Hybrid and fully remote work has been the norm for millions of Americans for the past five years. While working from home or on the go offers flexibility, it also comes with cybersecurity risks.
To learn about the simple tools and habits you’ll need to protect your devices, data, and your employer’s system from cybercriminals, check out our guide below.
Secure Your Devices and Networks from Day One
The first thing you should do with your work device is check that it has reputable antivirus software installed.
Most employers will do this before handing you a work laptop, but it’s always a good idea to double-check. Remember to enable your device’s firewall, which acts as a first line of defense against hackers.
You should always keep your operating system and apps fully updated for both your personal and work devices. Many software updates contain critical security patches that close off vulnerabilities, so enable auto-update.
When working from home, your Wi-Fi router should be just as secure as your computer. Visit your router’s settings to ensure it’s using WPA3 or WPA2encryption. Avoid using public Wi-Fi at cafés or airports without additional protection.
If you need to connect to complete a work task or join a Teams meeting, use a VPN, or Virtual Private Network, to alter your IP address and encrypt your data. It will significantly reduce the likelihood of attackers intercepting your activity.
Use Strong, Unique Passwords for Every Account
Reusing the same basic password for multiple accounts is one of the easiest ways to get hacked. Instead, create complex, unique passwords made up of at least 16 random characters for every login. Hard-to-guess passwords are essential for work platforms, email accounts, and cloud storage services.
One of the best ways to do this is by using a password generator, which can create strong, random passwords that are hard to guess or crack. Look for a generator that offers combinations that can adapt to different website requirements, and the option to choose between passphrases or passwords. A passphrase made up of unrelated words can be easier to type and remember.
You should integrate it with a password manager to store your login credentials in a centralized location. Instead of having to remember hundreds of passwords, you’ll only need to remember one or a master PIN to gain access.
Stay Alert to Phishing and Social Engineering Tactics
Phishing is consistently reported as one of the most common and effective cyberattacks in the United States, and remote workers are among the primary targets. They typically arrive via email or text and aim to trick users into clicking on fake links, downloading malicious attachments, or entering login details on spoofed websites that closely resemble the real thing.
Before clicking on anything included in the message, always check the sender’s email address carefully. Be cautious of suspicious messages that urge action, especially if they request that you verify login credentials or enter financial information.
If something feels off, don’t click on it. Instead, verify directly with your company’s IT team or use an official platform to log in.
Your company should have two-factor authentication (2FA) enabled for most logins. It adds a security layer by requiring a second form of verification, typically a code sent to your smartphone, before granting access to your account.
Even if hackers steal your login information, they will find it more difficult to pass the second factor of authentication.
