Skip to content

Guides / 9 min read

Keeping client files safe on a remote Windows machine.

People often assume a remote machine is automatically safer. It can be, because the files stay on the far machine rather than on the device in your bag. But safe is a combination of habits and settings, not a property of a technology. This guide sets out what really protects client data, and what quietly undermines it.

What a remote machine really protects

When a program runs on a far machine, your device receives a picture and sends back clicks and keystrokes. The client's files are opened and edited on the far machine. If your laptop is lost, stolen or compromised, the files are not on it to be taken.

That is a genuine improvement over a laptop full of client folders. It is not a force field, though. Anything you copy out of the session, download or photograph is outside the protection.

Sign-in is the front door

The strongest remote setup is only as safe as the way you get into it. Use a long, unique password in a password manager and turn on a second step wherever it is offered. Avoid shared logins, because they leave you unable to say who did what and unable to remove one person cleanly.

Sign out when you finish, and do not leave a session open on a shared or public computer. Closing the tab ends the picture, but explicit sign-out is the habit that protects you on the day you forget something.

The doors data leaves through

Three routes account for most accidental leaks from remote sessions.

  • The clipboard. Copying from the remote program and pasting into a local document moves the data onto your device in one keystroke.
  • File transfer. Downloading a report to work on it offline puts a copy on your machine, often forgotten in a downloads folder.
  • Screens. Screenshots and photos capture whatever is showing.

Know what your setup allows

Some setups let you turn the clipboard and file transfer off, so data simply cannot cross even by habit. Where your plan includes data controls, you can restrict them to match what your client allows. If you are working under a client's rules, ask yourself which of these doors their contract expects to be closed.

Be honest with yourself about what is technically prevented and what depends on you remembering. A control that is switched off beats one you promise to be careful with.

Habits that quietly help

None of these is exciting. All of them work.

  • Keep client work in the remote session and out of your local folders.
  • Use a separate account or session per client, never a shared one.
  • Clear downloads and temporary files after each piece of work.
  • Lock your own computer when you step away. The session is only as private as your screen.
  • Remove access when an engagement ends, and tell the client you have.

What we do and do not claim

In FarDesktop each session runs in its own Windows account, and your files stay on the far machine instead of your device. We do not claim certifications we do not hold, and we do not promise that data cannot leave if you choose to copy it out. Read your client's requirements, then choose settings that match.

Written with consultants in mind.

Questions people ask.

Are my files on my laptop when I use a remote machine?

Not unless you move them there. The program and its files stay on the far machine. Copying or downloading is what puts them on your device.

Can I stop myself from copying data out?

Where your plan includes data controls, the clipboard and file transfer can be restricted. That is stronger than relying on habit.

Is a remote machine enough for a strict client?

It helps, but strict clients have their own requirements. Share how it works and ask what they need.

The quickest answer is to try your own program.