Securing a home office

Home is part of your network now

When staff work from home, the home router, the shared family computer and the kitchen table all become part of your security picture. Home networks are usually set up by an internet provider and never touched again, with default settings and devices that have not been updated in years. Family members, guests and smart devices often share the same Wi-Fi.

You cannot manage every home network, and you should not try. Instead, focus on protecting the work device, securing access to company systems and giving staff clear, simple guidance for the parts of the home setup they control. The steps below cover the essentials. Small improvements at home add up to meaningful protection for the business.

Secure the home router and Wi-Fi

Ask staff to log in to their home router, or ask their internet provider for help, to check a few basics. The administrator password should be changed from the default, the Wi-Fi should use WPA2 or WPA3 with a strong passphrase, and the router's firmware should be updated. Many newer routers update automatically, but older models may not.

If the router offers a guest network, use it for visitors and smart devices such as TVs, speakers and cameras. This keeps them separate from the work laptop. Routers that the internet provider no longer supports should be replaced, since they will not receive security fixes. Ask your internet provider for a newer model if needed.

• Default router admin password changed
• WPA2 or WPA3 with a strong passphrase
• Firmware updated
• Guest network for visitors and smart devices

Keep work and personal use separate

Work should happen on a company-managed device wherever possible. That device should be encrypted, protected by endpoint security, kept updated and set up so that only the employee signs in. Family members should not use it for homework, games or browsing, even briefly, because a single risky download can expose company data.

If staff must use a personal computer, limit access to web-based applications protected by multi-factor authentication, and avoid downloading company files to it. Printing sensitive documents at home deserves thought too. Paper should be stored securely and shredded rather than put in household recycling. Keep the personal computer updated and protected as well.

Physical privacy and safe habits

Home offices often lack doors, so think about who can see or hear work. Lock the screen whenever stepping away, even briefly, and position screens away from windows and shared spaces. Use headphones for confidential calls, and be aware of smart speakers that may be listening in the same room.

Phishing does not stop at the office door. Remote workers may be targeted with messages that appear to come from IT, asking them to install software or approve sign-ins. Staff should know how to reach IT directly and should verify any unexpected request, especially one that involves remote access to their computer.

Make support easy

Provide a short home office checklist and offer help to anyone unsure how to change router settings. A brief video call with the help desk can solve most questions in minutes. Make it clear how to report a lost device, a suspicious message or a possible mistake, and that reporting quickly is always welcome.

Review remote access regularly. Ensure VPN or remote desktop tools are protected with MFA and kept updated, and remove access for people who no longer need it. A secure home office is mostly a matter of good defaults and clear habits, supported by a team that is easy to reach.