Skip to content

Teleport: Session recording

What is session recording?

observer: Observer can play all sessions. recorded sessions: when user login to ssh server and type commands, this is nice that we can see/learn how someone make something. For this our user need to have proper Access/Rule.

How session recording carries some security risks?

On first read on the teleport docs: this security risk is when "observer" on recorded session can see when user see passwords or type passwords in text format. So most important thing is observer permission to be given to the Super-Admins. If we use session recording on windows (works only for computers joined in ad) the session recording is in gif format so will take more space. otherwise the linux is terminal\text base to time stamps and text...

Most of the password are *** or hidden text so observer can't see it. But when user reveal the password) observer will see it.