RDP over SSH — Secure Remote Desktop & SSH Manager
Tunnel Windows Remote Desktop (RDP port 3389) over encrypted SSH port 22. Protect workstations and Linux hosts from brute force attacks, eliminate VPN friction, and unify all RDP and SSH connections in one elegant, free desktop client.
Why Exposing Native RDP is Dangerous
Standard Windows Remote Desktop (port 3389) is target #1 on the public internet. Here is how tunneling RDP through SSH saves your infrastructure.
Constant Brute Force & CVE Exploits
Botnets launch millions of automated NTLM password guesses per day. Unpatched flaws like BlueKeep (CVE-2019-0708) allow remote code execution without authentication.
Encrypted Tunnel via Port 22
Port 3389 is completely blocked to the outside world. Connections are tunneled through an existing, hardened SSH daemon protected by Ed25519 public keys, Fail2ban, and multi-factor auth.
Single Pane for RDP, SSH & SFTP
Eliminate toggling between PuTTY, WinSCP, and Remote Desktop Connection. SSH Desktop manages SSH sessions, RDP port-forwarded tunnels, and cloud servers in one unified dashboard.
How to Tunnel RDP Over SSH (Windows 10 / 11 & Linux)
Follow this tested runbook to tunnel your remote desktop connection through SSH in under 2 minutes.
Create Local SSH Tunnel to Port 3389
From your local machine (Windows PowerShell, macOS Terminal, or Linux terminal), execute SSH with the -L local port forwarding switch. This binds local port 33890 to remote host port 3389 through an encrypted SSH stream:
# Tunnel Windows RDP (port 3389) via remote SSH server (port 22)
ssh -N -L 33890:127.0.0.1:3389 user@remote-windows-host.com
# For Linux Remote Desktop (XRDP on Ubuntu):
ssh -N -L 33890:127.0.0.1:3389 ubuntu@remote-linux-vps.com
Tip: -N tells SSH not to execute a remote command, keeping the tunnel dedicated purely to port forwarding.
Launch Windows Remote Desktop Connection (mstsc.exe)
Press Win + R, type mstsc, and hit Enter. In the computer connection address box, enter:
Click Connect. Enter your Windows login credentials. Your RDP packets are immediately encapsulated within the SSH tunnel, completely bypassing exposed firewalls and NAT barriers.
Automate with SSH Desktop (Zero Manual Commands)
Tired of remembering complex CLI flags? SSH Desktop includes App 20: SSH Port Forwarding & Tunnels. Simply choose your remote host, select "RDP (3389)", and click "Start Tunnel". SSH Desktop maintains the tunnel with auto-reconnect, zero disconnects, and auto-launches your RDP viewer.
RDP & SSH Connection Manager Comparison
Compare SSH Desktop with legacy connection managers and commercial enterprise tools.
| Feature / Capability | SSH Desktop | Devolutions RDM | mRemoteNG | MobaXterm |
|---|---|---|---|---|
| Pricing & Licensing | 100% Free & Open Source | $249.99 / user / yr | Free (Open Source) | $69 / user (Limited Free) |
| RDP over SSH Automation | ✓ 1-Click Visual Tunnels | ✓ Complex Setup | Requires External Plink | ✓ Built-in Tunnels |
| Client-Side Cloud Desktop View | ✓ macOS Sonoma Shell | × None | × None | × None (X11 only) |
| Cross-Platform Support | Win 10/11, macOS, Linux, Web | Windows, Mac | Windows Only | Windows Only |
| Built-in Server Admin Tools | 25 Native GUI Apps | Protocols only | Protocols only | Basic tools |
| Memory Footprint (Idle) | < 85 MB RAM | 600+ MB RAM | 180 MB RAM | 250 MB RAM |
RDP over SSH FAQs
Answers to high-frequency technical questions on RDP tunneling, SSH connection managers, and security.
Can I use RDP over SSH on Windows 10 Home?
Windows 10 Home cannot act as an RDP server (host), but it can act as the client connecting to a remote Windows 10/11 Pro, Enterprise, or Linux XRDP server over SSH without issues. Alternatively, if your remote server is Linux, you don't need RDP at all: simply connect using SSH Remote Desktop with SSH Desktop's client-side GUI.
How does SSH Desktop function as an RDP and SSH manager?
SSH Desktop saves your remote hosts, SSH credentials, key pairs, and tunnel profiles in encrypted client-side storage. You can launch concurrent SSH terminals, initiate background RDP tunnels, browse SFTP file systems, and execute multi-server broadcasts side-by-side without paying for expensive tools like Devolutions RDM.
What is the latency impact of tunneling RDP through SSH?
Because modern CPUs feature hardware-accelerated AES-NI cryptography, SSH encryption overhead is virtually undetectable (typically less than 1 ms added latency). In fact, on lossy internet connections, SSH TCP multiplexing and compression can often make RDP feel more responsive than direct UDP/TCP streams.
What is the difference between RDP over SSH and SSH with Desktop View?
RDP over SSH tunnels the graphical desktop rendered by a Windows host or Linux XRDP server over port 22. In contrast, SSH Desktop's Desktop View renders the entire macOS-style management shell locally on your client machine, communicating with Linux solely via SSH CLI commands. This consumes 0 MB server RAM and requires zero server-side desktop software.
Secure Your Remote Connections Today
Download SSH Desktop for Windows 10/11, macOS, and Linux. Enjoy automated RDP tunneling, tabbed SSH terminals, and dual-pane SFTP in one 100% free app.