Security

Your screen is yours

Remote access is powerful, so Beej Connect is built to keep the customer in charge. This page explains how, in plain language.

The customer decides

• Nobody can see a screen without the customer accepting, except where the customer has given a company unattended access.
• Before accepting, the customer sees the supporter's name and company.
• While someone has control, the customer sees a clear sign and a button to stop control or end the session.
• Unattended access is given to a company, is listed in the app, and can be taken back by the customer at any time.

Passwords and accounts

• The password shown in the app changes for every session, so an old one can't be reused.
• Wrong passwords are limited, and accounts lock for a while after repeated failures.
• Passwords are stored only as salted hashes, never as text.
• When a company disables a supporter, any session they have open ends at once.
• Beej Technologies staff sign in to the management panel with a password and an authenticator app.

Encrypted connections

• The screen, sound, video, keyboard and mouse travel over an encrypted WebRTC connection (DTLS and SRTP), directly between the two computers wherever possible.
• When a firewall blocks a direct connection, the encrypted data passes through our relay server, which cannot read it.
• The app talks to our server over HTTPS.

What we keep

• We don't record screens, sound, video, chat or clipboard text. They never pass through our server unencrypted.
• We keep a session log: who connected to which computer, when, for how long and how it ended. Your company admins can see it in the portal.
• Full details are in the privacy policy.

Signed updates

Beej Connect updates itself. Every update is signed with our own key, and the app checks the signature before installing. An update that doesn't match is refused.

Scams and misuse

Remote-access tools are sometimes misused by people pretending to be from a bank or a support company. Beej Connect is only for helping people who asked for help.

• Never accept a request from someone who called you out of the blue.
• Every supporter belongs to a named company, which customers see before accepting.
• We close accounts that are used to deceive people. Report misuse here.

Found a security problem?

Please tell us at info@beejtechnologies.com.np. We'll reply, fix it, and keep you updated.