Remote and hybrid work expanded the boundaries of the corporate network to home offices, coffee shops, and airport lounges. Each of those locations carries different risks. This guide covers the essentials—WiFi security, VPN usage, device hardening, secure conferencing, physical security, and safe file sharing—wherever you work.
Home WiFi Security
Lock Down the Router
Secure Your Router
- Change the default router admin password—many are shipped with widely known defaults
- Use WPA3 (or WPA2 at minimum) encryption; never leave WiFi open
- Set a strong, unique WiFi password—not your address or phone number
- Rename your network (SSID) so it doesn't reveal the router model or your name
- Keep router firmware updated—check the manufacturer's app or admin page quarterly
- Set up a separate guest network for visitors, smart home devices, and personal devices, keeping work devices isolated
VPN Usage
A Virtual Private Network (VPN) encrypts traffic between your device and your company's network or the internet, protecting data from being intercepted—especially important on shared or public networks.
Using Your Company VPN
VPN Best Practices
- Always connect to your company VPN before accessing internal systems, email, or shared drives remotely
- Never disable the VPN to "speed things up"—if it's slow, report it to IT rather than bypassing it
- Use company-approved VPN software only—avoid free consumer VPNs for work use, as some log or sell your data
- Enable "always-on" VPN settings if your organization supports it, so connections are protected automatically
- If your VPN disconnects, stop working on sensitive data until it reconnects
Device Hardening
Remote Work Device Checklist
Secure Video Conferencing
Protect Your Meetings
- Use a waiting room or lobby feature so hosts approve entry
- Require a meeting password for sensitive discussions
- Don't reuse the same meeting link/room for every call
- Be aware of what's visible behind you—use a blur or virtual background for sensitive environments
- Mute notifications and lock your screen when stepping away mid-meeting
- Only share your screen after closing unrelated sensitive documents or tabs
Physical Security at Home & On the Go
Don't Overlook Physical Risks
- Lock your device screen every time you step away, even at home
- Store laptops out of sight in vehicles—never leave them visible in a parked car
- Use a privacy screen filter in public spaces to prevent shoulder surfing
- Keep work devices separate from household members' devices and accounts
- Shred or securely dispose of printed sensitive documents at home
- Report a lost or stolen device to IT immediately—delays widen the exposure window
Safe File Sharing
DO Share Files This Way
- Use company-approved cloud storage (SharePoint, OneDrive, Google Workspace, etc.) with access controls
- Set expiration dates and permissions on shared links when possible
- Verify the recipient's email address before sharing sensitive files
- Use encrypted file transfer for highly sensitive data
DON'T Do These Things
- Don't email sensitive files as unencrypted attachments
- Don't use personal cloud storage (personal Dropbox, Gmail, etc.) for work files
- Don't use USB drives to move sensitive data between devices without encryption
- Don't leave shared links set to "anyone with the link" for confidential material
Setup Checklist: Get This Right Before You Start Working
Home Office Setup
Device Location Scenarios
At Home
- Use your secured home network, not a neighbor's open WiFi
- Keep smart home/IoT devices on a separate guest network
- Lock your screen when family members are nearby
- Store devices securely when not in use
Coffee Shop / Public WiFi
- Always connect to VPN before doing any work
- Verify the network name with staff—fake lookalike hotspots are common
- Use a privacy screen and sit facing away from open sightlines
- Never leave your device unattended, even briefly
Airport / Travel
- Avoid public charging stations for data cables—use your own charger/outlet
- Keep devices in carry-on luggage, never checked bags
- Use cellular hotspot instead of public WiFi when handling sensitive work
- Enable device tracking/remote wipe before you travel
Client Site / Shared Office
- Confirm you're joining the intended network, not a similarly named guest one
- Don't leave printed materials on shared desks
- Log out of accounts on any shared or borrowed computer
- Use your VPN even if the site's network feels "trusted"
Common Mistakes and Fixes
| Common Mistake | Fix |
|---|---|
| Using the router's default admin password | Change it immediately and store the new one in a password manager |
| Skipping the VPN because it's "slow" or "annoying" | Report performance issues to IT rather than working unprotected |
| Saving work files to a personal cloud account | Use only company-approved, access-controlled storage |
| Letting family members use a work laptop | Keep work and personal devices completely separate |
| Leaving a laptop unlocked "just for a minute" | Lock the screen every single time you step away |
| Joining video calls from public WiFi without a VPN | Connect VPN first, or use a personal hotspot for sensitive calls |