Remote work moved the office perimeter into your hallway. The router in the corner is now critical infrastructure, the laptop on the sofa holds client files, and the password you set in 2019 might still open both your email and an old shopping account. None of this needs a security team to fix. Most of it takes an afternoon, a password manager, and a willingness to reboot things you would rather leave alone.

Lock Down the Wi-Fi You Actually Rely On

Start at the router. If you have never changed the admin password since the installer set it, do that today — default credentials for consumer routers are printed in manuals and easy to find. Then work through the rest:

• Set encryption to WPA3 if the router supports it, WPA2-AES if not. Avoid WEP and TKIP entirely.
• Rename the network so it does not advertise the router model.
• Turn on the guest network and move smart plugs, televisions, and anything you did not configure yourself onto it. Your work laptop stays on the main network.
• Check for a firmware update inside the router's admin page.

If you work from cafés, hotels, or shared desks, treat every network you do not control as hostile. Use your phone's hotspot for anything sensitive, and if you must use public Wi-Fi, connect through your employer's VPN. Checking a bank balance on airport Wi-Fi is a habit worth dropping.

Passwords: Length Beats Cleverness

Reused passwords are the most common way one breach becomes five. The fix is unglamorous: a password manager that generates and stores a long, unique password for every account, protected by one strong passphrase you memorize and never type anywhere else.

• Length matters more than symbols. Four random words strung together beat a short scramble of characters.
• Let the manager's browser extension fill credentials for you. It also makes lookalike login pages harder to fall for.
• Store the recovery key offline. A printed copy in a drawer beats a note file on the desktop.
• If your employer provides a manager, use it for work accounts and keep personal logins in your own.

Two-Factor Authentication, Set Up Properly

Turn on two-factor authentication on email first, then banking, cloud storage, and anything work-related. Email is the reset key to nearly everything else, so it deserves the strongest protection you can give it.

Where you have a choice, prefer an authenticator app or a hardware security key over SMS codes; text messages can be intercepted or redirected through a SIM swap. Save the backup codes when they are offered — print them, or write them down and keep them with your passport.

One habit worth building: if you get a login approval prompt you did not trigger, do not simply deny it and move on. Change that password immediately and check for active sessions, because someone already has your credentials. Repeated prompts mean someone is trying to wear you down.

Patch on a Schedule

Updates are the cheapest security control you own and the easiest to postpone. Turn on automatic updates for your operating system, browser, and password manager, then set a weekly reminder for the rest.

• Reboot. Many updates only finish installing after a restart, and a laptop that sleeps for weeks can sit half-patched indefinitely.
• Check the router and any smart-home hubs once a quarter.
• Replace devices that no longer receive security updates. A tablet that stopped getting patches three years ago is fine for reading, not for work email.
• Look at the apps you installed once and forgot — video tools, note apps, VPN clients.

If your machine is managed by an employer, let their update tools do their job and do not disable them to avoid a restart.

Lock the Device and Lock the Room

Full-disk encryption — FileVault on a Mac, BitLocker or Device Encryption on Windows — turns a stolen laptop into an inconvenience instead of a disclosure. Switch it on, and make sure the recovery key lives somewhere other than the laptop itself.

Then shorten the screen lock. Five minutes of idle time is generous; one or two is better in a shared space. Biometrics plus a PIN is fine, because the point is that a stranger who picks up your unlocked machine gets nowhere.

Physical habits matter too. Lock the screen when you leave the room, even at home, especially if you share the space with roommates, cleaners, or contractors. Use a privacy filter on trains and in cafés. Do not leave a work device visible in a parked car.

Backups You Have Actually Tested

A backup you have never restored is a hope, not a plan. Keep three copies of anything important: the original, one on an external drive, and one offsite in cloud storage or on a drive kept elsewhere. Leave the local drive disconnected between backups so ransomware cannot encrypt it along with your files. And remember that syncing is not backing up — if a file is corrupted or deleted, cloud sync faithfully copies that deletion everywhere.

Set backups to run automatically and glance at the log now and then. Once a quarter, restore a single file and confirm it opens. That one test tells you more than any status dashboard.

The Ten-Point Checklist

Run through this list now, then again at the start of each quarter. It takes about half an hour.

1. Router admin password changed and firmware updated.
2. Wi-Fi using WPA3 or WPA2-AES, with a guest network for smart devices.
3. A unique password on every account, stored in a password manager.
4. Two-factor authentication enabled on email, banking, and work accounts.
5. Backup codes saved offline.
6. Automatic updates on for the operating system, browser, and work apps.
7. Device rebooted at least once a week.
8. Full-disk encryption active and screen lock set to a minute or two.
9. Three copies of important files, one offsite, with a test restore done this quarter.
10. Your employer's IT or security contact saved somewhere you can reach without your laptop.

Nothing here is dramatic, and that is the point. Boring, repeatable habits catch more problems than any single tool. If you handle client data, payment details, or records covered by a contract, check your employer's policy for stricter requirements — and when a legal or regulatory obligation is involved, ask your IT or compliance team rather than guessing.

Photo: Foundry / Pixabay