Remote Worker Security: Protect Your Devices and Accounts on the Move

Coworkism earns from purchases made through the MaviGadget links in this post.

The basics protect remote workers best: a unique long password for every account, a password manager, two-factor login, automatic updates, an encrypted laptop and regular backups. A VPN adds protection on shared Wi-Fi, but it is an extra layer and not a replacement for any of these.

Why does security matter more when I work away from home?

At a coworking space, cafe or shared flat you use a network that other people also use, and you do not control it. You also carry the laptop around, so loss and theft are bigger risks than for an office desktop. If you handle client files, a single compromised account can affect more than just you.

How should I set up passwords and logins?

Use a different password for every account. If one service is breached, a reused password lets attackers try it everywhere else. CISA advises long, random and unique passwords stored in a password manager, which is easier than memorising dozens.

1. Pick a reputable password manager and protect it with a strong main passphrase.
2. Let it generate long random passwords for each account.
3. Turn on two-factor login, starting with your email, then banking, cloud storage and work tools.
4. Prefer an authenticator app or a hardware key over text messages where the service allows it.

Start with email. Anyone who controls your inbox can request password resets for your other accounts.

What should I do about updates and encryption?

Updates fix known security holes, so install them for your operating system, browser and apps. Turn on automatic updates where you can. CISA also covers this in its guidance on updating software.

Turn on full-disk encryption. Windows offers BitLocker on supported editions and macOS has FileVault. Phones have encryption built in when a passcode is set. Use a strong passcode, not a short PIN, and enable remote locate and wipe in case a device goes missing.

Antivirus is worth having on Windows, and the built-in tools are enough for many people. Whatever you use, keep it updated and avoid installing software from unknown sources.

Is public Wi-Fi safe to use?

Treat it as untrusted. Most websites use HTTPS, which protects the content of your traffic, but you should still reduce your exposure.

• Confirm the network name with staff, since fake networks can imitate real ones.
• Turn off auto-connect to open networks.
• Use a VPN from a provider you trust for work on shared networks. It hides your traffic from the local network, but you are placing trust in the VPN company instead.
• Use your phone hotspot for banking or other sensitive tasks if you are unsure of the network.
• Lock your screen whenever you step away, even for a minute.

If your connection is also unreliable, our guide to reliable internet for remote workers covers backup options.

How do I avoid phishing and scams?

Most account takeovers begin with a message that tricks someone, not with a technical attack. The FTC explains how to recognise and avoid phishing scams. Common signs are urgency, requests for passwords or codes, and unexpected links or attachments.

Do not click. Open the website or app yourself, or contact the sender through a number you already know. Never share a login code with anyone who contacts you, however official they sound.

What should I back up, and how?

Keep your work in more than one place. A simple approach is one cloud copy that syncs automatically and one offline copy on an external drive that you update regularly. Test a restore occasionally, because a backup you have never opened may not work. Store the drive separately from your laptop bag.

How do I keep my setup secure while travelling between workspaces?

Carry less. A light, purpose-built kit has fewer things to lose, and our portable home office kit article shows what is worth packing. Use a privacy screen filter if you often work in busy rooms, never leave a laptop unattended at a shared desk, and keep device serial numbers in a safe place in case you need to report a loss.

When should I ask for more help?

If you work for a company or handle client data, follow their security policy and ask the IT or security contact before using your own tools. If you suspect an account is compromised, change the password from a clean device, sign out all sessions and tell your client or employer promptly. For banking fraud, contact your bank straight away.

If you also work out of shared offices, our overview of how coworking spaces support small businesses may help you choose a space with good facilities. For security-related hardware, you can browse the security gadgets collection at MaviGadget.