Security at Dristi
Letting someone into your computer takes trust. This page explains how Dristi protects your account, your company’s data and your customers.
Your account
-
Strong passwords
Passwords must be at least 10 characters and are stored using bcrypt hashing, never in plain text.
Available now -
Protection against guessing
Repeated failed sign-ins are slowed down automatically.
Available now -
Signed-in sessions
Changing or resetting your password signs out connected apps.
Available now -
Two-step sign-in
A code from an authenticator app in addition to your password.
Coming soon -
Single sign-on
Sign in with Google Workspace or Microsoft 365.
Coming soon
Your company’s data
-
Kept separate
Every company’s data is isolated, and automated tests check that one company can never see another’s.
Available now -
Roles
Only owners and admins can manage the team or see the audit log.
Available now -
Audit log
Sign-ins, failed sign-ins and team changes are recorded with time and IP address.
Available now -
Encrypted in transit
All traffic to the Dristi website and app uses HTTPS.
Available now
Remote sessions
-
Customer approval
A session starts only after the customer clicks Allow on their own screen.
In development -
End-to-end encryption
Screen, keyboard and mouse data is encrypted between the two computers.
In development -
One-time codes
Session codes work once and expire after 10 minutes.
In development -
Visible session bar
The customer always sees that a session is active and can end it.
In development
Found a security problem? Please email support@thedristi.com with the details. We’ll respond quickly and keep you informed.