Glossary

    What Is Wayland Remote Desktop?

    Components, mechanics, and how it differs from X11.

    What is Wayland remote desktop?

    Wayland remote desktop is the set of protocols, services, and desktop-environment integrations that allow a remote operator to view and control a Linux desktop running the Wayland display server. It is mediated by the compositor (Mutter on GNOME, KWin on KDE) and routed through the xdg-desktop-portal RemoteDesktop interface, with PipeWire carrying frames and audio. Both attended sessions (with user consent) and unattended sessions (through GDM-integrated headless login or vendor system-level integration) are supported, with different trade-offs.

    Last reviewed: · DeviceView editorial

    Read the guideJump to components

    Stack

    Components involved

    A Wayland remote desktop session is not one thing; it is a stack. Knowing which component owns which job is the foundation for any further evaluation.

    The compositor

    Mutter on GNOME, KWin on KDE, smaller compositors like Sway or Hyprland. The compositor draws windows, owns the framebuffer, and decides what an application is allowed to see and inject. All remote desktop on Wayland is mediated by the compositor.

    xdg-desktop-portal

    The Freedesktop component that brokers requests from applications to the host system. The two relevant interfaces are org.freedesktop.portal.ScreenCast (for screen content) and org.freedesktop.portal.RemoteDesktop (for screen content plus input control). Each desktop environment ships a portal backend; behavior is generally consistent but not identical.

    PipeWire

    The media server that carries the actual frame and audio data once the portal grants access. ScreenCast streams come back as PipeWire nodes; the remote desktop application reads from them.

    The display manager

    GDM on GNOME, SDDM on KDE, lightdm, and others. The display manager owns the greeter, the screen the device shows before any user logs in. Remote access to the greeter is a display-manager integration problem, not a compositor problem.

    The protocol on the wire

    RDP (Remote Desktop Protocol) is the dominant choice for Wayland remote desktop in 2026. gnome-remote-desktop and KRdp both speak RDP. VNC remains available in some implementations.

    The remote desktop service or vendor agent

    What the operator's client connects to. gnome-remote-desktop is GNOME's native service. KRdp is KDE's. Commercial platforms ship their own agents.

    Comparison

    Wayland remote desktop vs X11 remote desktop

    AspectX11 remote desktopWayland remote desktop
    Who controls capture and inputAny authenticated X clientThe compositor
    Default consent for attended sessionsNone, clients connected directlyUser dialog via xdg-desktop-portal
    Default behavior for unattended sessionsWorked because clients had broad accessDoes not work without an alternative authorization path
    Wire protocolX11 (over TCP, often via XDMCP for login screen access)RDP and VNC, brokered through the portal or a system service
    Screen captureDirect framebuffer readsPipeWire stream after portal authorization
    Input injectionAvailable globallyMediated by the compositor; available to authorized portal sessions and to system-level integrations
    Login-screen accessVia display-manager configuration (xhost, XDMCP)Via display-manager-integrated services (gnome-remote-desktop + GDM, GNOME 46+) or vendor system-level integration
    Typical security posturePermissive by defaultRestrictive by default

    The architectural change improves desktop security and breaks legacy unattended remote control. The replacement is mediated, consent-based, and per-component, which is more complex but harder to silently subvert.

    Modes

    Attended vs unattended on Wayland

    Both modes work on Wayland in 2026, but they take different paths.

    Attended
    A user is at the keyboard. The remote application calls xdg-desktop-portal RemoteDesktop.SelectDevices and Start, the user grants consent through a dialog, the application receives a PipeWire stream and the input authorization. The persistent session pattern (persist_mode + restore_token) lets the application skip the dialog on subsequent connections after a one-time grant.
    Unattended: portal persistent session
    A stored restore_token lets the application reconnect without a fresh dialog. Useful for some scenarios; does not cover login-screen or pre-reboot, pre-login states.
    Unattended: GNOME headless remote-login
    gnome-remote-desktop integrated with GDM (GNOME 46+), providing RDP-based headless remote login at the greeter and through to the desktop session. A native, system-level GNOME path.
    Unattended: vendor system-level integration
    A vendor-built integration with the desktop environment, providing an enterprise-grade equivalent with fleet management, identity, audit, and cross-platform parity.

    For more, see What is unattended remote control on Wayland? and Why unattended remote desktop is hard on Wayland.

    Frequently asked questions

    Evaluate Wayland support with confidence

    Read the deep-dive guide, or jump straight to the verified compatibility matrix for your distro and greeter.

    Read: Why unattended remote desktop is hard on WaylandValidate Wayland support for your distro and greeter

    We use cookies to understand how you use DeviceView.