Device & Wi-Fi security basics

The devices your team uses every day — laptops, phones, tablets — are access points to everything your business runs on. A compromised device can expose passwords, email, files, and access to every system the device is connected to.

The good news: basic device security doesn't require any technical expertise.

Keep your operating system and apps up to date

Software updates fix security vulnerabilities. When attackers find a flaw in Windows, macOS, iOS, or Android, the makers release a patch quickly — but only devices that install the update are protected.

Enable automatic updates:

• Mac: System Settings → General → Software Update → turn on "Automatic Updates"
• Windows: Settings → Windows Update → turn on automatic updates
• iPhone/iPad: Settings → General → Software Update → turn on "Automatic Updates"
• Android: Settings → System → System update (exact path varies by manufacturer)

Lock your devices with a PIN, password, or biometrics

Every device should require authentication to unlock. This prevents someone who picks up your unlocked laptop from instantly accessing everything.

• Use Face ID, fingerprint, or a PIN of at least 6 digits on your phone
• Use a screen lock on your laptop with a timeout of 5 minutes or less
• Lock manually whenever you step away from your desk (Mac: Cmd + Control + Q; Windows: Win + L)

Enable full-disk encryption

Full-disk encryption means that if someone takes your hard drive out of your laptop, they cannot read any of the data without your login password. On most modern devices, this is enabled by default:

• Mac: FileVault is typically on. Check in System Settings → Privacy & Security → FileVault.
• Windows: BitLocker (available on Windows Pro and above) or Device Encryption (on Windows Home). Check in Settings → Privacy & Security → Device encryption.
• iPhone/iPad: Encrypted by default when you use a passcode.
• Android: Encrypted by default on modern devices (Android 7.0+).

If yours is not enabled, turn it on now.

Enable "Find My" or remote wipe

If a device is lost or stolen, you want to be able to locate it or wipe it remotely.

• Apple devices: Enable Find My in Settings → [your name] → Find My
• Android: Enable Find My Device in Settings → Security
• Windows: Enable Find My Device in Settings → Privacy & Security → Find My Device

Test this once so you know how it works before you need it.

Be careful on public Wi-Fi

Public Wi-Fi networks (cafes, hotels, airports) can be insecure. Attackers can create fake networks or monitor traffic on open networks.

Safer practices on public Wi-Fi:

• Use your phone's mobile hotspot instead for sensitive tasks
• Avoid logging into banking, financial, or admin accounts when possible
• If you must use public Wi-Fi, use a reputable VPN to encrypt your traffic
• Never use an unsecured network for anything involving passwords or confidential data

See Safe browsing habits for your team for more on this.

Don't let others use your work devices

Lending your work laptop or phone to a family member, friend, or colleague — even briefly — creates risks:

• They may inadvertently install something malicious
• Children can unknowingly download malware
• Your accounts and saved passwords are accessible if your browser remembers them

Keep work devices for work. Set up a separate limited account if you need to let someone else use a device occasionally.

Install reputable security software

On Windows, Windows Defender (built in) is solid. On Mac, the built-in security protections are strong. Consider adding:

• Malwarebytes — available for Mac and Windows; free version scans for malware on demand
• A reputable VPN service if your team frequently works from public locations

Avoid installing security software from pop-up ads — these are often malware themselves.

Create a plan for lost or stolen devices

Know what you'll do before it happens:

Common questions

Related guides

• Safe browsing habits for your team
• Two-factor authentication, explained
• Malware & your website explained
• Your business security checklist
• Data privacy basics for your business

Learn more

• CISA: Securing your home network
• NIST: Securing mobile devices