A PIN the server never sees
Your password gets you the machine list. A separate PIN, set on the host and never written to its disk, is what actually unlocks a session. Someone who learns your password still cannot connect.
Remote desktop that connects to computers you own. On the same network they find each other directly and need no internet at all. Everywhere else they meet through this server — which relays the handshake without ever being able to read it.
Your password gets you the machine list. A separate PIN, set on the host and never written to its disk, is what actually unlocks a session. Someone who learns your password still cannot connect.
On one network, machines discover each other over mDNS — the same mechanism a network printer uses. No server, no router configuration, no IP addresses typed by hand.
This site is one instance. The whole thing is open and self-contained — run it on a VPS, a NAS, or a spare machine, and your data never touches anyone else’s server.
Four steps, and the third is the one that matters.