TightVNC

TightVNC is a free VNC remote control server and viewer for Windows, used by help desks, sysadmins and home users who want to see and control another PC on their network without a cloud account. A TightVNC download gives you two parts in one installer: TightVNC Server for the computer you want to reach and TightVNC Viewer for the computer you sit at.

It is still maintained: version 2.8.87 (March 2026) and 2.8.88 (June 2026) fixed stability and security bugs, so the old “abandoned 2000s tool” reputation is not accurate. It speaks the standard VNC (RFB) protocol, so it also works with viewers and servers from other VNC projects.

TightVNC at a glance

What it does

• Runs TightVNC Server as a Windows service, so you can connect before anyone logs in and after reboots, or as a normal application for one-off sessions.
• Gives full keyboard and mouse control, or view-only access with a separate password.
• Transfers files between viewer and server in both directions.
• Uses Tight encoding with adjustable compression and JPEG quality, which keeps sessions usable on slow links.
• Restricts who may connect with IP access-control rules and protects server settings with an administrative password.
• Supports reverse connections: the server can connect out to a viewer that is listening, useful when the remote PC is behind NAT.
• Can share the whole desktop, one monitor, a screen area or a single application window, all from the command line.
• Installs silently from MSI packages with the password and service settings preset, for mass deployment.

How IT teams use it

Deploy the server silently to many PCs

1. Use the 64-bit MSI and set the service and password properties on the command line:

   msiexec /i tightvnc-2.8.88-gpl-setup-64bit.msi /quiet /norestart ADDLOCAL=Server SERVER_REGISTER_AS_SERVICE=1 SET_USEVNCAUTHENTICATION=1 VALUE_OF_USEVNCAUTHENTICATION=1 SET_PASSWORD=1 VALUE_OF_PASSWORD=ChangeMe1

2. Push the command through Group Policy, Intune, PDQ or your RMM tool.
3. Open TCP 5900 in Windows Defender Firewall only for your admin subnet:

   netsh advfirewall firewall add rule name="TightVNC" dir=in action=allow protocol=TCP localport=5900 remoteip=10.0.10.0/24

Help a user behind NAT with a reverse connection

1. On your own PC start the viewer in listening mode (TightVNC Viewer, Listening mode in the Start menu); it waits on TCP 5500.
2. Forward port 5500 to your PC if you are behind a router, or do this over your VPN.
3. On the user’s PC run:

   "C:Program FilesTightVNCtvnserver.exe" -controlservice -connect your.host.name

   or have the user choose Attach Listening Viewer from the TightVNC tray icon.

Manage the service from a script

1. Register and start the service without pop-ups:

   tvnserver.exe -install -silent
   tvnserver.exe -start -silent

2. Reload settings after a registry change with tvnserver.exe -controlservice -reload, or drop all sessions with -disconnectall.
3. Share only one window during a demo with tvnserver.exe -controlapp -sharewindow "Window caption".

Install and first run

Windows. Run the MSI as administrator, choose Typical (server and viewer) or Custom. The installer asks for a remote-access password and an administrative password; set both. In service mode the tray icon shows the server status and current connections. The server listens on TCP 5900; port 5800 serves a Java viewer over HTTP and can be disabled if you do not need it.

Viewer. Enter host or host::port and the password. Ctrl+Alt+Shift+F toggles full screen, which is the usual answer when people cannot find their way out of it.

Security gotchas. Classic VNC authentication uses passwords of up to 8 characters, and session traffic is not encrypted. Never expose port 5900 to the Internet; use a VPN such as WireGuard or an SSH tunnel. Update to 2.8.88, which fixes several crashes, hangs and unsafe memory access issues; 2.8.87 fixed a bug that could let an authenticated user cause a denial of service.

Limitations

• The free version is Windows-only today. There is no free macOS server and no current public Linux build.
• No built-in encryption of the session, no cloud relay and no address book.
• Password length is limited by the VNC protocol.
• No audio, no chat, no remote printing.
• On the same link, a VNC session usually feels slower than RDP to a Windows host.

TightVNC vs alternatives

UltraVNC is also free and Windows-focused but adds chat, an optional encryption plugin and a repeater for NAT traversal. TigerVNC is the better choice for Linux servers and as a cross-platform viewer. RustDesk gives encrypted connections through NAT without port forwarding and can be self-hosted. TightVNC wins on simplicity and silent MSI deployment inside a managed network.

FAQ

Where do I get TightVNC Viewer?

The viewer is included in the same Windows installer as the server; choose Custom setup to install only the viewer. The official website has the installers, documentation and change log.

Is there TightVNC for Mac?

No current free version exists for macOS. To control a Mac, enable Screen Sharing in macOS and connect with any VNC viewer; to control a PC from a Mac, use a VNC viewer such as TigerVNC Viewer.

Does TightVNC work on Linux?

Only the legacy 1.3.10 release from 2009 is available for Linux. For Linux servers use TigerVNC or another maintained VNC server; TightVNC Viewer on Windows can still connect to them.

How do I exit full screen in TightVNC?

Press Ctrl+Alt+Shift+F to leave or enter full-screen mode in TightVNC Viewer.

Is TightVNC free for commercial use?

Yes. The GPL version is free for any use, including businesses. A paid licence is needed only to integrate its source code into closed-source software.

TightVNC vs RealVNC?

TightVNC is fully free and self-managed. RealVNC Viewer is free, but RealVNC’s server and cloud connectivity are paid, with encryption and central management included.

TightVNC vs TigerVNC?

Both are free VNC implementations. TightVNC focuses on Windows, while TigerVNC focuses on Linux servers and offers viewers for Windows, macOS and Linux.

Last checked against official sources: 1 October 2026 (developer website: tightvnc.com). Versions and licence terms change — confirm on the developer's site before deploying in production.