Remote Desktop Without Port Forwarding
Published 2026-09-26 · Updated 2026-10-11
You get remote desktop without port forwarding because Poket PC pairs your devices once, then chooses either a local path or an encrypted relay—you never open router ports or run a VPN just for Poket PC.
LAN vs relay path
Same Wi-Fi (LAN) Away from home
================ =================
iPhone -------- direct IP -------- Mac iPhone ---- relay ---- Mac
encrypted session encrypted session
(no relay in path) (relay copies ciphertext only)
The app switches automatically, on iPhone and Android alike. There is no mode toggle for “use relay” in normal use.
What you avoid
| Approach | Poket PC 1.0 |
|---|---|
| Router port forwarding | Not required |
| VPN to home network | Not required |
| Account to sign up for | None |
| Static DNS or DDNS setup | Not required |
You still need the Mac helper running, the Mac awake enough to answer, and a completed pairing.
Encryption in one sentence
The relay (relayd) matches two connections that present the same rendezvous token and copies bytes both ways. Your devices perform Noise IK over X25519 and seal records with ChaCha20-Poly1305, so the relay cannot read or forge screen and input data. Read security for the full model.
Control Mac from anywhere (checklist)
- Install the helper on macOS 14+ from download.
- Pair the iPhone with QR and the six-digit check.
- Optional: enable Open Poket PC when I log in for reach after restart.
- Connect from cellular or another Wi-Fi; the app uses the relay when it cannot find the Mac on the local network.
Guides: access Mac remotely and remote access without port forwarding.
How it differs from a VPN
Poket PC is not a VPN: it does not route, proxy, or inspect your phone’s other traffic. Its one connection is the encrypted session between your paired phone and Mac, and it uses the relay only to move that session’s ciphertext when the phone cannot find the Mac on the local network. It is built for one Mac and your iPhone, with no account and free 1.0.
Limits
- A Windows host is in development and not available. The Android app is on Google Play and connects the same way.
- The browser client is a preview, and so is browser pairing; for now, pair from the iPhone or Android app.
- Metadata is visible to the relay: IP addresses, timing, sizes, and the routing token.
Pricing
Connectivity is included in Poket PC 1.0, free with no ads and no in-app purchases. Get the Android app free on Google Play (see Android), or the iPhone app from the public TestFlight beta while the App Store release is in review.
Frequently asked questions
Can I control my Mac from my iPhone when I am not on the same network?
Yes, after pairing. Poket PC uses a direct connection on the same Wi-Fi and switches to the relay when you are away. You do not configure port forwarding or a VPN.
Is remote access without port forwarding secure?
Traffic between your phone and Mac is end-to-end encrypted with Noise IK and ChaCha20-Poly1305. The relay matches connections and copies ciphertext; it does not hold the keys.
Do I need Tailscale or another VPN?
No. Poket PC is designed to work without a VPN. Some people still use a VPN for other reasons; Poket PC does not require it.
What does the relay see?
Metadata: the IP addresses of both ends, the timing and sizes of the encrypted data, and the random routing token that matches your phone to your Mac. Not your screen, keystrokes, or Ask tasks.
Does the Mac need to stay awake?
Yes for live control. Use the helper login item and macOS sleep settings if you need reach after restarts; see unattended access guidance.