Pay USDT (TRC20) for monthly / 6-month / yearly licenses. Renewal reminders before expiry. Send the exact amount shown (including decimals) to get your key automatically.
Network: TRC20 · Reminders 7,3,1 days before expiry
Once Remote Desktop is exposed, a password alone is not enough. WindowsLock requires a 6-digit code from your phone authenticator on every interactive login.
Works with Google Authenticator, Microsoft Authenticator, Authy, and other standard TOTP apps. Stolen passwords are not enough to sign in.
Disable cloud agents, turn off WinRM, block risky ports, and encrypt the system drive when TPM is available.
Telegram tells you the moment someone signs in, or tries a real account and gets the password or code wrong. You can change the password before they get in.
A stolen password is not the same as a stolen server. WindowsLock still blocks the sign-in without your authenticator code, and it messages you while the attempt is happening so you can change the password in time.
After a successful sign-in or unlock, you get the computer name, Windows account, source address, and time. The password and the code are never included.
If the account name is real and the password or the authenticator code is wrong, you are told immediately. They are not signed in. That is the window to change the password.
Open @windowlockbot, tap Start, and paste the numeric ID it replies with into Account or the app. That one ID covers every server on the account. The bot only sends messages. It cannot operate the server.
Renewal reminders use the same bot, 7, 3, and 1 days before expiry.
WindowsLock was founded in the United States to help teams lock down Windows Server and cloud RDP access without complex enterprise IAM projects. We focus on one job: make unauthorized logins fail even when the password is leaked.
US-founded product company. We design for operators who run production Windows hosts on public clouds and need a practical MFA layer that installs in minutes.
Security first, noise second. We keep the product focused, document clearly, and treat customer licenses as recoverable assets tied to your email — not disposable keys lost in chat history.
Transparent pricing in USDT, self-serve purchase, live support when you need it, and renewal reminders before expiry so access does not disappear without warning.
Built around the threats Windows Server operators actually face online.
Attackers who phish, brute-force, or buy credentials still need a rotating authenticator code from your phone.
Compatible with mainstream authenticator apps. No proprietary hardware dongle required to get started.
Beyond login MFA: reduce attack surface by disabling unnecessary remote services and enabling disk encryption where hardware allows.
Keys live in your account. Move servers with a limited transfer quota so licenses stay usable without becoming freely shareable.
Sign-ins, unlocks, and failed attempts on a real account are sent in English through @windowlockbot, and stored on your account. Email alerts can be sent as well.
Install with a license key, bind to the machine, and keep day-to-day workflows familiar — with a second factor standing between the internet and your desktop.
Trust is the product. WindowsLock is built so your servers stay under your control — not ours.
Founded in the United States · Built for Windows Server operators · Your access, your keys, your control
Ask anything about licenses, install, or payment.