TLS Encrypted Connection

Every keystroke and mouse event stays private — even on a shared network

Every session is protected by TLS with a self-signed certificate. Your keystrokes and mouse events stay private — even on a shared LAN.

When you move your mouse or type on a keyboard, those events are transmitted over the local network to the target machine. Without encryption, anyone on the same network could theoretically intercept and replay those events — including typed passwords. HelloControlDesk eliminates this risk by wrapping all KVM traffic in a TLS-encrypted channel.

The encryption uses a self-signed certificate generated locally by the application. There is no dependency on a third-party certificate authority, and no sensitive data leaves your local network. The TLS handshake ensures both confidentiality and integrity of every packet exchanged between server and client.

This is particularly important in shared environments: office networks, co-working spaces, or home networks with multiple users. Even if someone runs a packet sniffer on the same subnet, they will only see encrypted traffic. Combined with token authentication, HelloControlDesk gives you enterprise-grade security for your local KVM setup.

How it works

1
The application generates a self-signed certificate locally. No external certificate authority is involved and nothing is requested from the internet.
2
When a client connects, server and client perform a TLS handshake and establish an encrypted channel between them.
3
Keystrokes, mouse movements and clipboard content then travel inside that channel, on your local network only.
4
The session itself is authenticated with your licence token, so encryption and authentication apply together.

When it is useful

Co-working space or shared office Wi-Fi

Other people use the same network. Your keyboard input, including anything you type into a password field, is not readable by another device on the subnet.

Work laptop on the home network

What you type on the company machine crosses your home Wi-Fi encrypted, the same way it would on a wired office network.

Development and test machines holding credentials

API keys or passwords you copy from one machine and paste on another travel through the shared clipboard, inside the TLS channel.

Limits and requirements

Encryption covers the KVM traffic between your machines. It does not extend the connection beyond your local network: HelloControlDesk does not work over the internet.
The certificate is self-signed and generated by the application. No external certificate authority is used.
Server and client run on macOS and Windows, over Wi-Fi or Ethernet.
TLS and token authentication are included in both plans; they are not paid options.

Frequently asked questions

What exactly is encrypted?

All KVM traffic between the server and the client: keystrokes, mouse movements and the shared clipboard. Nothing travels in clear text on the local network.

Which certificate is used?

A self-signed certificate generated by the application. There is no dependency on an external certificate authority, and nothing leaves your local network.

Does encryption go through the cloud?

No. HelloControlDesk only works between machines on the same local network, over Wi-Fi or Ethernet. The encrypted traffic never goes through the internet.

Is encryption optional?

No. All KVM traffic is encrypted with TLS; it is part of every plan and is not an option to switch on.

Does any data leave my network?

No. KVM traffic stays between your machines on the local network. The desktop application does not send keyboard or mouse data to HelloControlDesk's servers.

Ready to try HelloControlDesk?

Set up your software KVM in under 5 minutes. No hardware required.

Get started