Your screen.
Your permission.

SNDESKWM 2.4.3 is an original C# Windows remote-support preview by Alicesoft Private Limited.

During a session

Share the current computer ID and six-digit code privately with someone you trust. New users start with incoming approval enabled. Existing saved preferences are preserved. The host can allow remote control, allow view only or decline. Disabling approval allows someone with the correct current details to connect automatically.

A visible sharing window offers Stop. Closing SNDESKWM ends access. The app does not install an unattended service. The receiver chooses a destination or a destination folder for an explicit Receive request. The host display and image-quality choices lock during a session.

Optional fixed password and saved computers

The host may set a separate fixed connection password of 12–128 characters. SRP authentication sends proofs rather than the plaintext password to the relay. The existing host approval choice still applies; no unattended service is added. The fixed password is protected using Windows CurrentUser DPAPI. A connecting user can choose Remember; the ID and fixed password are saved locally with DPAPI only after authentication and session approval succeed. Failed attempts and temporary codes are not saved. Forget removes the local saved connection. Disabling a host fixed password makes old saved passwords fail.

Temporary Azure file transfers

Files up to 10 GB are encrypted in chunks on the sending computer. Encryption keys and private file names are delivered through the encrypted peer session, rather than stored with the Azure file. The receiving app saves transfer keys in its local DPAPI-protected inbox. Azure stores encrypted bytes, random transfer IDs, pseudonymous device fingerprints, lengths, expiry and transfer state. Download verifies chunk authentication and the whole-file hash, saves the file locally and then acknowledges deletion. If deletion cannot be confirmed, the app offers retry. Incomplete or failed downloads do not acknowledge deletion.

Azure access expires after 24 hours. Background cleanup and lifecycle rules remove expired copies; physical cleanup may run later. The dedicated temporary account has no public containers, soft-delete retention or blob versioning. An approved connected peer session is required. The deployed relay still applies sender enrollment and pilot quotas. Removing those limits is pending a later relay restart; the 10 GiB file limit and recipient authorization remain. Storage and bandwidth charges apply to the operator. Closing or ending a session during upload can stop it; received offers can be collected later on the same Windows profile. Forgetting a local inbox entry does not itself delete the Azure copy; use Delete Azure copy or allow expiry.

Clipboard and computer identity

Clipboard transfer is explicit, encrypted plain text up to 64 KiB, with separate approval on the sharing computer for every request. It is unavailable in view-only sessions and is not automatic synchronization. Clipboard text can contain sensitive information; approve only transfers you intend.

A randomly generated identity is protected using Windows DPAPI on this Windows profile. The relay receives the identity over TLS to derive the same routing ID with its persistent secret. No hardware serial number is sent. Connection codes still rotate. Clearing the profile identity, moving to another Windows account or replacing the relay identity secret changes the routing ID. The ID alone does not authorize a session.

Data and the relay

The app uses SRP-6a authentication and directional AES-256-GCM payload encryption. The Azure relay transports encrypted screen, input and file payloads; it does not receive the plaintext connection code. Network and connection metadata are processed to route sessions. There is no cloud screen recording or cloud file archive in this app.

The optional diagnostics report is saved locally and excludes IDs, codes, keys and screen/file contents. This website does not ask for your connection code. The app saves the approval preference in LocalAppData/SNDESK.

Preview limits

The custom protocol has not received an independent security audit. Local synthetic tests passed. Real two-computer display/input use, installation, upgrades, multiple display configurations and assistive-technology compatibility still need interactive testing. Downloads are unsigned. No audio, remote printing, automatic clipboard synchronization, recording, remote command shell, unattended service or secure-desktop/elevated control is included. The Free Azure relay is suitable for a small pilot and may cold start or reach its hosting limits.

Only use SNDESKWM with permission. Contact the Alicesoft representative who supplied the app for support.

Updated 24 October 2026.

Mac preview

The Mac preview stores device identity, fixed passwords, remembered connections and Azure download keys in the current macOS user’s login Keychain. It asks for host approval on every incoming session. Screen sharing requires macOS Screen Recording permission; input additionally requires Accessibility permission. Capture uses Apple’s screencapture utility and temporarily writes a frame in a private directory, deleting it after reading. A crash can interrupt cleanup. No Apple Developer-ID signing, notarization, independent audit or real Mac compatibility validation has been completed.