← Blog · 15 Sep 2026

RDP Security: How to Protect Your Windows Server from Attacks

Bots try passwords on port 3389 constantly. Protect your server:

1. Long unique password (14+ characters) and change the default.
2. Rename the Administrator account and create a normal user for daily work.
3. Enable Network Level Authentication (NLA).
4. Account lockout policy: lock for 15 minutes after 5 failed logins.
5. Firewall: allow RDP only from your own IP address.
6. Change the RDP port (it reduces noise, it is not a replacement for the other steps).
7. Windows Update and antivirus on.
8. Use a VPN for teams.
9. Check Event Viewer for failed logins (event 4625).

If you see many failed logins, change the password and restrict the IP at once.