How to Change Your RDP Password and Port Safely

You change your RDP password inside the session with Ctrl+Alt+End, Computer Management, or the net user command, then change the RDP port in the registry and open the new port in the firewall. Changing the port needs admin rights, so on a shared plan with limited admin you may need support or a full-admin plan.

By SadeemRDP Team

Last updated: November 5, 2026

The default port and an old password are the two things automated scanners look for first, and both take only a few minutes to fix. This guide covers the full process on Windows, including what to do when your plan lacks the admin rights to change the port.

Why should you change your RDP password and port?

You should change your RDP password and port because the defaults are public knowledge, and bots scan around the clock for open port 3389 with weak passwords. A fresh password closes the door on anyone who saw the old one.

How do you change your RDP password with Ctrl+Alt+End?

You change your RDP password with Ctrl+Alt+End by pressing that key combination inside the remote session, choosing Change a password, and entering the old and new passwords. This is the easiest method, and it works on almost every Windows server and desktop.

Connect to your RDP as usual and press Ctrl+Alt+End. Do not use Ctrl+Alt+Delete, because your own computer catches that combination instead. On the blue screen, click Change a password, enter your current password, then the new one twice, and confirm. Windows will confirm the change with a short message.

Pick a password that is long rather than clever. Twelve or more characters, with mixed case, numbers, and a symbol, is a solid target. Four random words plus a number is easier to remember and harder to guess. Never reuse a password from another account, and store the new one in a password manager.

How do you change your RDP password through Computer Management?

You change your RDP password through Computer Management by opening Local Users and Groups, right-clicking your account, and choosing Set Password. It needs admin rights, and it helps when the Ctrl+Alt+End screen is not available.

Inside the remote session, right-click the Start button and select Computer Management. Expand System Tools, then Local Users and Groups, then click Users. Right-click the account and select Set Password. Windows warns this can lock you out of encrypted files tied to the old password, which is rarely a problem for a standard RDP account, but read it before you click Proceed. Enter the new password twice and click OK, after double-checking the username, since this method never asks for the old password.

How do you change your RDP password with the net user command?

You change your RDP password with the net user command by opening Command Prompt as an administrator and running net user followed by your username and the new password. It is the fastest method once you know the command.

Open Command Prompt as an administrator, then type the following with your real username and password:

net user yourusername YourNewPassword123

Press Enter. If it worked, you will see the message “The command completed successfully.” An access denied error means your account lacks admin rights, so use Ctrl+Alt+End instead. Note that the password shows in plain text on the command line, so never run this while sharing your screen.

How do you change the RDP port in Windows?

You change the RDP port in Windows by editing the PortNumber value in the registry, restarting the Remote Desktop service, and opening the new port in the firewall. You must have admin rights, so keep the session open until you have confirmed the new port works.

Press Windows key + R, type regedit, and press Enter, then follow this path in the left panel:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp

In the RDP-Tcp folder, double-click PortNumber in the right panel. Select Decimal as the base, then type your new port number. The default is 3389; a common choice is something above 10000, for example 13389. Click OK, then close the Registry Editor.

The change takes effect only after the Remote Desktop service restarts. Press Windows key + R, type services.msc, find Remote Desktop Services, right-click it, and choose Restart. Your session may drop, so save open work first. Write the new port number down before you disconnect, because forgetting it is the most common way people lock themselves out.

How do you open the new RDP port in the firewall?

You open the new RDP port in the firewall by adding an inbound rule that allows TCP traffic on the port you chose. Without it, the firewall will keep blocking the new port.

Open Windows Defender Firewall with Advanced Security. Click Inbound Rules, then New Rule. Choose Port, click Next, select TCP, choose Specific local ports, and type your new port number. Click Next, choose Allow the connection, leave Domain, Private, and Public all ticked, and name the rule RDP Custom Port. Click Finish, and the rule takes effect right away. Leave the old port 3389 rule in place while you test, then disable it.

How do you reconnect to RDP on the new port?

You reconnect to RDP on the new port by adding a colon and the port number after the server address in your Remote Desktop client, for example 123.45.67.89:13389. The client uses port 3389 unless you tell it otherwise.

Open Remote Desktop Connection on your own computer. In the Computer field, type the server address, a colon, and the new port number, with no spaces. Click Connect and sign in with your username and the new password. If it works, save the new address in your client or as a .rdp file. If the connection fails, check three causes: the service may not have restarted, the firewall rule may have a typo, or your provider may have a network firewall that also needs the new port opened. If you cannot get back in, contact support, who can usually reach the machine through their own console.

What if your plan does not let you change the port?

If your plan does not let you change the port, it is usually because the plan gives you limited admin rights, and the registry and firewall settings are locked on shared servers.

On a limited-admin plan, you can still change your own password with Ctrl+Alt+End, use a long unique password, turn on two-factor authentication where offered, and keep software updated. What you cannot do is edit the registry or add firewall rules. For that, ask support whether they can change the port, or move to a plan with full admin rights, such as a Private Windows VPS from $6.99/mo.

Before you decide, check how the limits affect your daily work. Our guide on is shared RDP safe for office work explains where shared plans work well and where a private plan fits better. If you run automated tools on the same machine, read how to run Expert Advisors on a VPS safely first.

Does changing the RDP port really make you safer?

Changing the RDP port makes you safer against automated scans, but it is not real security by itself, because anyone who knows or guesses the new port still faces only your password.

What matters most is a strong password, regular Windows updates, and limiting who can connect. A port change plus these habits is a solid setup, but on its own, with a weak password and an unpatched system, it is not. Microsoft’s documentation on Remote Desktop Services explains how the service works: Microsoft Learn, Remote Desktop Services. For background on the protocol, see the Remote Desktop Protocol page on Wikipedia.

Frequently Asked Questions

Can I change my RDP password without admin rights?

Yes. The Ctrl+Alt+End method works with a standard user account, because you are changing your own password and Windows asks for the old one first. The Computer Management and net user methods need admin rights, so without them, stick with Ctrl+Alt+End or ask support to reset the password for you.

What happens if I forget the new RDP port number?

If you forget the new port, the Remote Desktop client will keep trying port 3389 and the connection will fail, even though the server is running fine. Check any notes or .rdp files you saved, then contact support. They can read the registry value through their console and tell you the port.

Will changing the RDP port disconnect other users?

Yes, changing the port affects everyone who connects to that machine, because the Remote Desktop service only listens on one port at a time. On a shared server this is exactly why the setting is locked. On your own private server, tell every user the new port before you restart the service.

How often should I change my RDP password?

Change your RDP password every two to three months, and right away if you suspect it was seen, shared, or used on a public computer.

Is changing the port enough to stop brute-force attacks?

No. Changing the port cuts down automated scans, but a determined attacker who finds the new port can still try passwords against it. Real protection comes from a strong unique password, account lockout after failed logins, updates, and limiting access by IP or VPN. Treat the port change as one layer, not the whole defence.

Set a strong password, move off port 3389, open the new port in the firewall, and test the new connection before you close the old session. If your plan blocks the port change, talk to support or move to a plan with full admin. For more on locking down your remote desktop, read our guide on how to secure your RDP account from hackers.