When your company had one office, security was a place. A door with a lock, a network you could point at, and a firewall sitting between your desk and the rest of the world. Somebody in IT owned all of it, and your job was to show up and do your work.
Now a real portion of that company runs out of a spare bedroom in Argyle or a converted dining room in Corinth. The work did not get less sensitive. The building went away. That makes your home office a small branch office, and it makes you the person who runs it. Most of what follows takes one evening, and a fair amount of it protects your family more than your employer.
Your Router Is Now the Office Firewall
Everything in your house reaches the internet through one box, and that box is doing the job a corporate firewall used to do. It usually shipped with weak settings and no supervision. CISA’s telework guidance says home routers are typically not secure by default, and that the minimum step is to change the default password to one only you know.
Two passwords live on that box and people mix them up constantly. One is the Wi-Fi password you give guests. The other is the administrator password that changes how the router itself behaves. The second one matters most, and on a lot of home routers it is still whatever was printed on the sticker.
- Change the administrator password. Not the Wi-Fi password. The one that gets you into the router’s own settings.
- Turn on automatic updates. The National Security Agency’s 2023 guidance on securing home networks recommends updating routing devices to the latest patches, preferably automatically, and patching manually about once a month otherwise.
- Retire equipment that stopped getting updates. That same NSA guidance says these devices should be replaced when they reach end of life for support. A router that has not seen a firmware update in five years is a liability.
- Split your network. The NSA guidance recommends that at a minimum your wireless network be segmented between your primary Wi-Fi, guest Wi-Fi, and a network for smart home devices. Most routers can create a second network in about three minutes.
Keep Work on the Work Device
This is the highest value habit in the whole article, and it is free. If your employer gave you a laptop, do the work on it, and keep your personal machine personal. The NSA guidance is blunt about why: exchanging information between home systems and work systems by email or removable media may put work systems at increased risk.
It cuts both ways, and the direction people forget is the one that protects them. When work stays on the work laptop, your employer has no reason to reach into your personal computer or your family’s files. Mixing the two is how a device wipe ends up touching things that were never anyone’s business but yours.
The same idea applies to accounts and apps. Forwarding a work document to your personal email feels efficient, and it quietly moves company data somewhere nobody can protect or retrieve. So does signing up for a handy free tool because the approved one is clunky. We wrote about the business side of that in shadow IT and the risk it creates inside your own organization. CISA also recommends checking your company’s telework policy before using personal equipment for work, which is worth doing once so you know where the line is.
The Family Computer Problem
Here is the scenario we see constantly. There is one good computer in the house. A parent uses it for work, a teenager uses it for homework and games, and a visiting relative checks email on it. Everyone shares one login, so everyone is effectively the same person as far as the machine is concerned.
That means a game mod your kid installed runs with the same access as your work files, and a family member who clicks the wrong thing has clicked it on your employer’s behalf.
If a separate work computer is not possible, separate user accounts on the same machine get you most of the way there. Each person gets their own login, files, and browser. Give the everyday accounts standard rather than administrator rights so nothing gets installed without a deliberate password. Fifteen minutes ends a whole category of problem.
Paper, Screens, and What the Camera Sees
An office had a shredder and a locked cabinet. Your house has a recycling bin and a kitchen counter. Anything you print at home stays in your house until you deliberately destroy it.
- Print less. Most documents never need to be on paper. If a signature is the only reason, sign it electronically.
- Buy a cheap cross-cut shredder. Anything with a client name, a patient name, an account number, or a salary on it should not leave your house intact.
- Look behind you before the call. Whiteboards, sticky notes, mail on the desk, family photos you may not want a client studying. A blurred background solves it in one setting.
- Share the window, not the screen. Sharing an entire screen broadcasts every notification that arrives.
- Cover the camera when you are done. The NSA guidance recommends covering cameras when you are not using them, and a sliding cover costs a few dollars.
Lock the Screen, Even When It Is Just You
People feel silly locking a laptop in their own kitchen. Do it anyway, and not because you distrust your family. Do it because habits do not survive a change of location. If you never lock your screen at home, you will not lock it at the client site or the airport gate.
Set the screen to lock itself after a few idle minutes, and learn the keyboard shortcut so it takes half a second when you stand up. Pair it with a real login: a strong passphrase plus fingerprint or face unlock, and multifactor authentication on your work accounts. CISA describes multifactor authentication as requiring more than one authentication mechanism to gain access. A stolen password by itself stops being enough.
When You Change Jobs, the Data Has to Go
This is the part people handle badly, usually with no bad intent. You spent four years building spreadsheets, templates, and contact lists. It feels like yours. Legally, work you produced for your employer generally belongs to your employer, and taking it with you is the fastest way to turn a normal departure into a lawyer’s phone call.
Ask, in writing, what they want returned and what you may keep. Return every piece of hardware, including the old phone in a drawer and the backup drive on the shelf. Remove work accounts from personal devices rather than just deleting the icon. Delete work files from personal cloud storage, and remember the downloads folder. If you want a portfolio sample, ask permission first. Handled loosely, this is how organizations lose track of where their data lives, a problem we cover in why cybersecurity is no longer optional for mid-sized businesses.
The Bottom Line
You do not need a server rack in the garage. You need a router with a real administrator password and current updates, work kept on the work device, separate logins for the people in your house, some care about paper and cameras, a screen that locks itself, and a clean handoff when you move on. That is an afternoon of work that protects your employer, your clients, and your own family.
If you are the person in your household who ends up fixing everyone’s technology and you want a second opinion on the router or the family computer setup, we are glad to talk it through. No obligation, no sales script. Contact us today.
Sources:
Comments are closed