{"id":44957,"date":"2020-03-16T11:22:28","date_gmt":"2020-03-16T17:22:28","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=44957"},"modified":"2024-02-08T11:42:01","modified_gmt":"2024-02-08T16:42:01","slug":"secure-home-wifi-remote-work","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/secure-home-wifi-remote-work","title":{"rendered":"How to Secure a Home WiFi Network for Remote Work"},"content":{"rendered":"\n
Here at JumpCloud, security is built into everything we do. In light of recent events, many of our customers and partners have been looking for guidance on how to maintain network security during a shift toward remote work. Here are six concrete steps for securing a home network that you can share with your employees, straight from one of our own security engineers, Philip Deuchler. <\/em><\/p>\n\n\n\n Whoever controls your router and modem controls your network. If you don\u2019t own your router or modem, you\u2019re giving someone else that control. Data from every internet-connected device in your home passes through your modem\/router, and internet service providers (ISPs) have been known to sell data collected from their rented devices. And the benefits of buying your own modem\/router go beyond security: you can usually make your money back within a year if you buy instead of rent. <\/p>\n\n\n\n Your ISP\u2019s website should have a list of compatible modems. This page<\/a> is also a good resource for researching router capabilities. <\/p>\n\n\n\n Most modem\/router combos make updates easy via a web-based settings panel. Outdated router firmware is a major vector for attackers, especially if you combine that with an insecure internet-connected appliance (think smart home \/ internet-of-things products like Ring cameras, internet-connected Roombas, WiFi-enabled dryers, etc.). <\/p>\n\n\n\n You can update practically any router by visiting the router\u2019s IP address in a web browser and logging into its admin console. You can almost always find the IP address and default credentials labeled on the bottom of the router. If you\u2019re having trouble finding the default credentials, you can usually turn them up in a quick Google search. And if you’ve changed the credentials before and since forgotten them, you can do a hard reset and then use the default creds. Once you\u2019re logged in, all you should have to do is find the router’s settings menu and click the update<\/em> button. <\/p>\n\n\n\n If you can<\/em> still log into your router\u2019s settings with the default credentials, we recommend changing the password. Hard-to-guess passwords with 32 or more characters are ideal here. You can store this new password in a password manager like LastPass. <\/p>\n\n\n\n Your WiFi password should include numbers and letters, and be longer than 12 characters. You can combine multiple words or phrases to make a secure passphrase that’s possible to memorize. We also recommend using WPA2 security \u2014 this can be changed in your router\u2019s admin console as described in step 2 above. At the minimum, standard WPA is necessary. WEP security, on the other hand, is extremely outdated and easy to crack with just a laptop and some off-the-shelf software.<\/p>\n\n\n\n Do you really need that internet-connected toaster? And if you do, do you need it open to the outside internet? Probably not. Every connected device in your network is a potential vulnerability, and chances are, your WiFi-connected washing machine doesn’t get security updates as frequently as your MacBook\u00ae<\/sup>. You can reduce risk by reducing the number of connected devices on your home network. Alternatively, think about setting up a separate network for your IoT devices.<\/p>\n\n\n\n WiFi passwords are like any other password: They’re only good as long as they\u2019re secret. The longer you have the same password, the more people and devices have that password. It’s actually pretty painless to rotate your WiFi credentials, and getting in the habit can be very helpful to your WiFi security. <\/p>\n\n\n\n Looking for additional steps to maximize security in the new era of remote work? One key measure is to use a unique, long, and complex password to log into your Mac or Windows device. On top of that, we recommend protecting your login process with the added layer of multi-factor authentication<\/a>. And, to secure your data in the event your laptop is lost or stolen, it\u2019s important to have full disk encryption<\/a> enabled.\u00a0\u00a0<\/p>\n\n\n\n1. Own your router and modem instead of renting. <\/h2>\n\n\n\n
2. Keep your router up to date.<\/h2>\n\n\n\n
3. Ensure your router admin credentials are secure.<\/h2>\n\n\n\n
4. Ensure your WiFi network password is strong, and you’re using WPA2 security.<\/h2>\n\n\n\n
5. Remove unnecessary connected devices.<\/h2>\n\n\n\n
6. Consider periodically rotating your WiFi password.<\/h2>\n\n\n\n
Additional Security Measures for Remote Work <\/h2>\n\n\n\n