Remote Work Security

Your Home Office is Now the Perimeter

When you work from the office, you're protected by corporate firewalls, network monitoring, content filters, and physical security. When you work from home — or worse, from a coffee shop — most of those protections disappear. Your home network, your personal router, and the public Wi-Fi at your favorite cafe become the new attack surface.

Remote work isn't going away, so let's make sure you're doing it securely.

Securing Your Home Network

Your home router is the gateway between your work and the internet. Most people set it up once and never touch it again — which means it's probably running outdated firmware with default settings.

Home Router Checklist

1. Change the default admin password — If your router's admin panel is still admin/admin or admin/password, change it immediately. Attackers scan for default credentials.
2. Update the firmware — Log into your router's admin panel and check for updates. Manufacturers release patches for known vulnerabilities.
3. Use WPA3 (or at minimum WPA2) — If your Wi-Fi is using WEP or open/no encryption, anyone nearby can intercept your traffic.
4. Change the default network name (SSID) — Don't broadcast your router model number. A generic name like "HomeNetwork" reveals nothing useful to attackers.
5. Enable the firewall — Most routers have a built-in firewall. Make sure it's turned on.
6. Consider a separate network for work — Many routers support a guest network. Use it to isolate work devices from smart TVs, IoT gadgets, and kids' tablets.

The Dangers of Public Wi-Fi

Coffee shops, airports, hotels, and libraries offer free Wi-Fi. That convenience comes with serious risks.

What Can Go Wrong

• Evil twin attacks — An attacker creates a Wi-Fi network named "Starbucks Free WiFi" that looks legitimate. When you connect, all your traffic flows through their device.
• Man-in-the-middle (MitM) attacks — On unsecured networks, attackers can intercept data flowing between your device and the internet, including login credentials.
• Packet sniffing — Unencrypted traffic on public Wi-Fi can be captured and read by anyone with freely available tools.
• Session hijacking — Attackers steal your session cookies to impersonate you on websites you're logged into.

VPN: Your Encrypted Tunnel

A Virtual Private Network (VPN) creates an encrypted tunnel between your device and your company's network. All your internet traffic travels through this tunnel, making it unreadable to anyone who might be monitoring the network.

When to Use VPN

• Always when on public Wi-Fi
• Always when accessing company resources from home
• Always when connecting from hotels, airports, or shared spaces
• Basically: if you're not in the office, use VPN

VPN Not Connecting? Don't Bypass It.

Securing Your Remote Workspace

Beyond networks, your physical workspace matters too:

• Lock your screen when stepping away — even at home (family, visitors, service workers)
• Use a privacy screen if working in public — prevents visual eavesdropping (shoulder surfing)
• Take calls privately — Don't discuss sensitive work information where others can overhear
• Secure printed documents — If you print work documents at home, shred them when done
• Don't let others use your work device — Not your partner, not your kids, not anyone

Key Takeaways

• Always use VPN on untrusted networks — It encrypts all your traffic, not just web browsing
• Avoid public Wi-Fi for work — Use your phone's hotspot as a safer alternative
• Secure your home router — Update firmware, change default passwords, use WPA3/WPA2
• Never bypass VPN because it's inconvenient — Contact IT for help instead of going without
• Treat your home office like a corporate office — Lock your screen, secure documents, control access
• Use a privacy screen in public — Shoulder surfing is a real and common threat