CHECKLIST

If you're just getting started with device security, start with these foundational steps:

Use Password Managers and Multi-Factor Authentication

• Generate and store passwords in your password manager

• Enable MFA with hardware device (e.g. YubiKey) or authenticator app (e.g. Google Authenticator, Authy)

• Avoid SMS verification for hostile environments 

Enable Disk Encryption

• Always lock your device when not in use

• Encrypt external storage devices

• Consider encryption software including BitLocker and VeraCrypt

Use Licensed Software and Apps

• Purchase/download only from official sources

Install Software Updates

• Apply when new updates are released

• Use cloud-based software that automatically updates

• Verify updates are legitimate before downloading 

We strongly recommend you do not use personal devices for work, but if you must...

Use Software as a Service (SaaS)

• Consider Google G Suite and Microsoft Office 365 (most popular options)

• Consider encrypting cloud-based drives (e.g. Cryptomator) or using external service (e.g. Tresorit)

Consider Encrypted, Zero Knowledge Cloud Storage

• Save data securely in cloud 

• Consider "zero knowledge" providers (e.g. Tresorit)

Use a Virtual Private Network (VPN)

• Need to choose the right VPN? Consult this article from the Electronic Frontier Foundation 

Already using work-specific devices? Good. You can improve your security with these steps.

Consider Mobile Device Management

• IT administrators can automate security policies 

• Remote wipe and troubleshooting 

Install Antivirus Software

• Check if your OS has built-in antivirus (e.g. Windows Defender, Mac XProtect)

Create a Remote Work Policy

• Determine how you will protect your data, network, and devices

• Monitor your device usage, compartmentalization, and dedicated work devices