At home, security trouble almost never looks like a movie hack. It looks like stepping away from an open laptop to take a delivery, or leaving it unlocked while you grab something from the next room. Ordinary moments like those, repeated day after day, are how work devices end up exposed.
The good news: keeping a laptop safe at home comes down to a short list of practical habits. Set them up once, make them routine, and you head off the kind of problems that sting most precisely because they were so avoidable. Here's the checklist we put in place for our clients' remote teams.
Why home is a different environment
A work laptop doesn't suddenly become less secure at home, but everything around it changes. The office has built-in guardrails: fewer people touching each device, predictable networks, a general culture of locking up. At home, that same laptop is living in a space built for convenience, not control.
Three things shift. Physical exposure goes up, so devices move from room to room and get left unattended in short bursts all day. Work and personal life mix, so a quick "let me just check something" by a family member can turn into a risky download or an unfamiliar login. And the network changes: home Wi-Fi often runs on default settings, out-of-date router software, or a password that's been shared with every visitor who ever asked.
The checklist
Treat this as the minimum standard for any company laptop used at home. None of it requires turning your team into part-time IT staff.
Lock the screen every time you step away
Set a short auto-lock timer, and build the habit of locking manually too, yes, even at home. It's the single easiest way to close the "I only left it for a second" gap.
Store it like it's valuable
When you're done for the day, put the laptop somewhere protected: not on the couch, not on the kitchen counter, and never left in the car. "Out of sight" beats "out of the way."
Keep it to work, and to one person
A work laptop shouldn't double as the family computer. Good intentions still lead to accidental clicks, unfamiliar logins, and browser add-ons nobody vetted. One device, one work user.
Use a strong sign-in and multi-factor authentication
Use a long passphrase rather than a short, clever password, and never reuse it. Treat multi-factor authentication, signing in with your password plus a tap on your phone, as a baseline requirement, not an optional extra. It's the same habit we put at the top of our ransomware plan, because it stops a stolen password from being enough on its own.
Keep everything updated, and retire what can't be
Updates are where most known security holes get fixed, so the longer you wait, the bigger the risk. Turn on automatic updates and restart when prompted. And if a laptop can no longer receive security updates at all, it isn't a work device anymore. It's a liability.
Secure home Wi-Fi like it's part of the office
Use a strong Wi-Fi password and modern encryption. If the router still has its factory admin login or hasn't been updated in years, take that as your cue to fix it. While you're there, make sure the firewall is on and your security software is active and properly set up. If a security tool feels inconvenient, sort out the friction rather than switching it off.
Trim unneeded software and keep work data in work storage
- The more apps installed, the more to update and the more that can go wrong. Stick to approved software from trusted sources and remove what you don't use.
- Keep work files in your approved work systems, not personal cloud or backup accounts. That keeps access controlled and makes recovery far easier if something goes wrong.
- Be wary of any message that pressures you to click, open, or "confirm now." When in doubt, check the request through a separate channel you already trust.
Are your laptops "home-proof"?
If you want remote work to stay smooth, the devices need to be home-proof by default: automatic screen locks, secure storage, protected sign-ins, prompt updates, locked-down Wi-Fi, and work data kept only where it belongs. Nothing complicated, just done consistently.
If you'd like help turning these basics into a simple, enforceable policy across your team, that's exactly the kind of thing we set up and keep an eye on. A free IT check-up is an easy place to start.