> ## Documentation Index
> Fetch the complete documentation index at: https://flashrdp.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.
# Secure Your Windows RDP
> Harden your FlashRDP Windows server in three steps: change the default RDP port, enforce strong passwords, and restrict access with firewall rules.
When you deploy a Windows server with a public IP address, bots and automated scanners will inevitably try to guess your password.
Because we give you full `Administrator` access, your FlashRDP server is as secure as you make it. Luckily, securing your [Windows Windows RDP](/docs/windows-rdp/overview) only takes a few minutes. Here are the three most important things you should do right after logging in.
By default, RDP uses port `3389`. Bots scan this port constantly. Changing it to a custom port (like `49152`) drops brute-force attempts to near zero.
1. Open PowerShell as Administrator.
2. Run this command, replacing `49152` with any number between 1024 and 65535:
```powershell theme={null}
Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -name "PortNumber" -Value 49152
```
3. Allow your new port through the Windows Firewall:
```powershell theme={null}
New-NetFirewallRule -DisplayName "Custom RDP Port" -Direction Inbound -LocalPort 49152 -Protocol TCP -Action Allow
```
4. [Restart your FlashRDP server](/docs/control-panel/server-panel) from the control panel. When connecting next time, add the port to your IP (e.g., `192.168.1.50:49152`).
Bots always try to log in using the username `Administrator`. If you disable that account entirely, their attacks will fail instantly.
1. Open **Computer Management** > **Local Users and Groups** > **Users**.
2. Right-click in the empty space and select **New User**. Give it a unique name (e.g., `MaxTech`) and a strong password.
3. Right-click your new user, select **Properties** > **Member Of**, and add them to the `Administrators` and `Remote Desktop Users` groups.
4. Log out, log back in with your new user, and then right-click the default `Administrator` account to disable it.
If a bot guesses the wrong password too many times, Windows can automatically lock them out.
1. Open **Local Security Policy**.
2. Go to **Account Policies** > **Account Lockout Policy**.
3. Set the **Account lockout threshold** to `5 invalid logon attempts`.
## Related Articles