# Is Remote Command Mode secure?

**URL:** <https://forums.digi.com/t/is-remote-command-mode-secure/17525>\
**Category:** XBee & XBee Gateway\
**Tags:** security, remote, xbee-pro-sx\
**Created:** [October 11, 2016, 7:56am UTC](https://forums.digi.com/t/is-remote-command-mode-secure/17525 "2016-10-11T07:56:48Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![BrendanSimon\_SEPL](https://avatars.discourse-cdn.com/v4/letter/b/8dc957/32.png) [@BrendanSimon\_SEPL](https://forums.digi.com/u/BrendanSimon_SEPL)\
**Post date:** [October 11, 2016, 7:56am UTC](https://forums.digi.com/t/is-remote-command-mode-secure/17525/1 "2016-10-11T07:56:48Z")

</div>

I can configure an XBee (pro-SX) using Remote AT Commands (via XCTU). Is this secure?

I couldn’t see anything in the user guide as to security regarding remote command mode.

Is there a way to disable it, or only enable when needed?

If I’ve setup up a network or XBees, what’s stopping someone else with XCTU from reconfiguring all my devices ?

Thanks, Brendan.

---

<div class="post-metadata">

**Author:** ![asgm](https://sea2.discourse-cdn.com/flex016/user_avatar/forums.digi.com/asgm/32/3688_2.png) [@asgm](https://forums.digi.com/u/asgm)\
**Post date:** [October 13, 2016, 3:33am UTC](https://forums.digi.com/t/is-remote-command-mode-secure/17525/2 "2016-10-13T03:33:07Z")

</div>

Only devices which are an existing part of network can send Remote Commands to each other.

If encryption is enabled then no other device can join network without knowledge of encryption key.

---

<div class="post-metadata">

**Author:** ![BrendanSimon\_SEPL](https://avatars.discourse-cdn.com/v4/letter/b/8dc957/32.png) [@BrendanSimon\_SEPL](https://forums.digi.com/u/BrendanSimon_SEPL)\
**Post date:** [October 13, 2016, 9:02am UTC](https://forums.digi.com/t/is-remote-command-mode-secure/17525/3 "2016-10-13T09:02:48Z")

</div>

I had a feeling that encryption might be the answer.

So Remote Command mode is always available and there is not way to disable it ?

---

<div class="post-metadata">

**Author:** ![asgm](https://sea2.discourse-cdn.com/flex016/user_avatar/forums.digi.com/asgm/32/3688_2.png) [@asgm](https://forums.digi.com/u/asgm)\
**Post date:** [October 13, 2016, 8:55pm UTC](https://forums.digi.com/t/is-remote-command-mode-secure/17525/4 "2016-10-13T20:55:36Z")

</div>

Right, Remote AT command cannot be disabled.