3.5Secure remote work
The essentials in 30 seconds
- Home = office extension: locking, VPN and filed documents apply to the living room.
- Router hardened in 3 settings: admin password changed, Wi-Fi on WPA2/WPA3, separate guest network.
- Work device = work use: systematic VPN, family off the device, sensitive video calls on headset.
Running mini-case — Karim works remotely with no weak link
Karim, an office employee in Algiers, works remotely two days a week from his living room. He changes his router's factory administration password, switches his Wi-Fi to WPA2, creates a guest network for visitors and connected objects, systematically enables his corporate VPN and reserves his work device for work. Sensitive video calls on headset, screen angled: his home is aligned with office standards.
Last episode of the Karim thread — from 3-2-1 to hardened home: protecting data and workstation, everywhere.
1. Home, an office extension
Remote work expanded the attack surface: poorly configured home router, family-shared workstation, visible screens, overheard calls. At home, office rules apply fully: locked session, VPN, filed documents.
The corporate VPN is systematic from home: the rule, not the option. The professional workstation serves only professional purposes — no family accounts, no homework, no games.
2. Harden the router and the space
Three settings change everything: strong Wi-Fi password with WPA2/WPA3 encryption, changed router administration password (often left factory-default), separate guest network for visitors and connected objects — they no longer share the workstation's network.
Space side: screen not visible to visitors, session locked as soon as you leave the room, sensitive video calls on headset, screen angled, door closed. A poorly secured connected object is a foothold: guest network + VPN cut that path.
The living room, but as an office
Sober remote work: same rules as the office, without thinking.
🔎 Concrete example — The home remote-work audit
Karim aligns his home with the office.
Router: change the ADMIN password + Wi-Fi on WPA2/WPA3.
Create a GUEST Wi-Fi (visitors + connected objects).
Check: VPN on, session locked, video call out of earshot.Reading: the guest network isolates the workstation from connected objects.
Lesson: work device reserved for work, not homework or games.
Section vocabulary
- Extended security perimeter
- When working remotely, home becomes an office extension: router, Wi-Fi and physical space enter the perimeter.
Simple example: Karim's living room subject to office rules.
What it is not: home considered outside security.
Reflex: apply every office rule to the living room.
- Hardened home Wi-Fi
- Strong Wi-Fi password, WPA2/WPA3 encryption, changed router admin password: the three settings that matter.
Simple example: Karim's router: admin changed, WPA2, separate guest.
What it is not: router left with its factory password.
Reflex: check the three settings this month.
- Corporate VPN
- Systematic tunnel to the company network from home: the rule, not the option.
Simple example: Karim enables his VPN every home working day.
What it is not: working from home with no tunnel.
Reflex: VPN before any work app.
- Dedicated workspace
- Screen not visible, documents filed, session locked: office rules applied to the living room.
Simple example: Angled screen, closed door for sensitive video calls.
What it is not: business documents spread out before visitors.
Reflex: lock as soon as you leave the room.
- Provided equipment
- The professional workstation reserved for work, nothing else: the family does not use it.
Simple example: No family accounts on Karim's laptop.
What it is not: children's games on the company computer.
Reflex: personal use = another device.
In practice — Your home remote-work audit
- Internet router: change the administration password (often left factory-default) and check Wi-Fi encryption (WPA2 minimum, WPA3 if available).
- Create a guest Wi-Fi for visitors and connected objects: they no longer share your workstation's network.
- Check your habits: VPN systematically enabled? session locked when you leave the room? video calls out of indiscreet earshot?
- Work device = work use: check that no family personal account has settled on it.
Ready-to-say script — frame remote work at home (30 s)
“At home, I apply office rules: VPN on, session locked as soon as I stand up, work device reserved for work. And I hardened the router: admin password changed, Wi-Fi on WPA2, guest network for visitors.”
Say as a checklist each remote-work morning; sensitive video calls on headset.
Copy-paste template — home audit
ROUTER: admin changed (yes/no) + WPA2/WPA3 (yes/no) + separate guest (yes/no): ___
SYSTEMATIC VPN (yes/no): _______________
WORK DEVICE = WORK ONLY (yes/no): _______________
SENSITIVE VIDEO (headset + angled screen + door): _______________Micro-business / freelancer
Without an imposed policy: still apply the trio of hardened router + VPN + work-dedicated device.
SME Algeria
Karim separates the work network from the family network and has his setup validated by IT.
Large family
Create the guest network for children and visitors: the work device stays isolated from family use.
Beginner
Start with two steps: change the router admin password and systematically enable the VPN.
✓ Best practices
- Change the router admin password and set Wi-Fi to WPA2/WPA3.
- Create a guest network for visitors and connected objects.
- Systematically enable the VPN and reserve the work device for work.
✗ Common pitfalls
- Leaving the factory router password.
- Sharing the work device with family.
- Holding a sensitive video call within earshot/sight.
Key takeaways
- At home, office rules apply fully: locking, VPN, filed documents.
- Three router settings change everything: admin password, WPA2/3, separate guest network.
- The professional computer serves only professional purposes — no homework, no games.
- Sensitive video calls are held on headset, screen angled, door closed.
48h challenge — apply tomorrow
Change your router admin password and create the guest network: hardened home in two steps.
- I can name the 3 router settings.
- I systematically enable the VPN at home.
- My work device is reserved for work.
Frequently asked questions
Can my company impose rules at my home?
It governs the use of ITS tools and ITS data, wherever they are — that is the purpose of the policy and the remote-work agreement. Your personal network stays yours, but the work device connecting to it follows business rules.
Are home connected objects a risk for work?
Indirectly yes: a poorly secured object is a foothold on the network. The guest network for connected objects + VPN for the work device cut that path.
Which three router settings matter most?