Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

For connecting to a remote Windows Server 2008 I use a standard Windows 7 RDP remote desktop connection. In an RDP dialog there is an option to save connection parameters to an RDP file to use it later for a quick connection.

Is it safe to save connection parameters (IP address, login, password) in an RDP file?
The computer is private, so I mean not the physical security but rather a chance for the parameters to be stolen by a malicious software.

share|improve this question
up vote 2 down vote accepted

Aside from real people actively using your computer via physical access or remote administration: It is likely that a malicious software, which is able to read the saved password, has sufficient possibilities to read the password from the connection dialog as you type it in.

This approach is likely a bit more work for the author of the malicious software and it won't allow access to old unused RDP connections through.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.