The Home-Office Security Checklist for Small Teams

Your office perimeter is now a kitchen table. The router is whoever's was cheapest at the electronics store, the printer is shared with the household, and the laptop travels between the desk, the couch, and a café. A home-office security checklist is one honest walk through that setup — network, devices, access, physical space, and backups — that closes the gaps a company office used to close for you. None of it requires enterprise budget; most of it requires an hour and a label maker.

Pass 1: The Network

• Retire the router's default password — admin panel and Wi-Fi both. The default credentials are printed on a sticker and published on the internet; anyone within range has had the key for years.
• Firmware once, then calendar — update the router firmware today, then put a quarterly reminder on it. Router firmware is the patch nobody sees, which is why it ships fixes for bugs already being exploited.
• Separate the guest network — visitors, kids' tablets, smart TVs, and consoles get the guest SSID. A compromised game console should never be one subnet hop from the laptop that holds the customer database.
• Name your IoT honestly — the doorbell camera, the robot vacuum, the smart speaker: they all phone home. If one can be moved to the guest network, move it. The Wi-Fi security checklist covers the office side; this pass is the same discipline at home.

Pass 2: The Devices

• Disk encryption on, verified — FileVault on Macs, BitLocker on Windows, full-disk encryption on Linux. "It's probably on" is not a status; check the settings page and write the date down.
• Auto-lock that actually locks — screen lock at five minutes or less, password required immediately, not "after 4 hours". A laptop that stays logged in on the kitchen counter is an unlocked office door.
• One profile for work, honestly kept — separate user account (or at minimum a separate browser profile) for work, so household logins, bookmarks, and saved passwords don't share the same room.
• Updates on automatic — OS and browser. The patch management checklist runs the office fleet; the home devices are part of it now whether the register says so or not.
• Retire the dead hardware properly — the old laptop in the drawer still has mail cached and a session token or two. The hardware disposal checklist is the exit lane.

Pass 3: Access and Secrets

• One password manager, no exceptions — work logins in the work vault, not in the browser's built-in save, not in a note, not shared with the household. If rollout never happened, the password manager rollout is the one-afternoon fix.
• MFA on everything that moves money or holds customer data — email first (it resets everything else), then banking, then the admin panels. An authenticator app beats SMS; both beat nothing.
• Family-shared logins get split — the streaming account can be shared; the registrar, hosting, and store admin accounts cannot. If a household member knows a work password, rotate it and move it into the vault with sharing.
• Secrets don't live in one drawer — recovery codes taped inside a desk drawer is a single point of failure with a lock on it. The secrets rotation checklist covers the hygiene; the home twist is who else in the house can reach them.

Pass 4: The Physical Space

• Documents that shouldn't print — customer lists, contracts, invoices with addresses: does the household printer keep copies, and who empties the tray? Print less; shred what prints.
• The visible-screen rule — video calls show the desk behind you. Customer names in a CRM window, whiteboards with the roadmap, the mailbox key on the shelf: what does the camera see in a screen-share gone wrong, and what does the window behind the desk show the street?
• Deliveries and guests — the courier signs for the box; the partner works at the same table. Nothing here needs paranoia — it needs the laptop lid closed when unattended and no customer paperwork left in the hallway.
• Keys and badges that lost their meaning — office keycards, building fobs, the spare house key under the mat: a home-office walk is a good moment to notice which access items stopped being tracked when the office moved home. The key management policy page covers the register.

Pass 5: Backups and the Day the House Has a Bad Day

• 3-2-1 survives at home too — the work laptop's backup target shouldn't be the same shelf. Cloud + one offline copy that isn't always plugged in; the backup encryption checklist matters more at home, where the backup disk sits next to the TV.
• Test the restore, not the backup — a home backup that's green for two years but never restored is a hope, not a plan. The backup restore drill checklist runs the test.
• Write the home-office outage plan — power cut, internet dead, household quarantine: what work stops, what has a workaround, who gets told. The power failure IT checklist and the internet outage runbook are the templates.
• The person is the plan — if only one person can reach the router settings, the vault, or the backup drive from home, that's a row for the single-point-of-failure register with "home" written next to it.

The Quarterly Home-Office Review

Security at home decays quietly: a new smart device joins the Wi-Fi, a guest network gets turned off "temporarily", a router gets replaced and ships with defaults again. Fifteen minutes per quarter:

• Guest network still on, firmware still current, device list on the router still recognizable.
• New devices in the house in the last quarter — which network are they on?
• MFA still on everywhere it was on; no new admin panel added without it.
• Backup: last restore test date still within policy.
• Anything printed, taped, or written that should have been shredded.

Instant-Download Ops Kits

This checklist is part of the Hive80 Lab ops kit line — field-tested, instantly downloadable:

• The First 30 Minutes — free incident quick-start
• Ops Field Cards — 12 printable incident checklists — $4
• Ops Starter Kit — full incident-response kit for small teams — $14
• Ops Mega Bundle — all 5 kits in one download — $29

⚡ Launch pricing is live at the store — check the banner for today's code.

Related Ops-Notes Pages

• Wi-Fi Security Checklist — the office network half of pass 1
• VPN Security Checklist — the tunnel between home and the company
• Password Manager Rollout — the one-afternoon fix for pass 3
• Patch Management Checklist — keeping the home devices patched like the office fleet
• Backup Encryption Checklist — the backup disk lives in the living room now
• Backup Restore Drill Checklist — prove the home backup restores
• Power Failure IT Checklist — the home-office outage with the longest tail
• Internet Outage Runbook — the day the home pipe dies mid-shift
• Old Hardware Disposal Checklist — the drawer laptop is a data breach on a shelf
• Single-Point-of-Failure Register — the household SPOFs are rows too
• Key Inventory Register — which keys and fobs are still tracked after the office move

Home offices didn't create new security problems — they just moved the office into a building with no IT department. One walk through the five passes, an hour of fixes, and a fifteen-minute quarterly review is the whole system. The kitchen table can be as safe as the server room; it just has to be decided on purpose.