How to Change Remote Desktop Port in Windows 11
Shifting the Remote Desktop listening port away from the standard address is one of the quickest ways to lock down a Windows 11 machine.
Open Registry Editor and navigate to 🗝️HKEY_LOCAL_MACHINE\
Why change the Remote Desktop port?
Moving away from port 3389 makes it harder for hackers to find and attack your computer. This port number is the standard address that Remote Desktop connections use by default.
What happens when done?
After changing the port and updating your firewall, your computer stops listening on the default port 3389. Instead, incoming remote connections arrive only on the new custom port. Remember to include this new port number when connecting from other devices.
Step 1Back Up Your Registry (Required)
Step 2Change the Port in Registry Editor
Editing the Windows Registry requires administrator rights, so make sure you are signed into an account with proper permissions before proceeding. Open the Registry Editor by typing regedit into the Windows search bar . Navigate to the specific path for Remote Desktop settings to locate the port number.
- Click the Search icon and type
regeditto open the Registry Editor. - Navigate to this path:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp
- Find the
PortNumberentry on the right side. - Right-click it and select Modify.
- Select the Decimal option.
- Type your new port number (e.g., 5555) and click OK.
Step 3Update Windows Firewall
After changing the port, update Windows Firewall to let connections through on the new port. Open Windows Firewall with Advanced Security and create a new inbound rule. Set the rule to allow TCP connections on the new port number across all network profiles.
- Open Windows Firewall with Advanced Security.
- Click Inbound Rules and then New Rule on the right.
- Select Port, click Next, and choose TCP.
- Enter your new port number in Specific local ports.
- Follow the prompts to Allow the connection for all profiles.
Step 4Verify and Connect
Restart the computer to apply changes. To confirm the changes are working, open PowerShell as an administrator and check active ports. To connect from a client device later, include the new port in your connection settings: 192.168.1.50:5555.
Summary
Modifying the Remote Desktop port stops automated bots from finding the machine during scans.
Does changing the RDP port improve security?
Does changing the Remote Desktop Protocol (RDP) port improve security? Yes, it reduces "noise" from automated bots. While this adjustment is not a complete security solution, it hides the service from common port scanners looking only for port 3389. This reduction cuts down the number of brute-force login attempts hitting the system.
What happens if I forget the new RDP port?
Losing track of the new port blocks remote access until you check the registry again.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!