Passwordless account access
Standard users sign up and sign in with a verified-email magic link. Passkey or TOTP is optional hardening; every admin requires a recent passkey or live TOTP, and recovery alone is insufficient.
Remote display and control
From a named request to a direct-first, visible session.
Reallexi joins enrolled devices, verifies each participant and permission, and keeps session content endpoint encrypted.
Production capabilities
Every step has a clear owner.
The service owns identity and authorization. The host owns consent, screen choice, and permissions. Endpoints own session content.
Per-device identity
Every enrolled device generates its own non-exportable P-256 key and signs its requests locally. Revoke one and the others are untouched.
Exact participant authorization
A request names the host and every viewer in it. The host approves each viewer separately, even in a group session.
Direct-first encrypted transport
WebRTC takes the lowest-latency direct path it can find. When a network blocks that, authenticated TURN relays the encrypted packets and never holds a session key.
Short-lived connection authority
One-use tickets bind the exact devices and both DTLS fingerprints; leases expire unless the account still authorizes them. A dropped connection gets at most three ICE restarts, each re-authorized from scratch.
Control the host keeps
Pause the session, revoke pointer or keyboard, or stop outright. The desktop app puts that switch in the tray on all three systems, and Off refuses every session — including ones you already approved.
Architecture at a glance
Authorization uses the service. Session decryption does not.
Device identities and a short-lived ticket authorize the handshake before endpoints exchange encrypted WebRTC traffic.
Product boundary
Useful remote control without hidden access or a general network tunnel.
A session reaches one screen and the input you granted for it, and nothing else on the machine or the network. No stealth capture, no remote shell, no general VPN, no arbitrary proxy, no unrestricted port forwarding.
Open the browser appDesigned for a decisive stop
The host can turn down a request before a single frame is captured.
Take back pointer or keyboard mid-session without ending the session or the account.
Stopping closes capture, channels, and the connection, and releases every key and button still held down.