Secure remote work and public WiFi
Short answer: Secure remote work rests on a few simple habits: use a company VPN over an untrusted or public WiFi, enable 2FA on all work accounts, keep devices updated with disk encryption, and lock your screen in public places. Treat public WiFi as if someone is watching it.
Remote work is convenient, but it extends a company’s security boundary to every home network, cafe WiFi and personal device. When employees connect from various places and devices, new attack points appear that did not exist on the office network. The good news — a few simple rules close most of these gaps.
Where the risk lies
- Public WiFi in cafes, airports or hotels, where others may monitor the traffic.
- Personal devices without protection used for work.
- A home network with an unchanged default router password.
- Screen visibility in public places — prying eyes and "shoulder surfing".
- More phishing, because remote workers handle more through email.
Core protection rules
- Use a company-approved VPN when connecting over an untrusted network.
- Avoid important actions (banking, logins) over open public WiFi.
- Enable 2FA on all work accounts — protection if a password is stolen.
- Lock your screen whenever you step away and use a privacy filter in public.
- Keep devices updated and disk encryption enabled.
Home network hygiene
- Change the default router admin password.
- Use a strong WiFi password and modern encryption.
- Update the router firmware.
- Keep work devices separate from questionable home devices where possible.
A simple rule when travelling: if the network is public, treat it as if someone is watching. For important actions, use a VPN or mobile data.
The human factor in remote work
Working outside the office, it is harder to quickly double-check with a colleague or IT, so an employee decides alone and faster — which scammers exploit. That is exactly why regular reminders and simulations matter especially for remote teams. Opsinel helps maintain alertness no matter where people work and shows which teams need more attention.
Try it yourself
Could you spot a phishing email?
10 realistic emails and an explanation after each answer. About 5 minutes, no sign-up.
Take the phishing quizCan scammers send email in your name?
A free SPF, DKIM and DMARC check of your domain. The domains you enter are not stored.
Frequently asked questions
Is public WiFi really dangerous?
An open public network can let others monitor unencrypted traffic or serve a fake login page. For important actions, use a VPN or mobile data.
Is a VPN enough for secure remote work?
A VPN protects the connection but does not protect against phishing or weak passwords. It must be combined with 2FA, updates and employee alertness.
Can I use a personal device for work?
You can, if it meets company security requirements: updates, disk encryption, a screen lock and 2FA. Without that combination the risk rises significantly.
Why do remote workers get caught more often?
Outside the office it is harder to quickly check with a colleague or IT, so decisions are made alone and faster. Scammers exploit this, so regular reminders are especially important for remote teams.
What is the first thing to secure when working remotely?
Enable 2FA on work accounts and use a company VPN over untrusted networks. Together with updates and a screen lock, these close the biggest gaps.
Sources and further reading
Public guidance from security agencies and standards bodies.
- NCSC (UK)Device security guidance
- NCSC (UK)Small organisations guide to cyber security