Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Choose X11 forwarding to open an individual remote Linux application on your computer, and use remote desktop over an SSH tunnel when you need the remote desktop session as a whole. An SSH GUI client helps you manage the connection, but does not automatically provide either graphical option.

What does an SSH GUI client do?

An SSH GUI client provides a graphical interface for connecting to and administering a server. Depending on the client, that interface may include a terminal, file transfer, or saved connection profiles. It is a way to use SSH; it is not, by itself, a complete remote desktop.

Choose a client that supports your operating system and the session or profile features you need. For graphical applications, check specifically for X11 forwarding support. Also consider how the client handles host-key verification and SSH keys, and whether it meets your organization’s requirements. The available evidence does not establish one universally best client.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Should you use X11 forwarding or remote desktop?

Method What you see Useful when Requirements and trade-offs
SSH GUI client An SSH shell, file-transfer interface, or connection manager, depending on the client You need to administer a host or organize SSH sessions Requires an SSH server and credentials. It does not imply a full graphical desktop.
X11 forwarding Windows from individual remote X applications displayed through your local X server You want to run an X application on the remote host and view its window locally Requires local X display support, client forwarding, server permission, and suitable authorization. The client display has security considerations.
Remote desktop over an SSH tunnel An interactive desktop session delivered by a separate remote-desktop protocol You need the remote graphical session as a whole Requires a running remote-desktop service and a compatible local client. SSH can carry its TCP connection if forwarding is permitted; SSH itself does not provide the desktop.

How X11 forwarding displays a remote application

With X11 forwarding, the application runs on the remote machine, while its windows appear through an X display server on your local machine. SSH carries the forwarded X connection and arranges the remote DISPLAY value and authorization data. In an OpenSSH forwarded session, do not manually set DISPLAY; the client sets it for the connection.

#1 Best Overall
Lenovo Business Laptop - Linux Mint (Cinnamon) - Intel i5-1335U, 16GB RAM, 256GB SSD, 15.6" FHD 1920x1080 Display, Full Keyboard, Fast Charging
  • Intel Core i5-1335U Processor (12M Cache, 12 Threads, up to 4.6 GHz) - 256GB Solid State Drive - 16GB DDR4 SDRAM
  • 15.6" FHD (1920x1080) Non-Touch Anti-Glare Display - Intel UHD 620 Integrated Graphics - Stereo Speakers
  • 720p HD Webcam with Privacy Shutter. Integrated Microphone - Intel Dual Band Wireless-AC (2x2) 8265, Bluetooth Version 4.2
  • I/O Ports: 2x USB 3.0, 1x USB 3.1 Type-C 3.1, Headphone/Mic Combo Port, 4-in-1 Card Reader, HDMI, Kensington Mini-Lock Slot
  • Linux Mint (Cinnamon) 64-Bit - Keyboard with Full NumberPad - Fast Charging

On Windows, the local computer needs an X display server to show forwarded applications. The SSH server must permit X11 forwarding, and the supporting X authorization utility must be available on the server. PuTTY’s documentation describes the feature as giving remote graphical applications access to a local X display: PuTTY 0.83 configuration guide.

Enable X11 forwarding in PuTTY

  1. Start an X display server on your Windows computer. A local display server is required for forwarded X applications to appear.

  2. In PuTTY, open the session settings and go to Connection > SSH > X11. Select Enable X11 forwarding.

    What’s actually slowing this PC down?

    Pick the symptom - the matching free tool is one click away.

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  3. If your local X server requires authorization data, configure PuTTY to locate that data in the X11 settings.

    Rank #2
    HP 17 Business Laptop - Linux Mint Cinnamon - Intel Quad-Core i5-10210U, 32GB RAM, 1TB PCIe NVMe SSD + 1TB Storage HDD, 17.3" Inch HD+ (1600x900) Display
    • Intel Core i5-10210U (up to 4.2GHz) - 1TB PCIe NVMe + 1TB HDD - 32GB DDR4 SDRAM
    • 17.3" HD+ (1600x900) Display, Intel UHD Graphics 620
    • Built in HD 720p Webcam with Microphone - Bluetooth Version4.2
    • I/O Ports: 2x USB 3.1 (Data Only), 1x USB 2.0, 1x HDMI, 1x Headphone/Microphone Combo Jack
    • Linux Mint Cinnamon 64-Bit - 6-Row Keyboard w/ Full Numberpad
  4. Connect to the SSH server using your usual authentication. If forwarding fails, check that server policy permits it and that the required X authorization utility is available.

How to use remote desktop through an SSH tunnel

A remote-desktop protocol supplies the interactive desktop; SSH only transports its network connection. The remote-desktop service must be running on the server, and SSH server policy must allow the forwarding. The general pattern is to establish an SSH tunnel to the service, then point your local remote-desktop client at the tunnel’s local endpoint. Keep the forwarded port bound to the local machine unless a wider bind is deliberately required and secured.

PuTTY supports configuring tunnels in its SSH settings; the exact remote-desktop port and client settings depend on the service you use. Its guide covers both X11 forwarding and tunnel configuration: PuTTY 0.83 configuration guide.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Security considerations for graphical SSH sessions

SSH encrypts forwarded X11 traffic in transit. OpenSSH explains that this prevents others from snooping on remote X windows traffic or inserting commands into it: OpenSSH features. Encryption does not eliminate risks to the local display. The OpenSSH server manual warns that requesting X11 forwarding can expose the client’s X display to attack.

Rank #3
Panasonic Toughbook CF-31 MK5 Rugged Laptop, 13.1in i5, 8GB 256GB (Renewed)
  • [ULTRA-RUGGED DESIGN] MIL-STD-810G and IP65 certified. Built to survive 6-foot drops, heavy rain, and extreme vibrations. Features a magnesium alloy chassis with an integrated carry handle for maximum portability
  • [4G LTE - WORK ANYWHERE] Integrated 4G LTE Multi-Carrier Mobile Broadband. Stay connected to the internet in remote areas or on the road without relying on Wi-Fi or phone hotspots. True mobile freedom for field professionals
  • [1200-NIT SUNLIGHT READABLE] 13.1" XGA Touchscreen with CircuLumin technology. At 1200 nits, it is nearly 4x brighter than a standard laptop, ensuring perfect visibility under direct, intense sunlight
  • [LINUX UBUNTU PRE-INSTALLED] Fast, secure, and bloatware-free. Optimized for developers, network engineers, and diagnostic software that thrives in a stable, open-source environment
  • [LEGACY SERIAL PORT] Features a native RS-232 Serial Port, HDMI, and USB 3.0. Essential for connecting directly to industrial machinery, CNCs, and automotive diagnostic tools without unreliable adapter

For details on client forwarding and host-key verification, see the Linux man-pages project’s ssh(1) documentation. For server-side forwarding settings, consult sshd_config(5).

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Fix common X11 forwarding failures

No application window appears

The connection starts, but the application cannot find a display

Inspect the remote DISPLAY value and the SSH client’s connection log while diagnosing the forwarding negotiation. Do not hard-code DISPLAY for an OpenSSH forwarded session; the client arranges it.

PuTTY forwarding does not negotiate

Review PuTTY’s connection log, verify Enable X11 forwarding is selected under Connection > SSH > X11, and check with the server administrator that forwarding is allowed. Also confirm the local X server’s authorization data is available to PuTTY if that server requires it.

Choose based on what you need to see

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.