How to Change the RDP Port in Windows 10: Step-by-Step Instructions

Securing your Windows 10 computer from prying eyes is always a smart move, and one often overlooked step involves changing the default port for the Remote Desktop Protocol, or RDP. Think of it like changing the lock on your front door; while everyone knows where the front door is, few would immediately guess you’ve swapped out the standard lock for something unique. This process involves a quick dive into the Windows Registry, where you’ll tweak a specific setting to assign a new, custom port number for RDP connections. Once you save that change and give your system a quick refresh, your computer will start listening for RDP connections on your chosen port instead of the usual one, making it just a little bit harder for automated attacks to find you.

Tutorial – How to Change the RDP Port in Windows 10

Changing the RDP port is a surprisingly simple task that can add a layer of privacy to your system, moving your remote access point away from the well-known default. We are going to walk through the exact steps to get this done, ensuring your Windows 10 machine is ready for a more secure connection.

Step 1: Open the Registry Editor.

You need to open the Registry Editor, which is where we will make our changes. Just press the Windows key and “R” at the same time to bring up the Run dialog box, then type “regedit” and hit Enter.

When prompted by User Account Control, go ahead and click “Yes” to allow the app to make changes to your device; this is completely normal for accessing the Registry Editor. Remember, the Registry is a powerful tool, so it’s always wise to proceed with caution and only make changes exactly as described.

Step 2: Navigate to the RDP-Tcp key.

Once you have the Registry Editor open, you will need to navigate through a series of folders to find the correct setting. Copy and paste this path into the address bar at the top of the Registry Editor window and press Enter: HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/Terminal Server/WinStations/RDP-Tcp.

This path leads you directly to the key that holds the configuration settings for your Remote Desktop Protocol connection. It is within this specific location that we will find the value responsible for the port number.

Step 3: Find and modify the “PortNumber” value.

On the right-hand side of the RDP-Tcp key, you should see a list of values, and one of them will be named “PortNumber.” Double-click on “PortNumber” to open its edit window.

Before you type in your new port number, you need to select the “Decimal” radio button under “Base.” This step is super important because port numbers are typically understood in decimal format, and entering a value in hexadecimal could lead to unexpected behavior or prevent RDP from working correctly. Now, go ahead and enter your desired new port number, making sure it is something unique and not already in use by another service, then click “OK.”

Step 4: Restart your computer or the Remote Desktop Services.

For your changes to take effect, your computer needs a little nudge. You can either restart your entire Windows 10 machine, which is the easiest and most thorough way to apply the change.

Alternatively, if you prefer not to restart your whole system, you can open the Services snap-in by typing “services.msc” in the Run dialog and pressing Enter. Find “Remote Desktop Services” in the list, right-click it, and choose “Restart.” Either option will ensure that RDP starts listening on your newly assigned port.

After you have completed these steps and restarted your system or Remote Desktop Services, your computer will no longer accept RDP connections on the default port 3389. Instead, it will listen for incoming RDP connections on the new custom port number you specified. When you or anyone else tries to connect to your computer via RDP, you will now need to include the new port number in the connection address, typically by adding a colon and the port number after the IP address or hostname. For example, if your IP is 192.168.1.100 and your new port is 50000, you would connect to 192.168.1.100:50000.

Handy Tips for Changing Your RDP Port in Windows 10

• Pick a smart port number: Avoid very low numbers (like 1 to 1023) because those are often used by common services. Choose a number above 1024, ideally one that is not obvious, like a random number in the 49152-65535 range.
• Update your firewall: Remember, changing the port in the Registry is only half the battle. You must create a new inbound rule in your Windows Firewall to allow traffic on your chosen port, and disable or delete the old rule for port 3389.
• Adjust your router settings: If you are connecting to your PC from outside your home network, you will need to configure port forwarding on your router to direct traffic from your new external port to your computer’s internal IP address and new RDP port.
• Keep a record: Write down your new RDP port number in a safe place. It is easy to forget, and you will need it every time you connect remotely.
• Test immediately: After making the change and restarting, try connecting to RDP using your new port right away to confirm everything works as expected. This helps you catch any issues quickly.
• Consider other security layers: Changing the port is a good step, but it is not a complete security solution. Always use strong, unique passwords for your user accounts, and consider enabling multi-factor authentication if possible.

Frequently Asked Questions

Why should I change the RDP port?

Changing the RDP port is a simple but effective security measure. The default RDP port, 3389, is widely known and constantly scanned by automated bots looking for vulnerable systems. By moving your RDP service to a different port, you essentially make your computer invisible to these common scans, significantly reducing the number of unsolicited connection attempts and potential brute-force attacks.

What port number should I choose?

You should select a port number that is not commonly used by other services. Generally, ports above 1024 are considered “user ports,” and ports in the dynamic or private range (49152 to 65535) are often a good choice for custom applications. Just make sure it is not conflicting with another service on your system, though this is rare with high-numbered ports.

Do I need to change firewall settings?

Yes, absolutely. Changing the port in the Registry only tells your computer to listen on a new port. By default, Windows Firewall allows RDP traffic only on port 3389. You must create a new inbound rule in your firewall to explicitly allow connections on your chosen custom port. Failing to do so will prevent you from connecting via RDP, even with the correct port number.

What if I forget my new port number?

If you forget the new RDP port number, do not worry. You can always go back to the Registry Editor by following Steps 1 and 2 of the tutorial. Once you navigate to the HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/Terminal Server/WinStations/RDP-Tcp key, simply look at the “PortNumber” value again. It will show you the custom port you set.

Can I revert to the default port?

Yes, you can easily revert to the default port of 3389 at any time. Just follow the same steps outlined in this article to open the Registry Editor and navigate to the “PortNumber” value. Change the value back to 3389 (remembering to select “Decimal” as the base), click “OK,” and then restart your computer or the Remote Desktop Services. Do not forget to also update your firewall and router settings back to 3389 if you revert.

Summary

1. Open Registry Editor.
2. Navigate to RDP-Tcp key.
3. Modify PortNumber value.
4. Restart computer or services.

Conclusion

So, there you have it, folks! Changing the default RDP port on your Windows 10 machine might seem like a small tweak, but it is a really effective way to beef up your computer’s security posture. Think of it this way: if most burglars know to check under the doormat for a spare key, then changing the lock completely and moving the key to a hidden spot makes their job much harder. By moving your Remote Desktop connection from its default port, 3389, to a less common custom port, you are essentially making your system less visible to automated scanners and bots that constantly probe the internet for easy targets. This simple act of obscurity can drastically reduce the amount of unwanted attention your PC gets, giving you a quieter, more secure remote access experience.

Remember, while diving into the Registry might feel a bit daunting at first, it is a straightforward process when you follow the steps carefully. Always double-check your work, especially when entering the new port number and selecting the “Decimal” option. Do not forget those crucial follow-up steps either: updating your Windows Firewall to allow traffic on the new port and, if you connect from outside your home network, configuring port forwarding on your router. These steps are just as important as the Registry edit itself. Without them, your RDP connection simply will not work on the new port, which would be a bit frustrating after all your hard work!

This isn’t a silver bullet for all your security worries, but it is a fantastic piece of the puzzle. Combine this trick with strong, unique passwords for all your user accounts, and consider implementing multi-factor authentication if available. The more layers of security you put in place, the safer your digital life becomes. So, go ahead and try changing the RDP port in Windows 10, and enjoy the peace of mind that comes with a slightly more hidden and secure remote connection. Your Windows 10 machine and your data will thank you for it!