How to Use Remote Desktop When You're Away From Home

You're sat in a café, or stuck at an airport gate, and you suddenly need a file that's sitting on your home PC. The good news is you can get to it. The slightly annoying news is that the obvious method, opening up Remote Desktop Protocol (RDP) directly to the internet, is also one of the easiest ways to get your home network broken into. This guide covers how to access remote desktop outside your home network properly, using a VPN or a cloud-based app instead of a wide-open port, so you can grab that file without inviting trouble.

This takes about 20 to 40 minutes to set up the first time, depending on which method you choose. After that, connecting takes seconds.

What You'll Need

• A Windows PC at home with Remote Desktop enabled (or any PC, if you're using a cloud-based tool)
• A router you can access the admin settings for
• A free Tailscale account, or a VPN already set up on your router
• The Remote Desktop app or a cloud tool like Chrome Remote Desktop installed on both devices
• About half an hour of uninterrupted time

Step 1: Understand Why Raw RDP Is a Bad Idea

Before you do anything, it helps to know why "just forward port 3389" is the wrong answer, even though it's the first thing many guides suggest.

Remote Desktop Protocol was built for local networks, not the open internet. When you forward RDP's port straight to your home PC, you're putting a login screen in front of anyone scanning the internet, and plenty of bots do exactly that all day. Weak passwords, unpatched Windows versions and known RDP vulnerabilities have led to a steady stream of ransomware attacks that started with exactly this setup.

The fix isn't complicated. Instead of exposing RDP itself, you put a private tunnel between your device and your home network first, then run Remote Desktop inside that tunnel where nobody else can see it. That's what a VPN or a tool like Tailscale does, the same approach used for Home Assistant remote access without port forwarding.

If you want a wider comparison of ways to reach your home network, it's worth reading Best Way to Access Your Home Network Remotely, Compared before committing to one approach.

Step 2: Choose Your Tunnel: VPN or Tailscale

You've got two solid options here, and both avoid the open-port problem.

Option A: Your router's built-in VPN. Many modern routers (ASUS, TP-Link/Omada, UniFi) support WireGuard, a fast and modern VPN protocol. You set it up once on the router, install the WireGuard app on your phone or laptop, and connect to your home network as if you were sitting on your own sofa.

• If you've got an ASUS router, see How to Set Up a WireGuard VPN Server on an ASUS Router
• For TP-Link or Omada gear, check How to Set Up WireGuard on TP-Link and Omada Routers
• UniFi and Ubiquiti owners should look at How to Set Up WireGuard on UniFi and Ubiquiti Gear

If you get given a WireGuard config file and aren't sure what each line means, WireGuard Config Files Explained, With Examples breaks it down in plain English.

Option B: Tailscale. If router-level VPN setup sounds like more than you fancy, Tailscale is a simpler alternative. It installs as an app on your home PC and on your phone or laptop, creates a private mesh network between them, and needs no port forwarding at all. For most casual users this is the quicker route.

Some VPN providers offer similar mesh features too. NordVPN's Meshnet, for example, can link your devices directly; see Can NordVPN Access Your Home Network? Meshnet Explained if you already pay for NordVPN and want to try that instead.

Pick one of these two options before moving on. You don't need both.

Step 3: Set Up the Tunnel

If you're going the router VPN route:

1. Log into your router's admin panel (usually by typing its IP address into a browser).
2. Find the VPN server section and enable WireGuard.
3. Generate a client config or QR code for your phone or laptop.
4. Install the WireGuard app on that device and scan or import the config.
5. Test the connection before you leave the house. Turn on mobile data, disconnect from home Wi-Fi, and confirm you can reach the VPN.

If you're going the Tailscale route:

1. Create a free Tailscale account.
2. Install Tailscale on your home PC (the one with Remote Desktop) and sign in.
3. Install Tailscale on your phone or laptop too, using the same account.
4. Both devices now appear on your private Tailscale network with their own stable addresses.
5. Test it by pinging the home PC's Tailscale address from your other device while off your home Wi-Fi.

Either way, confirm the tunnel works reliably before you rely on it somewhere without easy access to your router.

Step 4: Turn On Remote Desktop at Home

With the tunnel sorted, enable Remote Desktop itself on the PC you want to control.

1. On the home PC, go to Settings > System > Remote Desktop.
2. Toggle Remote Desktop on.
3. Make a note of the PC's name, or use the Tailscale/VPN IP address instead.
4. Check that the Windows account you'll log in with has a proper password. Blank passwords and Remote Desktop don't mix well.
5. If prompted, allow Remote Desktop through Windows Firewall, but only for your private network profile, not the public one.

Remote Desktop itself hasn't changed here. If you haven't set up remote desktop on your home network yet, the process is the same; it's only reachable through the tunnel you built in Step 3, which is the whole point. Bear in mind that Windows 11 Home has limitations on incoming connections, so you may need Windows Pro or a cloud tool like Chrome Remote Desktop instead.

Step 5: Connect From Outside Your Home Network

Now for the part you've been waiting for.

1. Connect your laptop or phone to the VPN or Tailscale first, wherever you are.
2. Open the Remote Desktop app (built into Windows, or the Microsoft Remote Desktop app on Mac, iOS and Android).
3. Enter the home PC's name or its VPN/Tailscale IP address.
4. Sign in with the Windows account credentials.
5. You should see your home desktop appear, exactly as you left it.

This answers the common question of whether remote desktop works from anywhere: yes, as long as the tunnel is up and the home PC is switched on and connected to the internet. No tunnel, no connection, by design.

Step 6: Try a Cloud-Based Alternative for Simplicity

If setting up a VPN sounds like more hassle than you want, cloud-based remote access tools do a similar job with far less configuration.

Chrome Remote Desktop is free and works through your Google account. Install the Chrome extension on the home PC, set up a PIN, and you can then reach that PC from any browser signed into the same Google account, anywhere with internet access. Yes, Chrome Remote Desktop does work away from home, which is exactly why people like it. There's no port forwarding and no VPN needed, because Google's servers handle the connection for you.

Other similar tools include AnyDesk and TeamViewer, which work in much the same way: install an app on the host PC, connect from another device using an ID and password.

The trade-off is that you're trusting a third-party company's servers to broker the connection, rather than keeping everything inside your own network. For most casual use (grabbing a file, checking something, helping a relative with their computer) that trade-off is perfectly reasonable. For more sensitive setups, the VPN or Tailscale approach keeps things entirely under your control.

If you're still deciding which approach suits you, How to Access Your Home Network Remotely: A Beginner's Guide walks through the basics in more depth.

Common Mistakes to Avoid

• Forwarding port 3389 directly to your PC. This is the single biggest RDP mistake and the one that leads to most horror stories.
• Using a weak or blank Windows password. Your tunnel protects the front door, but a weak password is a flimsy lock once someone's inside.
• Forgetting to test the connection before leaving home. Always check your VPN or Tailscale link works away from your home Wi-Fi before you actually need it.
• Leaving the home PC asleep. Remote Desktop can't wake a sleeping PC on its own in most setups, so check your power settings.
• Assuming cloud tools are set-and-forget. Keep Chrome Remote Desktop, AnyDesk or TeamViewer updated, and use a strong PIN or password on them too.

Conclusion

Learning how to access remote desktop outside your home network doesn't have to mean opening a risky port to the world. A VPN or Tailscale tunnel keeps Remote Desktop private while still letting you reach your PC from a café, an airport, or another country. If that setup feels like too much right now, cloud tools like Chrome Remote Desktop get you a similar result in minutes, with less control but a lot less fuss. Either way, you'll have a reliable way to remote into your PC from home whenever you need it, without leaving the door wide open for everyone else.

FAQ

Can I use Remote Desktop away from home?

Yes, but only sensibly if it sits behind a VPN or a tool like Tailscale. Connecting directly over the open internet is the risky version of this setup.

Does Remote Desktop work from anywhere?

It works anywhere you have internet access, as long as your home PC is on and connected, and your tunnel (VPN or Tailscale) is working too.

Can I use Chrome Remote Desktop away from home?

Yes, that's really its main purpose. It works from any browser signed into the same Google account as your home PC, with no VPN setup needed.

How do I access Remote Desktop from home if I'm using a cloud tool?

The same way you would from anywhere else: open the app or browser extension, sign in, and connect. Cloud tools don't care whether you're at home or abroad.

Is a VPN or Tailscale better for Remote Desktop?

A router-based VPN keeps everything inside your own network and works well if you're already comfortable with router settings. Tailscale is quicker to set up and ideal if you'd rather skip the router configuration altogether.

What happens if my home PC loses power while I'm away?

Remote Desktop and most cloud tools need the host PC to be switched on and connected to the internet, so a power cut or unexpected restart will cut off access until someone switches it back on.