Connect to a machine from anywhere. You are in control.
Reach your computer remotely from anywhere: from the Windows or Linux app on a desktop, the Android app on your phone, or a browser with nothing to install. You see the remote desktop on your own screen and use it with mouse and keyboard; two-way file transfer and a shared clipboard come in the same session. Encrypted end to end and works behind NAT; the servers sit in the ELPO data centre, so your session data never leaves it. macOS app coming soon.
Download and open
Open the app on the other machine. Your ID and password are ready in seconds.
Enter the ID
Type the ID of the machine you want, then press Connect.
Use it
The remote desktop is in front of you — take control, move files.
Everything a support session needs
Simple, fast and secure remote access for support, field service and system administration.
Nothing to install on the connecting side
The person giving support installs nothing. Opening skyydesk.com in a browser and typing the ID is enough — Chrome, Edge, Firefox, Safari. No administrator rights, no plugin, no Java, no ActiveX; it works from corporate machines where installing is not allowed. Anyone who wants the desktop app can install it, and then it runs faster with hardware acceleration.
Remote desktop
See the other desktop at full resolution on your own screen. Full control with mouse, keyboard and touch. Hardware-accelerated H264/H265/VP9 encoding keeps it smooth at 60 fps. Multi-monitor — each screen in its own window, switch between them.
File transfer
Move files both ways by drag and drop. Browse remote folders in the built-in manager, select several files and transfer them together. Folder structure and timestamps are preserved. Over a P2P link the transfer runs at full bandwidth.
Clipboard sharing
Copy and paste text, images and files between the two machines. Anything on your local clipboard is ready to paste on the remote one. Continuous, encrypted clipboard sync.
Access behind NAT
UDP hole punching reaches devices behind NAT with no router configuration. The firewall type does not matter. If a direct P2P link cannot be made, a TCP relay takes over automatically — nothing for you to do.
Your own server
The ID (hbbs) and relay (hbbr) servers sit in the ELPO data centre bare-metal runs there. Your session data never leaves the company. The relay only forwards encrypted bytes — it cannot decode, read or store them.
Every platform
Native apps for Windows 10/11 (64-bit), Linux (Debian/Ubuntu) and Android 5.1+. macOS is close. You can also connect from any browser with the web client and no install at all — Chrome, Edge, Firefox, Safari.
Connect to your computer from the desktop app, the browser or your phone
Same ID, same password. From the app at the office, from a browser on another computer, from your phone on the road.
macOS app coming soon. The iPhone and iPad app is on the App Store (connecting side).
Who connected to which machine, and when: all in one panel
You sign in at skyydesk.com/panel with your account. The screenshots are from the real panel, with people's names hidden.
The organisation sets the access rules
Managed from the panel's Settings screen. Logs are kept for 30 days on Standard and 90 days on Ultimate.
Two-factor authentication
A second step for the account (TOTP). Can be made mandatory across the organisation. Included in both licences.
Account-only connections Ultimate
The device password is turned off. Everyone connects with their own account, so every connection is tied to a person.
Corporate sign-in (SSO) Ultimate
Staff sign in with the organisation's own identity provider (OIDC).
LDAP / Active Directory Ultimate
Accounts are synced from the organisation's own directory.
Session recording Ultimate
The session video is stored centrally and every recording is sealed with SHA-256. If the organisation makes it mandatory, users cannot turn it off.
SIEM export Ultimate
Connection, file, sign-in and admin logs flow to the organisation's own SIEM as CEF or JSON.
Connector Ultimate
Runs on the organisation's server in a closed network. It only connects outwards and opens no ports.
Automatic updates
Automatic, scheduled in a maintenance window, or manual. Windows only for now.
How SkyyDesk works
in the ELPO data centre bare-metal infrastructure. Low latency, high security.
Video codec
VP8 / VP9 / AV1 in software. H264 / H265 hardware accelerated (NVENC, QuickSync, AMF). Adaptive bitrate, 4:4:4 colour, 60 fps.
Encryption
NaCl / libsodium. XSalsa20-Poly1305 symmetric encryption with Curve25519 key exchange. A fresh key for every session.
Network protocol
Direct P2P via UDP hole punching, with a TCP relay fallback. TCP 21115-21119, UDP 21116. IPv4 and IPv6.
Server architecture
hbbs (ID/rendezvous) plus hbbr (relay). Debian 12, systemd, in the ELPO data centre. A bare-metal native install.
Authentication
The Ed25519 public key is embedded in the client, guarding against server spoofing. Permanent or one-time passwords.
Session management
Several sessions at once. Service mode (systemd) for permanent access. Session lock, image quality and FPS settings.
Where it helps
Whenever someone needs help — one click, no setup.
Control from your pocket
Control your computers from your phone, wherever you are. The machines at the office and at home are as close as your phone: connect with the Android app, watch the screen live, use the mouse and keyboard, and fix problems on the go.
Connect from your phoneTechnical support
Connect straight to the customer screen and fix the problem yourself. No more describing steps over the phone.
Remote support with nothing to installField service
Reach a POS terminal, kiosk or PC in the field from the office. Update software, change configuration and troubleshoot without a site visit.
Servers and remote offices
Manage branches and servers centrally. Reachable even behind NAT and firewalls. Service mode keeps access available.
Resellers and partners
White-label distribution under your own brand. Licensing and authorisation from the ELPO panel. Reseller and MSP pricing available.
Connect from inside your own software
Reach your customer's machine from inside your own product. No second program to open, no second account to hand out.
Into your desktop software
Your program opens one address and the session starts in the installed client. If it is not installed the OS ignores the address, and you show the download link.
skyydesk://connect/123456789
Into your web interface
The session opens in a frame inside your page. Your page is told when it connects, when it ends and when it fails, so you can show status in your own interface.
SkyyDesk.open({ container: '#panel', id })
Into your backend
Which machines are online, who connected when and for how long - ask from your own backend without opening any interface. Billing and reporting stay with you.
GET /api/v1/devices
What you can change
Changes: product name, logo, colours, greeting and error text, support link, server endpoints, the name of the downloaded installer.
Does not change: the icon and version information embedded in the executable. We ship one build - we are not opening fifty signing certificates and fifty update channels for fifty partners. We say so up front.
Server-supplied branding and partner API keys are still in development. The three integration paths above work today.
Common questions
The questions we are asked most, answered.
Is it SkyyDesk or SkyDesk?
Do I need to install anything?
Is it free?
Is it secure, and where does my data go?
Does it work behind a modem or NAT?
Which platforms are supported?
Can I connect to my computer from my phone?
Can I connect when nobody is at the other machine?
Is there a charge per machine?
Can two people connect to the same machine at once?
Can I send and receive files?
Can we open a session from inside our own software?
End-to-end encrypted, on your own infrastructure
NaCl/libsodium — XSalsa20-Poly1305 symmetric, Curve25519 key exchange. A separate key per session. The relay carries encrypted bytes and cannot reach the content.
End-to-end encryption
All session data is protected by the NaCl cryptography library. Encryption keys live only at the endpoints.
Server authentication
The Ed25519 public key is embedded in the client, which protects against server spoofing.
Even the relay cannot read it
When a P2P link cannot be made the relay steps in — it forwards encrypted bytes and cannot read the content.
Self-hosted infrastructure
The hbbs and hbbr servers run in the ELPO data centre. No session data goes to a third party.
Password and one-time code
A permanent password or a one-time access code. Every connection is authorised separately.
Access control and logging
Who connected to which device, and when, is recorded. Connection history is visible from the panel.
We send the logs to you
You enter your organisation's SIEM address in the panel, and our server streams the logs there (CEF or JSON, over TLS). If your collector can be reached from outside, this is the shortest route.
You pull them from your own network
In closed networks the connector runs on your server: it only connects outwards, opens no ports and resumes where it left off. Your SIEM can also pull directly — no software in between is required.
All four streams are exported: connections · file transfers · sign-ins · permission and policy changes.
You don't need an account to try it — type the ID and connect.
Connect Now