Working Safely Away From Your Desk: Laptop and Data Security

When you work outside your own office, three things most often go wrong: a device is stolen or left behind, you connect to an unsafe network, or someone tricks you into handing over a password. A few habits, set up once, cover most of the risk.

Which risks matter most in shared workspaces?

Coworking desks, cafes, libraries and hotel lobbies share the same weak points:

• Opportunistic theft: a laptop or phone left for two minutes at a table.
• Shoulder surfing: someone seeing your screen or watching you type a password.
• Untrusted networks: open Wi-Fi anyone can join.
• Phishing: messages that pretend to be a client, bank or colleague.

How do I protect my devices?

Keep your laptop with you, or locked away, whenever you leave your seat. Do not ask a stranger to watch it. In a coworking space, use the lockers or lockable cabinet if there is one, and ask the host how visitors are admitted.

• Lock the screen every time you stand up. It takes a keyboard shortcut.
• Use a strong login and enable full-disk encryption, which both major desktop systems offer built in.
• Turn on a find-my-device feature so you can lock or wipe a lost laptop.
• Sit with your back to a wall where you can, so your screen is harder to see.
• Consider a privacy filter if you handle confidential client material in busy places.

Is public Wi-Fi safe for work?

Assume an open network is not private. Most websites now encrypt traffic, but you cannot be sure the network itself is what it claims to be, since fake hotspots with a convincing name are easy to set up.

1. Ask staff for the exact network name and password rather than choosing a similar-looking one.
2. Use a reputable VPN, or share your phone's connection, for anything sensitive.
3. Keep your system and browser updated.
4. Turn off automatic file sharing on shared networks.

If your connection is simply unreliable rather than unsafe, see our guide to reliable internet for remote workers.

How do I avoid being tricked?

Phishing works because it feels urgent. A message says an invoice is overdue, an account is locked, or a client needs a file right now. The US cybersecurity agency explains how social engineering and phishing attacks work and how to spot them.

• Do not click a link in an unexpected message. Go to the site yourself.
• Confirm payment-detail changes by calling a number you already have.
• Use multi-factor sign-in on email, banking and cloud accounts.
• Use a password manager so each account has its own password.

What if the worst happens?

Decide your steps before you need them. If a laptop is lost or stolen:

1. From another device, change the passwords for your email and main accounts.
2. Lock or wipe the device remotely if you enabled that.
3. Tell your employer or clients if their data was on it. Many contracts require prompt notice.
4. Report the theft to the space manager and the police, and contact your insurer.

The FTC's cybersecurity guidance for small businesses is a useful checklist if you work for yourself and want a baseline policy for your own business. For legal duties about client data, ask a lawyer, since they vary by country and industry.

How should I back up my work?

Use automatic cloud sync for active files and keep a second copy, such as an external drive at home. Test a restore once, because a backup you have never opened may not work. Keep client files in a folder you can find quickly, so you know exactly what was on a lost device.

Which gear helps?

Small items make a real difference: a laptop lock cable for desks that allow it, a webcam cover, a compact power strip and a padded sleeve. Our portable home office kit lists the setup we suggest for working away from a fixed desk.

Does where I work change the rules?

Yes. A staffed coworking space with controlled entry and lockers is generally easier to secure than a busy cafe. If you handle sensitive client work, choose the space accordingly, and consider a private office or booked room for calls. You can also meet people in a space with a good community, as covered in our piece on meetups and building community, which gives you people to ask about local advice and trusted places to work.

A short routine to keep

• Before leaving home: charge, update, back up.
• On arrival: confirm the network, sit where you can see the room.
• While working: lock when you leave your seat, never leave the bag.
• At the end: sign out of shared computers, and check the table before you go.

None of this takes long once it is routine, and it protects both your income and your clients' trust.