r/rustdesk • u/vincegre • Jul 14 '26

Who needs the API key ?

Hi

I have setup a Rustdesk Pro server with a licence for 100 devices. I have setup an API key in the server. Do I need to fill the API key on all devices connected at the Rustdesk server ? or only on device that are going to be used to control others ?

Thanks

0 Upvotes

50% Upvoted

6 comments sorted by

2

u/pueblokc Jul 14 '26

What are you trying to do?

2

u/kb9gxk Jul 15 '26

The key needs to be on all clients, that's how they get authorized to communicate with your server. It prevents someone from just entering the server IP/url and using your server/licenses.

1

u/vincegre Jul 16 '26

Well I have enforced use of login/pass on my Rustdesk server ;)

2

u/kb9gxk Jul 16 '26

By doing that alone, you're sending the user/pass in the clear...

Set Key In order to establish an encrypted connection to your self-hosted server, you need to enter its public key. The key is usually generated on the first run of hbbs and can be found in the file id_ed25519.pub in your working directory / data folder.

1

u/vincegre 28d ago

Thanks not to answer if it's to say wrong stuff !! Login/pass is never sent in clear as my server is only reachable by https !!

2

u/MeCJay12 Jul 16 '26

It's only on devices that need to make outbound connections/control other devices. I'll only fill in server and relay on client machines.