Learning Objectives

By the end of this chapter, you will be able to:

  • Define TELNET and its primary purpose.
  • Understand how remote login works.
  • Identify the security limitations of traditional TELNET.
  • Compare TELNET with SSH and other modern remote access tools.
  • Explain the business uses and risks of remote access.

What is Remote Login?

Remote login means accessing and controlling a computer from another location over a network, as if you were sitting in front of it. The computer you use is the client (local machine); the computer you control is the server or host (remote machine).

What is TELNET?

TELNET (Teletype Network) is a network protocol used on the Internet or local area networks to provide a bidirectional interactive text-oriented communication facility using a virtual terminal connection.

In simpler terms, TELNET allows a user to connect to a remote computer (the server) and issue commands as if they were sitting directly in front of that remote machine. This process is commonly known as remote login.

TELNET was developed in 1969, making it one of the oldest internet protocols, and it works through a command-line (text-only) interface.

How TELNET Works

When you use a TELNET client, you connect to a TELNET server using an IP address and a specific port (traditionally port 23). Once connected, the client acts as a “dumb terminal”—it passes your keystrokes to the server and displays the text output coming back from the server.

  1. Client Request: The user types a command to establish a connection.
  2. Authentication: The remote system asks for a username and password.
  3. Execution: The user enters commands which are processed by the remote CPU.
  4. Output: The results are sent back across the network to the user’s screen.
sequenceDiagram
  participant C as TELNET client (your PC)
  participant S as TELNET server (port 23)
  C->>S: Connect to server IP on port 23
  S->>C: Login prompt
  C->>S: Username and password (sent as plain text)
  C->>S: Command, e.g. show system status
  S->>C: Text output of the command

Example command: telnet 192.168.1.1 23 opens a TELNET session to a device at that address.

Uses of TELNET

Historically, TELNET was widely used by system administrators and developers to:

  • Configure networking equipment like routers and switches.
  • Access remote databases and mainframe systems.
  • Manage web servers and file servers remotely.

Today, network technicians still sometimes use a TELNET client to test whether a port is open on a server (for example, whether a mail server is accepting connections on its port), and some old devices on closed internal networks still support it.

The Security Problem with TELNET

The major drawback of TELNET is that it transmits all data—including usernames and passwords—in plain text. This means anyone monitoring the network (using packet sniffers) can easily steal credentials.

Because of this severe security vulnerability, TELNET has largely been replaced by SSH (Secure Shell), which encrypts the entire communication channel, making it much safer for remote administration over the Internet.

TELNET vs SSH

Aspect TELNET SSH (Secure Shell)
Security No encryption; plain text Fully encrypted session
Default port 23 22
Authentication Username and password only Password or secure key pairs
Use today Testing and legacy devices only Standard for remote server administration
Example command telnet 192.168.1.1 ssh admin@192.168.1.1

Other Remote Access Methods

  • RDP (Remote Desktop Protocol) — Microsoft’s protocol for controlling a Windows computer’s full graphical desktop remotely.
  • VNC (Virtual Network Computing) — shares a computer’s screen across platforms.
  • Remote desktop apps — tools such as AnyDesk, TeamViewer, and Chrome Remote Desktop let support staff help users over the internet.
  • VPN + remote access — staff first connect to the office network through an encrypted VPN, then log in to internal systems.

Business Uses and Risks of Remote Access

Uses

  • IT staff manage servers and network devices in data centers without travelling.
  • Help desks fix employees’ computer problems remotely.
  • Employees work from home on office systems.
  • Vendors support software installed at client sites.

Risks and controls

  • Stolen passwords can give attackers full control — use SSH keys and multi-factor authentication.
  • Scammers pretend to be “technical support” and ask victims to install remote desktop apps — never give remote access to unknown callers.
  • Open remote access ports attract automated attacks — restrict access with firewalls and VPNs.

Business Scenario

A bank in Kathmandu manages routers in branches across Nepal. Earlier, its technicians used TELNET, sending admin passwords across the network in plain text. After a security audit, the bank disabled TELNET, switched all devices to SSH with key-based login, and required staff to connect through a VPN first. Remote management continued, but intercepted traffic is now unreadable.

Summary

TELNET was one of the foundational protocols of the early Internet, allowing users to remotely log in to and control distant computers through a text-based terminal on port 23. While it established the blueprint for remote administration, its lack of encryption has made it obsolete for modern, secure communications, having been superseded by SSH. Today, organizations use SSH, RDP, VNC, and remote desktop apps—protected by VPNs, firewalls, and multi-factor authentication—for safe remote access.

Key Takeaways

  • Remote login lets a user control a distant computer over a network.
  • TELNET is a text-based remote login protocol that uses port 23.
  • TELNET sends everything, including passwords, in plain text, so it is insecure.
  • SSH (port 22) encrypts the session and has replaced TELNET.
  • RDP, VNC, and remote desktop apps provide graphical remote access.

Review Questions

  1. What is TELNET? Explain how remote login works.
  2. Why is TELNET considered insecure?
  3. Differentiate between TELNET and SSH.
  4. Discuss the business uses and security risks of remote access tools.