One-click RDP through a secure tunnel.

No terminals. No config files. Add your server, click connect, and your remote desktop appears.

How it works

Four steps. No terminal required.

  1. 01

    Add your server

    Enter hostname, username, password. Encrypted and stored locally.

  2. 02

    Click connect

    The secure tunnel is created automatically. No command line needed.

  3. 03

    View your desktop

    Your remote desktop appears in the app with full keyboard, mouse and fullscreen.

  4. 04

    Click Back

    A clean disconnect tears down the session. Esc stays yours: it goes to the remote desktop.

Before you start

What you need

  • ✓

    Zero Trust access. Your IT team sets this up and adds you to the access policy.

  • ✓

    A remote Windows machine with RDP enabled. Go to System Settings → Remote Desktop → Enable, and note the hostname.

  • ✓

    Your Windows login. The username and password you use on the remote machine.

That's it. The tunnel client and the RDP engine are bundled inside TunnelGate. Nothing else to install.

Setup

Running in five minutes

  1. 1

    Get TunnelGate

    Get the installer for your platform from your IT team.

  2. 2

    Install and sign in

    Open TunnelGate and sign in with your HRMS credentials. This checks you against your company's access policy.

  3. 3

    Add your server

    Click "Add Tunnel" and enter the hostname, your Windows username and password. Give it a friendly name.

  4. 4

    Connect

    TunnelGate creates a secure tunnel, authenticates, and opens your remote desktop in one click.

Under the hood

Your IT team stays in control

Every connection goes through a Zero Trust tunnel. Access is gated by HRMS login and can be limited to approved office WiFi networks. Traffic is encrypted end to end.

Credentials never leave your machine. Passwords are encrypted with the OS keychain and sent only to the remote server during RDP authentication.

Features

Everything you need. Nothing you don't.

  • Built-in RDP viewer

    FreeRDP 3 renders your remote desktop right inside the app — full keyboard, mouse, wheel and fullscreen.

  • Nothing to install

    The secure tunnel and the RDP engine ship inside TunnelGate. One app, no dependencies, no PATH setup.

  • Copy / paste that works

    Text clipboard syncs both ways between your machine and the remote session — the same as your usual RDP client.

  • Zero Trust routing

    Every connection goes through a Zero Trust tunnel. Your IT team controls who connects and from where.

  • Dynamic resolution

    Matches your display. Fullscreen adapts to your screen's native aspect ratio — even 3:2 and 16:10 touchscreens.

  • Auto-reconnect

    Survives network blips with exponential backoff. Your session stays alive through WiFi switches and brief dropouts.

  • Encrypted credentials

    Passwords stored with OS-level encryption — DPAPI on Windows, Keychain on macOS, libsecret on Linux. Never plaintext.

  • WiFi-gated access

    Optionally restrict connections to approved office networks. HRMS-managed whitelist, enforced at connect time.

FAQ

Common questions

What does TunnelGate actually do?

It combines a secure tunnel and a built-in RDP viewer in one app. You add your server details once, click connect, and your remote desktop appears — no terminal commands.

Do I need a tunnel client or RDP client installed separately?

No. The tunnel client and the FreeRDP 3 engine ship inside the app and are updated with it.

Does copy and paste work?

Yes — text copies both directions between your computer and the remote session, automatically, like your usual RDP client. Files, printers and audio are not redirected.

How do I disconnect?

Click the "← Back" button in the session toolbar. Esc is not a disconnect key — it goes to the remote desktop, or exits fullscreen when you are fullscreen.

How are my credentials stored?

Passwords are encrypted at rest using your operating system's built-in keychain — DPAPI on Windows, Keychain on macOS, libsecret on Linux. They're never logged or sent anywhere except the remote server during authentication.

Which platforms are supported?

Windows (x64), macOS (Apple Silicon), and Linux (x64).

What happens if my connection drops?

TunnelGate reconnects automatically with exponential backoff. Your session state is preserved and the viewer resumes when the connection comes back.

Can I use my own RDP client instead?

Yes. Every tunnel has an "Open Native Client" button that launches mstsc on Windows, Microsoft Remote Desktop on macOS, or xfreerdp on Linux — with your credentials pre-filled.

How do I get TunnelGate?

Ask your IT team for the installer for your platform. You need Zero Trust access to be set up for you and a remote machine that allows RDP.

Ready to connect?

Add your server and connect in one click.

Setup guide