Skip to main content

How to keep unattended access secure

Learn how to protect your devices and boost security using blocklists, two-factor authentication, and other best practices.

Manage systems and machines
Insights overview

No doubt about it — unattended access is a powerful feature. You can use it to connect remotely to devices without relying on someone physically present to accept the connection request. However, while it’s a game-changer when it comes to remote work, it also brings considerable security risks.

Whether you’re managing servers, overseeing kiosks worldwide, or accessing your home desktop computer, ensuring secure unattended access is crucial. This article aims to outline some TeamViewer best practices to help you do just that.

Best practices for secure unattended access

Illustration: Unattended devices

1. Only use random passwords for attended machines

Random passwords are super useful for attended machines that sometimes require remote support. On the contrary, for unattended devices, random passwords can become a security risk.

To disable random passwords, go to Options > Security > Random password (for spontaneous access) and select Disabled (no random password).

2. Eliminate personal passwords for host devices

If the device you’re connecting to is assigned to a TeamViewer account or group, eliminate personal passwords (this link shows you how). Anyone, who knows the personal password, can potentially access the device.

Consider using Easy Access (explained below) instead of personal passwords. Check the setting under Options > Advanced > Personal password.

3. Enable Easy Access: A more secure approach

Enable Easy Access on a device assigned to your TeamViewer account. With Easy Access, no random or personal password is required. You only need to be logged in to your TeamViewer account. Two-factor authentication (2FA) enhances security significantly.

Set up Easy Access by following these steps:

  1. Open TeamViewer (Classic).
  2. Go to the Remote Control tab.
  3. Click Grant easy access.
  4. Enter your TeamViewer account credentials.
  5. Click Assign.

Important note: This procedure must be done on the remote device.

Example: If you want to remote control Device B from Device A, Easy Access must be set up on Device B.

Read more: How to set up Easy Access

4. Use allowlist and blocklist

Illustration: Allowlist and blocklist

Use the allowlist and blocklist features to control who can connect to your devices.

Blocklist:

  • Add TeamViewer accounts or device IDs that should be blocked from making connections
  • Useful for preventing malicious connection attempts
  • Block public-facing devices beyond your firewall

Allowlist:

  • Only allow TeamViewer accounts and device IDs added to the allowlist
  • Ideal for granting remote access to specific individuals or groups
  • Configure your lists under Extras > Options > Security > Block and allowlist > Configure

Read more about block and allowlist in the Knowledge Base.

5. Use two-factor authentication (2FA) at connection level

Illustration: Approving notifications

2FA provides visibility and approval power for every connection attempt.

When someone tries to connect to a secured device:

  • You receive a push notification on your phone
  • The notification includes the device ID attempting the connection
  • You can approve or deny the request
  • Use 2FA for devices with limited connections or those only accessed by you

Learn more about activating TFA for connections in our TeamViewer Community article.