RDP and VNC desktops, in a tab next to your SSH sessions.

01  /  add a desktop

Add a desktop like any host.

New host types sit next to SSH, Telnet and Serial: RDP (port 3389) and VNC (port 5900). Pick how to reach it and it opens in a tab.

• ▸Direct, from this computer, to an address the app can reach; or through a Connector to a machine on a private network — an empty address means the Connector’s own machine.
• ▸Credentials like SSH. For RDP: a Windows user, password and optional domain. Authentication is a local account or NTLM (DOMAIN\user); Kerberos is not supported. For VNC: the VNC password.
• ▸Remember password per host, the same switch SSH uses — kept in your end-to-end encrypted vault, never the clear text.

02  /  on a Mac

An RDP client for Mac that gets the keyboard right.

Opening a Windows desktop from a Mac usually means relearning the keyboard. Termalin maps it for you:

• ▸⌘ is the Windows key, for Start and the Windows shortcuts.
• ▸⌘C / ⌘V / ⌘X / ⌘Z / ⌘A / ⌘S / ⌘F arrive as Ctrl on Windows, so copy, paste and the rest work as your fingers expect.
• ▸Cmd as Ctrl — a per-host switch that sends every ⌘ as Ctrl, if that suits you better.

03  /  in the tab

Clipboard both ways, Ctrl+Alt+Del, fit or actual size.

The desktop fills a tab like a terminal session, with a toolbar and a status line.

• ▸Clipboard both ways. Text you copy on the desktop lands in your local clipboard, and your local text is offered to the desktop. A per-host switch turns the sync off.
• ▸Mouse, wheel and keyboard, Send Ctrl+Alt+Del, and fit to window or actual size (1:1 with scrollbars).
• ▸Many at once — each desktop is its own tab, alongside your SSH sessions.

04  /  certificate first

The certificate is checked before the password is sent.

On the first RDP connection the app pins the desktop’s TLS certificate — and checks it before any password is sent, so a swapped server never gets your credentials. The fingerprint (SHA-256) shows in the status line. If it changes later, the connection stops and a dialog shows both the old and the new fingerprint with a Trust the new certificate button; nothing reconnects until you decide.

05  /  behind a firewall

Behind NAT or a firewall? Reach it through a Connector.

If the desktop has no address you can dial, install a Termalin Connector on that machine or on another box on its network. The app then reaches the desktop over the Connector — termal.in only passes bytes, while the app runs the TLS/RDP handshake itself end to end. This path uses the hosted relay, so it needs Pro or Team: up to 4 desktops open at once on Pro, 10 on Team. RDP without port forwarding →

06  /  or the browser

Prefer nothing to install? Use the browser.

The same desktops open in the web cabinet at termal.in/account — an RDP or VNC desktop in a browser tab, with nothing to install on the machine you’re browsing from. A desktop saved in the app shows up there too, filled in and one click from open.

07  /  honestly

What it doesn’t do (yet).

It is a clean, fast RDP/VNC viewer, not a full enterprise RDP stack:

• ▸No multi-monitor, no audio, no drive or file redirection, no printing.
• ▸No RD Gateway and no Kerberos — use a local account or NTLM.
• ▸VNC uses a VNC password or no authentication only — no VeNCrypt/TLS, no RealVNC cloud sign-in, no Apple authentication.
• ▸On the desktop app (Windows, macOS, Linux) and the web cabinet. Remote desktops are not on the phone apps.