Tutorials
Open Kepeink Remote Desktop
Use your machine's screen, keyboard, and mouse from a private browser session.
Kepeink Remote Desktop gives you browser access to a desktop through your tunnel. Choose desktop to let the single agent executable host the desktop, or point it at an existing VNC server.
Native desktop hosting requires agent v2.5.60 or newer. The existing VNC target remains an option.
Before you start
For the native desktop target, run the agent in the desktop session you want to share:
| Platform | Setup |
|---|---|
| Windows | Sign in and run the agent as that user. A Windows service runs in Session 0 and cannot share your interactive desktop. |
| macOS | Grant the agent Screen Recording and Accessibility access in System Settings → Privacy & Security. |
| Linux with X11 | Run the agent from your active X11 desktop session. |
| Linux with Wayland | Use an existing desktop server and its host:port target instead. |
1. Create the tunnel
In the dashboard, create a tunnel with Backend mode: Remote Desktop. Leave Desktop source: Local desktop (built in) selected. Copy its kpt_… agent token and keep it private.
Picking Remote Desktop opens a Basic auth section in the create form. Enter a username and password there, and the dashboard adds that user as soon as it creates the tunnel. This is strongly recommended: without it, anyone with the URL can view and control the desktop. You can also add or change users later in the tunnel's Basic auth settings.
If you continue without a user, the dashboard warns you twice before it creates an unprotected desktop. The management API needs the same explicit choice (agent_config.public_access_acknowledged). Agents up to v2.5.63 do not support unprotected desktops and keep the desktop unavailable until Basic auth has a user.
2. Run the agent
Run agent v2.5.60 or newer in your desktop session. The foreground bootstrap on Linux or macOS is:
curl -fsSL https://cdn.kepeink.hu/run.sh | sh -s -- --token=kpt_xxxxxxxxOn Windows, use PowerShell from the logged-in user's desktop:
Invoke-WebRequest -UseBasicParsing https://cdn.kepeink.hu/run.ps1 -OutFile .\kepeink-run.ps1
.\kepeink-run.ps1 -Token kpt_xxxxxxxxKeep the agent running while you use the desktop. Native hosting does not need a separate VNC server.
3. Check the URL
Open the assigned HTTPS URL on another device and sign in with the Basic auth user you added. Check that the screen is visible and that keyboard and mouse input reach the desktop.
The viewer has fullscreen, fit-to-window and 1:1 sizing, view-only mode, keyboard shortcuts, clipboard typing, screenshots, and reconnect controls. If the screen is unavailable, check the agent's desktop session and the platform permissions above.
Use an existing VNC server
Choose Desktop source: External desktop server and enter a host:port the agent can reach, such as 127.0.0.1:5900. This also covers a Wayland desktop served by an external desktop server. After the tunnel login, enter the server's own VNC credentials if it asks. Keep Basic auth enabled on the tunnel for either target.