TeamViewer includes encryption based on 2048 RSA private-/public key exchange and AES (256 bit) session encryption. This technology is based on the same standards as https/SSL and meets today's standards for security. The key exchange also guarantees full, client-to-client data protection. This means that even our routing servers are not able to read the data stream.
All program files are secured using VeriSign code signing technology. This allows you to verify the origin of the executables you have received.
In addition to the Partner ID, TeamViewer generates a session password that changes with every software start in order to provide additional security against unauthorized access to a remote system. Security relevant functions like file transfer require additional, manual confirmation from the remote partner. Also, it is not possible to invisibly control a computer. For data protection reasons, the person sitting at the remote computer has to be able to detect when someone is accessing the machine.
TeamViewer assists companies with their HIPAA and PCI compliance requirements. Two-factor authentication adds an additional security layer to protect TeamViewer accounts from unauthorized access. In combination with access control through white listing, TeamViewer assists you in getting HIPAA and PCI ready. With two-factor authentication, a code generated on a mobile device is needed, in addition to username and password, in order to sign in to a TeamViewer account. The code is generated via the time-based one-time password (TOTP) algorithm. The TOTP code is protected by SRP and is thus perfectly safe from man in the middle attacks.