relaytab
Sign in

Relaytab tutorials

Make your first connection.

Choose how you want to connect, then follow the steps to set up your device and check that it works.

01 / Remote desktop

Open your PC in a browser.

You’ll need a Relaytab account with remote desktop access and a relay with Guacamole installed. The PC you’re connecting to must stay awake and online.

  1. Add the PC and activate WireGuard

    During a regular sign-in, open My devices. Under Add a device, name the PC, select an available relay, and choose Add device. On that PC, use Download .conf for the new device, then import and activate its tunnel. Check that the device is enabled and relay sync is complete.

  2. Turn on a remote service on the PC

    Enable Remote Desktop on a Windows edition that can host RDP, run a VNC server for screen access, or enable an SSH server for terminal access. Allow the service through the PC’s firewall from the relay’s WireGuard address. The relay connects to the PC’s private IP, so you can leave the service port closed to the public internet.

  3. Save the connection settings

    Open Remote desktop and choose Connection settings for the PC. Select the protocol and enter the device credentials. Leave Port blank to use the protocol default (RDP 3389, VNC 5900, SSH 22), or enter the port your service uses. For a self-signed RDP certificate, verify its SHA-256 fingerprint on the PC and enter it before choosing Save remote settings.

  4. Connect from another computer

    Sign in to Relaytab in the other computer’s browser, open Remote desktop, and choose Connect on your saved device. The viewer opens in a new tab. When you’re finished, select Close session under Open sessions.

02 / WireGuard

Connect your devices privately.

Give each device its own configuration. To connect two of your devices, add both under the same account on the same relay.

  1. Add each device in My devices

    Choose an available region and relay. For device-to-device access, set VPN access to Relay + my devices on both devices if your account allows it. If you changed the policy of an existing device, save it and download a fresh config after the relay syncs.

  2. Download, import, and activate

    Install WireGuard on each device. Use Download .conf in Relaytab and keep each file private because it contains the device’s keys. In the WireGuard app, import that device’s file and activate its tunnel.

    On Linux with wg-quick, you can start the tunnel from the downloaded file. Substitute the path to your own config.

    sudo wg-quick up /path/to/my-device.conf

  3. Use the destination device’s private IP

    With both tunnels active, copy the destination’s Private IP from My devices. Enter it in the client for the service you want to reach, such as SSH. Make sure the destination service accepts traffic from the other device’s WireGuard IP.

03 / Shared computer

Connect from a shared computer.

Set this up ahead of time from a regular sign-in. You’ll need a saved remote desktop, an account email, and an authenticator app.

  1. Set up your email and authenticator

    In Account security, save your address under Account email and set up two-factor authentication. Scan the QR code with your authenticator, confirm the six-digit code, and sign in again after activation.

  2. Enable shared computer sign-in

    In Account security, enable Shared computer sign-in. Set the website and remote desktop time limits, enter your current password, and save. A desktop session ends when either time limit is reached.

  3. Open a saved desktop, then sign out

    On the shared computer, open Shared computer sign-in and enter your account email and a current six-digit code. Choose Connect on a saved desktop. Select Sign out when you’re finished to end the website session and close its desktops.

Troubleshooting

Can’t connect?

WireGuard shows no recent handshake

Make sure the tunnel is active and the device is enabled. Check for Relay sync pending under My devices. If there’s still no handshake, confirm you imported the config for this device and that your network allows UDP to the relay endpoint.

The desktop shows as unavailable

Check that the PC is online, its WireGuard tunnel is active, and relay sync has completed. Ask your administrator to confirm that remote desktop is enabled for your account and that the chosen relay’s Guacamole gateway is ready.

The viewer opens but can’t reach the PC

Confirm that the remote service is running and reachable on the WireGuard address. Check the firewall, saved protocol, port, credentials, and, for a self-signed RDP certificate, the saved fingerprint.

One device can’t reach another over WireGuard

Check that both use the same relay, have current configs and a device-to-device access policy, and are online. Use the destination’s saved private IP and check that the destination firewall allows the service you’re trying to reach.

Get connected

Ready to connect?

Sign in to Relaytab