8 ways to stay secure when working from home

Mandy Donovan | Citizens

Hundreds of thousands of Americans are spending more time than ever working from home. On any average week, about 7% of the workforce teleworks. Right now, that number is exponentially higher due to the social distancing requirements in place to help prevent the spread of COVID-19.

A remote workforce adds to the security challenges most companies face. The usual safeguards of working in the office are no longer present, and the company must rely on you, its employee, to keep their data secure.

Cybercriminals are nothing if not opportunistic. Their aim? To sneak in through any unsecured virtual doorway and get access to your company's most sensitive data. (At Citizens Bank, you can rest assured that helping to protect our customers from online threats and offering best practices is a top priority.)

Do your part by avoiding common pitfalls when working remotely. Take a look at these eight ways to protect yourself, your computer, and your company.

1. Never send work information to a personal email address

Personal email accounts don't have the same level of protection as a corporate email system, so there's an increased risk of compromising sensitive information. Attaching documents from your work email and sending to a home email address leaves you vulnerable to many security concerns, which could trigger your company to issue you a security alert.

2. Be mindful of what others can see

Lock your screen when you step away and keep devices and documents securely stored. This is especially important when you're in a public place like a coffee shop or library — not to mention the security risks of public Wi-Fi — but you should also make this a regular practice at home. Your child (or your childlike roommate) doesn't mean to cause trouble, but even innocent little fingers can wreak havoc with a few errant key strokes.

3. Shred all secret, confidential, or internal documents

All printed sensitive documents should be disposed of when you're done by following the standard procedures your company advises. Documents may need to be shredded using an approved cross-cut shredder or securely stored until they can be safely disposed of in the locked waste bins back at the office. If you're not sure whether something is confidential, treat it as such just to be on the safe side.

4. Use passphrases as passwords

Coming up with new passwords can sometimes feel like a full-time job. Here's a good trick: Try using passphrases — a sequence of words — rather than a random combinations of letters, numbers, and special characters. Example: Where oh where has my little one gone = Wowhml1g. It makes passwords easier to remember, but harder to crack. Score one for the good guys!

5. Beware of sharing too much on social media

Hackers are pros at something called "social engineering," or the art of manipulating people to give up confidential information. Have you seen the recent Facebook post asking you to post a picture with the year you graduated high school? Or a picture of your first car and your current car? Think about it. Common security questions ask about your high school mascot or the model of the first car you owned. Sorry to be Debbie Downer, but what seems like silly fun on social media might have more malevolent origins. Stay vigilant, and don't give out personal information that's often used to identify the real you — such as your birthday, mother's maiden name, first boyfriend or girlfriend, hometown or cities you've lived in, or your high school name or mascot.

6. Report suspicious emails

Receive an email that seems a little … off? Beware and handle it with care. Use the "Report Phishing" button in your email provider or forward it to a special mailbox dedicated to reporting phishing emails that many employers have set up. Some companies also have a hotline you can call to alert the tech team of suspected security incidents immediately. Once you've reported the issue to the right people, delete the email and block the user without clicking on any of the links in the email.

7. Use unique Wi-Fi names to discourage local attackers

Hackers use precomputed lists of paired network names and passwords to quickly crack Wi-Fi networks. Prevent these opportunistic attacks by creating a truly unique network name. Avoid using something basic, like My WiFi, or your street address, phone number, or last name — those can be easily figured out. For an added layer of security, make sure to use strong passwords or passphrases.

8. Leverage your home Wi-Fi's 'Guest' network

In addition to making you sound like a good host, creating a "Guest" network is a good idea for cybersecurity. Your home router isolates devices on your 'Guest' and your main network. The two may come with different passwords, and you can limit the capabilities and access available on the "Guest" version. This can help you prevent potential malware attacks from spreading from one device to another. Here's a tutorial on how to set up a guest network.

Know your company's cybersecurity policies

Whether you love tackling projects in your PJs or you're struggling to stay focused, working from home should be done with care. It can pose a risk to your company's data security if you're not careful. So take extra care with your company-issued tech, and when in doubt, don't be shy about raising your hand and asking your company to clarify the ground rules. It's better to be safe than sorry — especially when it comes to cybersecurity.

Be ready to defend yourself against fraud

We're committed to providing the resources to be safe in our increasingly digital world so you're made ready to move forward in unexpected times. Our dedicated colleagues can help you reach your goals securely and safely. To learn more, visit our COVID-19 Fraud Prevention Resource Center.

If you have reason to question the legitimacy of an email supposedly from Citizens, or even if you're unsure, do not reply to the email. You can forward the email to abuse@citizensbank.com or contact us through another channel to report suspicious activity or check if the email is authentic. As always, we're dedicated to protecting your money, privacy, and safety.