options like “Lock”, Log off, Restart, Task Manager, and so on.

How to disable remote access to a computer over AnyViewer

If you still have security concerns, you can disable remote access to your computer over AnyViewer when you don't need to remotely access your computer. 

Disable unattended remote access 

To disable only unattended remote access, to Settings > Unattended and disable the two options.  Then, go to Settings> Recipient and disable Allow temporary security code. 

Disable attended remote access 

To disable attended remote access, go to Settings> Recipient and disable Allow to accept remote control.

If you have disabled unattended and attended remote access to this computer, it won't be accessed over AnyViewer.

Conclusion

Is Chrome Remote Desktop safe and secure? Considering SSL encrypted communication protocol and AES encryption algorithm is used, it is secure enough for most users. Of course, you can take one or more measures aforementioned to improve the security of CRD. Or you use a CRD alternative, AnyViewer, that used an ECC algorithm to start a remote session.