Security and Auditing: Common Questions

Remote control software is, by design, a way around physical access control — which is both its value and the reason it deserves real scrutiny. This page covers what WorksLink actually provides today, and which parts require a paid plan.

What encryption does WorksLink use?

Three layers, each with a different job:

• Transport — SSL/TLS
• Session content — AES 256-bit encryption
• Credentials — dual passwords, separating connection and account credentials

AES 256-bit end-to-end encryption is included in every plan, free included. Encryption is not a paid feature.

Do remote sessions leave a record?

Yes — but only on paid plans. This is the most important distinction on this page:

Capability	Free	Personal	Team	Enterprise
AES 256-bit end-to-end encryption	✅	✅	✅	✅
Connection logs	❌	❌	✅	✅
File transfer records	❌	❌	✅	✅
Automatic session recording	❌	❌	✅	✅
View and download recordings	❌	❌	✅	✅

Encryption is universal; the audit trail is paid. These get conflated, but they defend against different things: encryption stops someone reading the link, while the audit trail stops “nobody can say what actually happened.”

Does the free plan include auditing?

No. If you need to reconstruct a session afterwards — to account to a customer for what was done, or to satisfy an internal compliance requirement — the free plan does not cover it. That needs Team or Enterprise.

Can someone connect to my machine without me knowing?

It depends on how it is configured:

• Request-based — the other side enters your device ID, and nothing starts until you click accept.
• Access code — someone can connect without a response from you only if you have already enabled unattended access on that machine and shared its access code.

In other words: approval is the default, and skipping approval is something you switch on deliberately. See unattended access for when that is appropriate.

What are dual passwords?

Credentials split into two independent layers: the connection credential and the account credential.

The benefit is direct — a leaked session password does not hand over the account. This is worth asking of any remote control tool; the remote desktop security checklist covers the rest.

Can session recordings be viewed and downloaded?

Team and Enterprise plans support viewing and downloading recordings; Free and Personal do not.

A recording captures the whole remote session, so an operation can be reviewed later rather than reconstructed from someone’s memory.