How to access Windows Remote Desktop (RDP) securely using Cloudflare and SyncMyIP

Windows Remote Desktop (RDP) is one of the most powerful built-in tools for working remotely, managing home servers, or accessing your main workstation from anywhere. However, two common hurdles prevent users from taking full advantage of it: dynamic IP addresses changed constantly by Internet Service Providers (ISPs), and the security risks of exposing RDP directly to the public internet.

The Challenge of Dynamic IPs

Normally, ISPs change your public IP address every few days (or even hours). If you try to connect to your home PC using its raw IP address, the connection will break as soon as the IP changes. Buying a static IP from your provider is an option, but it comes with recurring monthly fees.

With SyncMyIP and Cloudflare, you can use your own custom domain (e.g., rdp.yourdomain.com) to point to your home network. SyncMyIP runs as a native Windows service in the background and automatically updates Cloudflare's DNS records whenever your IP address changes—completely free of charge.

Step 1: Enable Remote Desktop on Windows

First, make sure RDP is enabled on your host computer (Windows Pro, Enterprise, or Server edition is required):

1. Open the Settings app (Win + I).
2. Navigate to System > Remote Desktop.
3. Toggle the switch to On.
4. Ensure "Require computers to use Network Level Authentication (NLA) to connect" is checked. This is a critical security feature.

Step 2: Configure Cloudflare and SyncMyIP

To keep your domain pointing to your home IP address:

1. Log into your Cloudflare dashboard and create a new A record pointing to your current public IP (e.g., name: rdp, target: 8.8.8.8, set Proxy status to DNS Only since RDP traffic cannot go through Cloudflare's HTTP proxy).
2. Open the SyncMyIP client on Windows.
3. Configure your Cloudflare API token with DNS editing permissions.
4. Add the subdomain (e.g., rdp.yourdomain.com) to your SyncMyIP sync list.

SyncMyIP will now monitor your IP in the background. If your ISP changes it, the new IP will be updated on Cloudflare within seconds.

Step 3: Security Best Practices (Crucial)

Exposing the default RDP port (3389) directly to the internet is highly discouraged, as hackers actively scan for it. To secure your setup, apply one of these methods:

• Method A (Highly Recommended): Use a VPN. Set up a secure VPN server like WireGuard at home, and use SyncMyIP to synchronize your VPN domain. You connect to the VPN first, and then access RDP locally through the VPN tunnel. No RDP ports are exposed to the public internet!
• Method B: Port Obfuscation. If you must expose RDP directly, change the default listening port. Open Registry Editor, navigate to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp, find the PortNumber key, switch to Decimal, and change it to a random number between 49152 and 65535. Remember to allow this port in your Windows Firewall and forward it on your router.

Conclusion

Accessing your Windows desktop remotely doesn't have to be expensive or insecure. By combining the automation of SyncMyIP, the stability of Cloudflare's DNS networks, and proper port security or VPN configuration, you can enjoy a top-tier remote desktop setup with zero additional monthly costs.