Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

AnyDesk disclosed on February 2, 2024 that an investigation had found evidence of compromised production systems. The company said it activated a response plan with CrowdStrike, notified authorities, revoked security certificates, replaced affected systems where necessary, and that the incident was not related to ransomware. This is a historical disclosure—not evidence of a newly discovered 2026 compromise.

What happened to AnyDesk?

AnyDesk said a security audit, prompted by indications of an incident, identified compromise in production systems. Its February 2, 2024 statement said the remediation and response plan had concluded successfully and that relevant authorities had been notified.

The company said it revoked security-related certificates and was replacing its previous code-signing certificate. It also said its systems were designed not to store private keys, security tokens, or passwords that could be used to connect to customers’ end-user devices.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

AnyDesk stated: “To date, we have no evidence that any end-user devices have been affected.” That wording describes the company’s assessment when it published the statement; it is not a guarantee about every user’s environment or a finding that rules out later misuse.

#1 Best Overall
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Why were AnyDesk passwords revoked?

AnyDesk revoked passwords for the my.anydesk.com web portal as a precaution. The action concerned portal accounts. It does not, by itself, establish that every AnyDesk client credential, remote session, or end-user computer was compromised.

AnyDesk recommended changing the password anywhere else it had been reused. Reuse turns a portal credential incident into a broader account-takeover risk, so a replacement password should be unique and long. A password manager is optional, but can make unique credentials practical.

Rank #2
FIDO2 U2F Security Key Passkey Two-Factor Authentication (2FA) USB Key PIN+Touch (Non-Biometric) USB-A Type TrustKey T110
  • Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
  • Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
  • Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
  • Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
  • For the driver download and user guide, please visit TrustKey Solutions Home support page.

Was my computer affected?

The available public statement did not establish that customer computers were compromised, and AnyDesk said it had no evidence of affected end-user devices at the time. The reviewed sources also do not publish a verified count of affected customers, accounts, or devices.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Investigate rather than assume if you see unfamiliar AnyDesk logins, unexpected remote-control activity, unexplained software changes, or other signs of compromise. Secure the account, preserve relevant evidence, and involve qualified incident-response help when the system is sensitive or the evidence suggests an intrusion.

Rank #3
Sale
Thetis Nano-A FIDO2 Security Key Hardware Passkey Device with USB Type A, TOTP/HOTP, FIDO2.0 Two Factor Authentication 2FA MFA, Works with Windows/mac/iOS/Android/Linux/Gmail/Facebook/GitHub/Coinbase
  • Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
  • USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
  • FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
  • Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
  • Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.

What risks did CERT-FR identify?

CERT-FR described potential confidentiality loss and malicious remote control as risks. Its alert said source code, certificates, and private keys could have been stolen and noted that AnyDesk had reported two affected European relay servers.

The alert discussed possible later interception or tampering scenarios, but explicitly said it could not confirm their likelihood or complexity. Those are risk scenarios, not proof that customer sessions were intercepted.

Rank #4
FIDO2 U2F Security Key Passkey Two-Factor Authentication (2FA) USB Key PIN+Touch (Non-Biometric) USB-C Type TrustKey T120
  • Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T120. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
  • Certified with the new FIDO2 standard, T120 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
  • Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
  • Fits USB-C port : Insert the T120 security key into the USB-C port of each service and log in conveniently with one touch
  • For the driver download and user guide, please visit TrustKey Solutions Home support page.

Which AnyDesk versions were affected?

CERT-FR’s alert, last updated April 15, 2024, gave historical thresholds for versions signed before replacement certificates were used:

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Deployment Historical threshold in the CERT-FR alert
Windows installable and portable Versions signed before 8.0.8 and 7.0.15
macOS installable Versions signed before 8.0.0
Custom or on-premises clients Clients not regenerated to the versions specified by CERT-FR
Other versions CERT-FR said it was awaiting more information

These cutoffs are historical alert guidance, not a current “safe version” promise. Check AnyDesk’s current release and security guidance before choosing an update. The company advised using the latest version carrying the new code-signing certificate; do not treat a 2024 version number as the current supported release without verifying it.

Best Value
SecuX PUFido USB-C Security Key with PUF Technology, FIDO2/U2F Certified, Hardware-Rooted Unclonable Security for Passwordless Login and 2FA Authentication
  • A FIDO security key with PUF technology provides a unique, hardware-rooted trust anchor that resists tampering and cyber attacks, offering stronger security than conventional designs.
  • FIDO2 Certified Protection – Enjoy phishing-resistant security with FIDO2 certification, ensuring top-tier account safety across Windows, macOS, Linux, iOS iOS, Android and more.
  • Easy to use & Portable – Designed with a compact USB-C interface, Clife key fits easily on your keychain for secure access anywhere. Simply plug in and authenticate with ease.
  • Universal Compatibility – Works seamlessly with hundreds of FIDO2/U2F compliant services, including popular cloud, email, and social platforms.
  • Backup recommended – To ensure continuous access, register a backup Clife security key as a spare in case your primary key is lost.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What individual users should do

  1. Change the password for the my.anydesk.com portal if you still use it, and replace that password anywhere it was reused.
  2. Download and install AnyDesk only from the official AnyDesk source, following the vendor’s current release guidance.
  3. Review account and device activity for unfamiliar access, unexpected sessions, or unexplained configuration changes.
  4. If you find suspicious activity, disconnect or contain the affected system as appropriate, preserve evidence, and seek qualified incident-response assistance.

What IT teams should check

CERT-FR recommended treating the response as an inventory, authorization, risk, and evidence-preservation exercise.

  • Inventory every AnyDesk installation, including mobile fleets, custom clients, and on-premises deployments.
  • Confirm that each installation is legitimate, authorized, and still required.
  • Determine the sensitivity and business criticality of systems reachable through AnyDesk, along with operational constraints.
  • Before upgrading where practicable, preserve system, application, and network logs so later investigation is possible.
  • Renew passwords used to connect to AnyDesk instances.
  • Search for suspicious activity dating from December 20, 2023, including platform-specific traces and connection logs listed by CERT-FR.
  • Update software under current vendor guidance. Depending on risk and business constraints, consider removing unpatched AnyDesk installations and using an alternative.
  • For suspected compromise, engage a qualified incident-response provider.

How to interpret the incident today

The strongest established facts are limited but clear: production systems were compromised according to AnyDesk’s February 2, 2024 disclosure; portal passwords were revoked as a precaution; certificates and systems were remediated; and AnyDesk reported no evidence of affected end-user devices at that time.

Those facts should not be expanded into an unsupported breach count, a claim that every customer was exposed, or a claim that remote sessions were intercepted. Organizations should use current AnyDesk guidance for live version status and apply the CERT-FR alert’s investigation steps when reviewing historical exposure.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.