Every connection is protected by two layers of security. First, you sign in with your account to access your devices. Then, each PC is protected by its own Security Code, which is generated and stored locally on that machine. It never leaves your PC and is never stored on our servers. You'll be asked to enter the Security Code when connecting to a PC, providing an additional layer of protection even if your account credentials are compromised. On the wire, sessions are end-to-end encrypted with DTLS/WSS transport, a SPAKE2 key exchange and AES-256-GCM payload encryption.