Cyber Hygiene Checklist: 12 Habits for Remote and Hybrid Work

By J. Mesa

When the COVID-19 pandemic sent people home, hackers and scammers followed. They sent fake health alerts, targeted home networks, and took advantage of people doing their banking and their jobs from the kitchen table.

Remote and hybrid work stayed. So did the threats. This checklist gives you the habits that keep you and your information safe.

What is cyber hygiene?

Cyber hygiene is the set of routine habits that keep your devices, accounts, and data healthy. Like washing your hands, each step is small and works because you repeat it.

Why does remote work raise the risk?

  • Home networks are less protected than office networks.
  • Personal and work devices mix. Family members share computers and Wi-Fi.
  • Coworkers are not nearby. You can’t lean over and ask, “Did you send this?”
  • Attackers adapt to the news. Any crisis produces scams within days.

1. How do I spot crisis-related scams?

Scammers use emergencies to trick people into giving up information or money. During the pandemic they posed as government agencies and healthcare organizations. They do the same after storms, during tax season, and around benefit programs.

  • Be cautious with emails, texts, and calls that claim to come from a government agency or a health organization
  • Never click links or give personal information unless you have confirmed the source
  • Go to the agency’s official website by typing its address yourself

2. Use strong, unique passwords

Using one password for many accounts lets an attacker open all of them at once. Use a different, long password for each account. A password manager stores them, so you don’t have to remember them all.

3. Turn on multi-factor authentication

Add a second step at login for email, banking, and work accounts. A stolen password alone then fails.

4. How do I secure my home Wi-Fi?

  • Change the router’s default administrator password
  • Use WPA2 or WPA3 encryption with a strong Wi-Fi password
  • Update the router’s software, or replace a router that no longer gets updates
  • Set up a guest network for visitors and smart devices
  • Turn off remote management if you don’t use it

5. Keep every device updated

Turn on automatic updates for computers, phones, tablets, and browsers. Restart when asked. Update smart home devices too.

6. Separate work and personal use

  • Use your work device for work only
  • Don’t let family members use it
  • Keep work files in the systems your employer approves, not in personal email or cloud accounts

7. Use a VPN when your employer provides one

A virtual private network encrypts your connection to company systems. Use it on public Wi-Fi and wherever your employer requires it.

8. Be careful with personal information

Scammers look for ways to collect your name, address, Social Security number, and card details. Before you give personal information online, confirm who is asking and why.

9. Watch for shopping and financial scams

More shopping moved online, and scammers stepped up their efforts to steal payment data.

  • Buy from retailers you can verify
  • Pay with a credit card
  • Be wary of fake investment offers and requests for payment up front

10. Secure your video calls

  • Use a meeting password or a waiting room
  • Don’t post meeting links in public
  • Check who is in the call before you discuss anything sensitive
  • Look at what is visible behind you and on your shared screen

11. Lock your screen and protect your devices

  • Set a screen lock that starts after a few minutes
  • Encrypt laptops and phones
  • Don’t leave devices in a car or unattended in public
  • Report a lost or stolen work device right away

12. Back up your work

Save work files in the company’s approved storage, where backups run. For personal files, keep a copy on an external drive or in a cloud service.

How do I verify a request from a coworker or boss?

Attackers pose as managers and ask for gift cards, wire transfers, or login details. When a message asks for money, credentials, or a change in payment details, confirm it by phone or video with a number you already have. A two-minute call stops the most costly fraud a business faces.

What should an employer do for remote staff?

  • Provide company devices with security software and encryption
  • Require multi-factor authentication and a VPN
  • Write a short remote work policy
  • Train staff on home network security and scams
  • Give people a way to report problems outside office hours
  • Remove access as soon as someone leaves

Is it safe to work from a café or an airport?

It can be, with care. Use a VPN or your phone’s hotspot. Sit where nobody can read your screen, or use a privacy filter. Don’t take sensitive calls where others can hear. Never leave your device unattended.

How do I dispose of work documents at home?

Shred printed papers that carry customer, employee, or financial details. Don’t put them in household recycling. Return old company devices to your employer for secure wiping, and never sell or donate a personal device before you erase it.

How often should I run through this checklist?

Review it every three months. Check that updates ran, that your router is current, and that you still recognize every device on your home network.

What should I do if something goes wrong?

  1. Disconnect the device from the network.
  2. Tell your employer’s IT contact right away.
  3. Change your passwords from a different device.
  4. Call your bank if money or card details are involved.
  5. Report scams at reportfraud.ftc.gov.

Do smart home devices put my work at risk?

They can. Cameras, speakers, and TVs often run old software and share the network with your work laptop. Put them on a guest network, change their default passwords, and update them. That way a weak device can’t reach your work computer.

Your next step

Pick three items from this checklist and do them today. Start with your router password, multi-factor authentication, and automatic updates. No security measure is foolproof, and these habits go a long way toward keeping your personal and financial information safe. If your business has remote staff, Cerberus Cybersecurity can help with policies and training for a distributed team. Contact us to learn more.

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *