Working securely away from the office
Practical security for home, location, hotel and hybrid working without recreating the office around every laptop.
Last reviewed: October 2026
Remote working is now ordinary working. The security challenge is not that somebody is sitting at home; it is that devices, conversations and material are spread across homes, hotels, edit suites, locations and cloud services.
Use managed work accounts and services
Keep work in approved systems rather than moving files into personal email, consumer file-sharing accounts or messaging services because they feel quicker. If the approved route is genuinely obstructive, fix the workflow rather than relying on workarounds.
Use individual accounts rather than shared logins wherever possible, with passkeys or strong authentication enabled.
Protect the device
Keep laptops and phones updated and use a screen lock. Enable device encryption: this is normally built into modern iPhones, iPads, Macs, Android devices and suitably configured Windows computers.
Do not leave devices unattended in public places or visible in parked vehicles. On location, physical loss is often a more realistic threat than sophisticated hacking.
If the organisation can remotely lock or wipe managed devices, make sure the feature is configured before a device disappears.
Think about the room as well as the network
Confidentiality can be lost through an overheard call, an unlocked screen or paperwork left in view. Use headphones where appropriate and consider who can see or hear sensitive discussions in shared homes, trains, hotels and co-working spaces.
Avoid recording meetings by default. If a meeting needs to be recorded, make sure participants know, understand where the recording will be stored and delete it when it is no longer required.
Secure online meetings sensibly
Use the organisation’s approved meeting service and keep its app updated. Protect the account with strong authentication. For sensitive meetings, control who can join, use waiting-room/lobby features where appropriate and avoid publishing meeting links openly.
Be cautious about unexpected meeting invitations and links: collaboration platforms are also used for phishing.
Handle material deliberately
Know where working files are being stored and backed up. Avoid accumulating sensitive downloads on personal desktops and Downloads folders. When a project ends, return or archive material according to the production’s policy rather than leaving copies scattered across personal devices.
For sensitive contributors, agree the communication method before exchanging confidential information. The most convenient channel is not always the right one.
Home networks
Use the security built into a modern home router, keep its firmware supported, and change default administrative credentials where they still exist. WPA2 or WPA3 should be enabled; obsolete wireless security should not be used.
You do not need to turn a home into a corporate network. A supported router, updated devices, strong account security and sensible handling of material provide a strong baseline.
When the risk changes
A routine edit from home and an investigation conducted from a hotel in a hostile environment are different problems. Increase precautions when the assignment, location, source sensitivity or likely adversary changes.