A dead router, an open remote-access tool or a housemate on your IP address can cost you a final table, an account or a bankroll. Here is the setup that keeps you online, keeps other people out, and stays inside your site's rules.
Site rules checked 7 November 2026. Also as a PDF. Written for a Windows desktop that plays for real money, including houses where several players grind on shared money. On a laptop or a Mac, the parts on accounts, networks, power and people still apply.
What a bad setup costs
Three failures, three ways to lose more than a buy-in. Every part of this guide closes one of them.
Put your own number on it. Whatever your weekly schedule is worth in expected value is what one of these failures takes from you, and from anyone who backs you.
What runs where
GGPoker's October 2026 rules make this the first decision. Three devices, each with one job, and the play PC never has to explain itself.
Three devices, three jobs. The play PC holds the client and nothing that a site could question.
Do it in this order
The early steps cost little and protect the most.
Check your site's rulesKnow what may run next to your client.
Clean up the poker PCRemove remote access and everything it does not need.
Secure your accountsUse a password manager and app-based 2FA.
Separate your networksPoker PC on a cable, friends on guest Wi-Fi.
Add a UPSCover the PC, router and modem.
Add a mobile backupOn a different carrier, tested on each site.
Set up backups and a rebuild planMake sure you can rebuild from nothing.
Part 1
Site rules decide your software
Your site's rules outrank everything else in this guide, and they just got stricter. On 15 October 2026, GGPoker announced that from December 2026 no third-party poker software may run alongside its client, including the trackers and HUDs it used to tolerate.
GGPokerPost of 15 Oct 2026, in force from December 2026
Banned Third-party poker software while the client runs: trackers, HUDs, equity tools and hotkey software. The list is open-ended.
Allowed Stats from your own play, fixed hotkeys and macros.
Not while open Equity, GTO, ICM and range tools, even with no tables running.
Never Bots, real-time advice, datamining.
ACR Poker banned virtual machines and real-time screen sharing in August 2023 and requires the client on a native drive. Only these pages were read for this guide. Rules change, and your site's current page always wins.
If you play GGPoker, checking your tools is your job. Compare everything on your PC with GGPoker's current post and decide before you play. Its list is open-ended, and this guide cannot clear any tool for you.
GGPoker's post names Jurojin, PokerTracker 4, Hand2Note, Holdem Manager 3, StarsCaption, DriveHUD 2, Intuitive Tables, Lobbyze, Equilab and AutoHotkey. The ban starts in December 2026 and the post spells out no penalties, so be clean before then.
Four rules that follow
Separate play from studyTrackers, solvers and equity tools live on a different PC from the client.
Closed means closedA tool in the system tray is still running. Exit it fully, or keep it off the play PC.
Coaching and stable chat off the play PCCalls, Discord and screen sharing happen on the study PC or your phone, never with the live client on screen.
Schedule and alarms on your phoneMUCHO·MOTA reads nothing from the client and touches no decision at the table. That is our reading of GGPoker's rule, not GGPoker's confirmation.
Hand histories. PokerStars writes them on the play PC. A one-way synced folder carries them to the study PC, so no USB stick ever touches the play PC. GGPoker writes none; PokerCraft is what you get there.
One desk, two PCs
You do not need two desks. A KVM switch puts one keyboard, mouse and monitor on both machines, and some Dell UltraSharp monitors have the switch built in, with picture-by-picture so both PCs share the screen at once. The play PC runs Windows on the metal, because sites ban the client in a virtual machine. Everything else is free to be virtual: on the second PC, run the study tools in one VM and browsing, email and Discord in another, and snapshot them before you try anything new.
One desk, two machines. The play PC stays bare metal, and everything else is free to be virtual.
One-PC versions exist too: a dual boot with a poker install and an everyday install, or VMs on the poker PC that only run between sessions. Build what suits you, but the rule does not move. The client runs on bare metal with nothing beside it, and everything else is fully shut down before it opens.
Part 2
Router and network: the poker PC stands alone
Plug the poker PC in by cable on its own network, and put everyone else on a different one. A friend's infected laptop or a cheap smart plug then cannot reach the machine that holds your accounts.
The whole setup. Two internet lines feed one router, and the poker PC sits alone on a cable.
That picture is the full build. Most home routers offer one guest network, so start with the minimum below and grow into it.
Other people's devices are the risk you cannot control. Walls between networks contain them.Three ways to get there, from what you already own to one router that does everything.
Lock down the router
Change the admin passwordThe default one is often printed on the box.
Turn off remote adminNobody should manage it from the internet.
Fix the Wi-Fi settingsUse WPA3, or WPA2 with AES. Turn off WPS.
Turn on auto-updatesReplace a router that no longer gets them.
Turn off UPnPUnless something you use stops working.
Leave DNS aloneDo not change it on a stranger's advice.
Two players, one house
Several accounts behind one address is the most common reason a site opens an investigation, and separate networks do nothing about it. In a stable house this is the headline risk, not a footnote.
Separate networks protect your PC. They do not hide a second account from the poker site.
Ask the site firstBefore a second player sits down at your address, ask support how it handles household accounts.
Never the same tableNot a cash table, not a small Sit & Go, not a satellite.
Own devices, own loginsNobody logs in to their account on your PC, or you on theirs.
Own payment railsShared cards, wallets and exchange accounts link accounts as surely as a shared IP.
Part 3
Backup power: protect the whole chain
A UPS is a battery unit that keeps your gear running when the power cuts out. Protecting only the PC is the most common mistake.
A power cut still drops you if the router or modem goes dark.Everything between you and the internet goes on the battery, and nothing else does.
How to choose and test one
Measure your real loadUse a plug-in power meter during a normal session, and add up the watts.
Buy on watts and runtimeChoose a rating above your load, then read the runtime from the maker's chart. VA alone tells you little.
Prefer pure sine waveMany modern PC power supplies can misbehave on simulated sine wave units.
Set the goal from your own outagesShort flickers only need a ride-through. For long cuts, a laptop and hotspot usually beat a bigger battery.
Pull the plug and time itDo this outside sessions with no tables open, twice a year. Batteries wear out.
Fibre usually survives a local cut, because the street side needs no power. Cable and DSL cabinets run on small batteries and go dark within minutes to hours. If your line dies early in every outage, the mobile backup in the next part is your real plan.
When the battery runs low, finish the hand, sit out and shut down cleanly. Disconnect protection varies by site, so never count on it as your plan.
Part 4
Mobile internet: a second line you have tested
Keep a mobile connection on a different carrier from your home line. Failover keeps you playing, but it changes your public IP address, so learn how your site reacts while no money is at stake.
Pick the backup that matches how much a dropped session costs you.
What happens when your line fails
Your home line dropsThe tables freeze for a moment.
The backup takes overAutomatically on a 4G/5G router, by hand on a hotspot.
Your public IP address changesTo the site, you now appear on a new network.
Your client reconnectsPractise this, so you know how long it takes.
The site may ask you to verifyHave your email and 2FA ready on your phone.
Watch where your traffic comes out
Many roaming and travel SIMs send your traffic out through another country. Use a SIM from where you play.
Location checksA mobile IP can map to another city. Confirm your backup passes them.
VPNs and proxiesDo not use them by default. GGPoker's client alerts on proxies. Check your site's terms.
Data useMark the mobile connection as metered so large updates wait.
Monthly drillUnplug the home line outside sessions, and time the reconnect.
Part 5
Controlling the PC: one machine, one job
The poker PC plays poker and does nothing else. Fewer programs mean fewer ways in, and fewer things a site's security checks can question.
Windows 11, installed directlyWindows 10 lost support in October 2025. No virtual machines.
Two Windows accountsA standard one for play, and a separate admin one for installs.
Encrypt the driveUse BitLocker or device encryption, with the recovery key stored elsewhere.
Lock it every timeUse a strong password or PIN, Win+L, and a short idle lock.
Update on your scheduleSet active hours, and patch in a fixed slot outside sessions.
Remove the extrasNo games, cracked software, email, chat, torrents or browser extensions.
Keep Defender onNever add an exclusion because a download told you to.
Audit what startsReview startup items with Autoruns after any install.
Never sleep mid-sessionTurn off sleep, hibernation, USB selective suspend and fast startup.
No surprise restartsPause updates for the week of a series. Remove game launchers and GPU auto-updaters.
Quiet screen, right clockDo not disturb on during sessions, and the clock set to sync automatically so start times and alarms match.
No wallets on the play PCWallet apps, seed phrases and exchange logins live on your phone or a hardware wallet.
Protect your email first
Whoever controls your email can reset almost everything else, so protect it first.
Use a password manager, and authenticator-app 2FA on your site, email and wallet accounts.
No remote access on the poker PC
Nobody views or controls your live client. Coaching happens on the study PC.
Uninstall TeamViewer, AnyDesk, RustDesk and similar tools rather than just closing them. ACR bans real-time screen sharing, and GGPoker's client now alerts on remote-control tools.
On GGPoker, turn on Client Security. Game Settings has four optional features: Screen Guard, Connection Monitor, Allowed Processes and DNS Check. Only allow an app if you recognise it and installed it yourself.
If you think someone got in
Leave and disconnectLeave your tables as soon as it is safe, then unplug the PC from the network.
Change passwords from a clean deviceChange site, email and wallet passwords on your phone, and sign out other sessions.
Contact your site's supportMove any funds you control out of reach of the exposed accounts.
Wipe and rebuildRebuild from your list. Do not simply clean the PC and carry on.
Part 6
Physical access: nobody else touches it
Nobody else uses the poker PC: not a friend, partner, child, coach or repair shop. This part is written for a house where several people grind on shared money. Solo at home, the first four tiles are enough.
Someone with hands on the machine can undo most of this guide. Friends get guest Wi-Fi, not your PC.
Friends get guest Wi-Fi onlyNo cable, no poker network, no quick login, no charging from its USB port.
No outside USB sticksUse only drives you bought and keep yourself.
No shared accounts or seatsNobody else logs in to your account or plays your seat.
Keep accounts on their own devicesShared devices can link accounts in a site's eyes.
Protect the roomLock the screen when you stand up, and keep cameras and visitors off your cards.
Protect the firmwareTurn on Secure Boot, set a BIOS password, and disable USB boot.
RepairsKeep encryption on, remove the drive if you can, and change passwords afterwards.
TravelKeep the laptop with you, use your own hotspot, and check your site allows play from that country.
Part 7
Backups: prove you can rebuild
A backup only counts once you have restored from it.
A fire, a thief or ransomware cannot reach all three at once.
What to back up
When
Why
Hand histories and tracker database
After sessions, synced one way from the play PC
Hands cannot be recreated. Tournament results also sit in your MUCHO·MOTA account; hands do not.
Password vault
When it changes
Losing it locks you out
2FA recovery codes
When issued, on paper
A lost phone should not cost you access
Rebuild list
When it changes
It rebuilds the PC
Settings, hotkeys, notes, HUD layouts
Monthly
They take hours to set up again
The best recovery plan for a dead PC is a spare laptop that is patched, encrypted and ready to play on. Keep it clean to the same standard as the main PC.
Part 8
Write your PC down
A PC you can describe is a PC you can rebuild. Keep one page that says what is on the poker PC and how it is set, and rebuilding after a wipe, a dead drive or a break-in becomes an afternoon of following your own list instead of a week of guessing. No scripts needed: it is three websites and a handful of settings.
Clean Windows installDirectly on the PC, never in a VM. Encrypt it before anything else goes on.
Settings before softwareTwo accounts, update slot, sleep and fast startup off, Defender on, Do not disturb.
The client from your site's own pageType the address yourself and check it. Never from a link, a forum or a friend's USB stick.
The few utilities you actually usePassword manager and backup tool, from their makers' sites. Nothing else.
Restore your backupSettings, notes and hotkeys on the play PC. The database belongs on the study PC.
Run the checklist againThen take a new copy of this list and put it with your backups.
The list itself is a plain text file. Something like this, in your own words:
POKER PC, rebuild list, kept with the backups
Windows 11, installed directly. BitLocker on, recovery key in the vault.
Accounts: "play" (standard), "admin" (admin, installs only).
Settings: sleep off, fast startup off, active hours set, Do not disturb
in sessions, clock on auto-sync, updates paused in series weeks.
Client: PokerStars from my country's PokerStars site. GGPoker from
its download page. Typed in, not clicked.
Utilities: password manager, backup tool. Nothing else.
Network: cable to the poker port on the router, Wi-Fi off on the PC.
GGPoker: Client Security on, four features.
Restore: settings and notes from backup, hand-history folder re-linked.
Update it whenever something changes. A list that is six months old rebuilds a PC that is six months old.
Part 9
Checklist
Tick these off in order, and redo the tests after any big change.
Running a stable? Make this list part of onboarding. The bankroll on the line is partly yours, and every item here is a condition a backer can reasonably set before money moves.
Rules
Read the current tool rules for every site you play
Move trackers, solvers and equity tools to a study PC, or confirm your site allows them
Coaching calls, Discord and the schedule run on the study PC or phone
Hand histories sync one way, play PC to study PC
Poker PC
Windows 11, installed directly on the PC
Standard account for play, separate admin account
Encryption on, recovery key stored elsewhere
Remote-access tools uninstalled
Email, chat, games and browser extensions removed
Password manager and app-based 2FA on site, email and wallet
GGPoker Client Security turned on, if you play there
Sleep, hibernation and fast startup off; updates paused for series weeks
Wallets and seed phrases off the play PC
Hardware KVM only, no mouse-sharing software on the play PC
Network
Poker PC on a cable, on its own network
Friends on guest Wi-Fi, devices on their own Wi-Fi
Router password changed, remote admin and WPS off, updates on
Site asked about household accounts before a second player plays from your address
Power and backup line
UPS covers PC, monitors, router and modem
Pull-the-plug test done, runtime written down
Mobile backup on a different carrier, tested on each site with no tables running
People and recovery
Nobody else uses the PC, your accounts or your seat