Working Safely in Shared Spaces: Device and Data Security Basics

Working in a coworking space or cafe is safe enough if you treat your laptop like an open wallet: lock it whenever you step away, keep accounts protected with unique passwords and a second sign-in step, and back up your files somewhere else. Most losses in shared spaces come from ordinary slips, not sophisticated attacks.

What are the real risks of working in a shared space?

The risks are mostly simple. A laptop left open while you fetch a coffee, a screen visible to the next table, a phone charger swapped for an unknown one, a convincing phishing email that arrives during a busy day. Shared Wi-Fi adds a further layer of uncertainty, because you do not control who else is on the network.

None of this means you should stay home. It means building a few repeatable habits so that a lost bag or a mistaken click does not become a lost client.

How do you protect the device itself?

• Lock the screen every time you stand up. Set a short automatic lock as a backstop.
• Use full-disk encryption. Current Windows, macOS and many Linux setups offer it; turn it on so a stolen laptop is not an open book.
• Enable device tracking and remote wipe from the manufacturer or your company's IT tools.
• Use a privacy screen if you regularly handle client documents near other people.
• Keep the laptop within reach, not on a seat back or under a chair. A lock cable helps in spaces without lockers.

Small items count too. Carry your own charger and cable, and avoid plugging into unknown USB ports or unfamiliar docking stations.

How should you protect accounts and passwords?

Stolen devices are rarer than stolen logins. Give every account its own long password and store them in a password manager, which is the approach the US cybersecurity agency recommends in its guidance on strong passwords. Add a second sign-in step wherever it is offered, starting with email, banking and any admin accounts for client work.

Phishing is the other common route in. Be wary of urgent messages that push you to click, log in or move money. CISA explains how to spot these in its page on avoiding social engineering and phishing attacks. If a request seems off, confirm it through a different channel before acting.

Is public or shared Wi-Fi safe to use?

It is workable with care. Most modern sites use encrypted connections, but you still do not know who else is on the network or whether the network name is genuine. Confirm the exact network name with staff, avoid sensitive tasks on open networks, and switch to your phone's hotspot when you need to handle banking or confidential files.

A VPN adds a protective layer between you and the local network, though it does not fix weak passwords or phishing. If you often work from different places, your own reliable connection is worth the effort; see our guide to reliable internet for remote workers.

What should you back up, and how?

Assume any device can be lost. Keep working files in a cloud folder or synced storage, and add a second copy such as an external drive kept at home. Test a restore occasionally, because a backup you have never opened may not work when you need it.

If you work with a team, agree where client files live so nobody keeps the only copy on a personal laptop.

How do you handle meetings and calls in an open room?

• Use headphones and book a phone booth or meeting room for confidential calls.
• Do not leave notebooks, printouts or whiteboard notes with client details behind.
• Turn off notification previews when sharing your screen.
• Close tabs and apps you do not intend to show before presenting.

If you host sessions for others, a coworking space can make this easier, as we cover in hosting workshops in coworking spaces.

What if something goes wrong?

Act quickly and in order:

1. If a device is lost or stolen, use remote lock or wipe and tell the space manager.
2. Change passwords for the main accounts from another device, starting with email.
3. Tell your client or employer promptly if their data may be affected; delays make things worse.
4. Report theft to the police if appropriate, and check your insurance for equipment cover.

If your work involves regulated data, such as health or payment information, ask your employer's IT or compliance team what rules apply rather than relying on general tips.

What can space operators do?

Operators can help by providing lockers, separating guest and member networks, changing Wi-Fi credentials when members leave, and posting a short notice about lost-and-found and who to call. Clear expectations protect members and the space itself. If you are building a kit of your own gear, our piece on a portable home office lists what is worth carrying.