Softphones let remote employees make/receive calls through your PBX system from anywhere with internet access, using their computer or mobile device. This guide covers setting this up securely.
Why Softphones Matter for Remote Work
Rather than requiring physical desk phones (impractical for remote employees), softphone applications provide full PBX extension functionality on a computer or mobile device — genuinely essential infrastructure for distributed teams needing unified business phone system access.
Choosing a Softphone Application
Several established SIP softphone applications exist for desktop and mobile — choose based on your team's platform needs (desktop, mobile, or both) and required feature set (basic calling vs advanced features like presence, chat integration).
Creating an Extension for Remote Access
See How to Configure Extensions and Voicemail in Asterisk for base extension setup — each remote employee needs their own PJSIP/SIP extension, configured with credentials for their softphone to register against.
Exposing SIP Registration Securely
Rather than exposing raw SIP registration broadly, consider requiring VPN access (see How to Set Up a VPN Server with WireGuard) for remote softphone connectivity, or ensure TLS-encrypted SIP registration if allowing direct internet-based registration.
Configuring the Softphone Client
SIP Server: pbx.yourdomain.com
Username: 1001
Password: [extension password]
Transport: TLSConfigure the softphone with your PBX's address and the specific extension's credentials — use TLS transport where the client supports it, encrypting SIP signaling in transit.
Setting Up NAT Traversal for Remote Softphones
See How to Configure NAT Traversal for SIP (STUN/TURN) — remote employees are virtually always behind NAT (home routers, mobile carrier NAT); proper STUN/TURN configuration is essential for reliable connectivity, not optional.
Enforcing Strong Authentication
See How to Secure a VoIP Server Against Toll Fraud — remote extensions, being internet-facing, are a genuine target for unauthorized access attempts; enforce strong, unique passwords per extension, never weak or default credentials.
Testing Call Quality from Genuine Remote Locations
Test with actual remote employees on their genuine home/mobile networks, not just from your office network — call quality issues often only manifest under real-world remote network conditions (variable bandwidth, higher latency) rather than controlled office testing.
Setting Up Mobile Softphone Apps
For employees needing mobile access, configure the mobile softphone app similarly — be aware mobile connectivity (cellular networks, background app restrictions) can introduce additional reliability considerations compared to desktop softphones on stable WiFi.
Providing Clear Setup Documentation
Given that remote employees are setting this up without in-person IT support, provide genuinely clear, step-by-step setup documentation for your specific softphone choice and configuration, reducing setup friction and support burden.
Common Errors
Softphone registers successfully but calls have poor quality or fail — almost always a NAT traversal or bandwidth issue specific to the remote employee's network; walk through the diagnostic steps in How to Troubleshoot Common VoIP Quality Issues (Jitter, Latency, Packet Loss) for their specific situation.
Continue Reading
- How to Configure Extensions and Voicemail in Asterisk
- How to Configure NAT Traversal for SIP (STUN/TURN)
- How to Secure a VoIP Server Against Toll Fraud
Browse more articles in VoIP & Communication Servers.
