0
Changes to the native RDP login screen
Multi Factor Authentication
Adaptive Multi Factor Authentication for RDP
Spriv adds Adaptive MFA to Windows Remote Desktop without changing the RDP login screen. The workstation-phone pair is verified in the background, so a legitimate session clears silently.
Adaptive MFA · Windows RDP · Background verification
0 ms
Typical time to clear the second factor
0/10
Fraction of a hardware token's cost
0+
Servers per admin real customer
Four things to know
How Spriv sits alongside RDP
Every RDP session, one agent
A lightweight Windows agent hooks into the credential provider chain used by Remote Desktop, so every RDP session into a protected machine goes through the same Adaptive MFA check no per-application configuration.
Install once, roll out with your imaging tools
Push the agent through your existing Windows deployment tooling (Group Policy, SCCM, Intune), register each host in the Spriv admin console, and RDP into it is protected no changes to firewall rules or the RDP port itself.
Verification happens before the desktop loads
Once a user is paired, Spriv checks the workstation-phone pair silently as the RDP session negotiates. A match clears the login without a prompt; a mismatch falls through to a challenge the user experience only changes when something looks wrong.
Never locked out of a server
If the phone is unreachable or unpaired, Spriv falls back to SMS code, TOTP, or Allow/Deny so a network blip on the phone side never blocks an admin from reaching a server they're authorized on.
Explore
Related methods
Checkit!
Protect Windows RDP without touching the login screen
Two free users and two free servers on every plan. No credit card, install in under five minutes.