Loading page
About this tool
Home-office security baseline for router, devices and video calls that adapts to BYOD or company laptop and to who else lives with you.
The Remote Worker Privacy Starter Kit scores a home-office security baseline across the router, the work machine, the accounts behind it and video calls, counting only the controls that actually apply to your situation. Tell it whether the laptop is company-managed or your own and who else lives in the house, and it drops the irrelevant items — no penalty for skipping a personal backup on a managed device, or headphones when you live alone. It also measures network segmentation directly: how many of the devices on your home network still share a link with the machine you work on.
Open Remote Worker Privacy Starter Kit on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Company-managed and BYOD setups get different checklists, as do solo, family and shared households.
Counts devices you moved off the work network rather than assuming a guest SSID fixes everything.
Backgrounds, default mute, lobby settings and recording announcements, not just the router.
Change the router's administrator password from the factory default and switch off remote administration, then confirm full-disk encryption and multi-factor authentication on the work machine. Default router credentials are published per model, and remote admin exposes that login to the whole internet.
Yes. Smart TVs, speakers, cameras and plugs receive updates for a shorter period than laptops and phones, and on a flat home network any one of them can reach the machine you work on. Most consumer routers offer a guest SSID with client isolation, which is enough for this.
Not on your own network for its own sake — use whatever VPN or zero-trust client your employer provides for access to internal systems. A VPN becomes important on networks you do not control, such as cafes, hotels and a client's guest Wi-Fi, where the local network can otherwise observe or redirect traffic.
Turn on background blur or replacement, join every meeting muted with the camera off by default, and glance at what is behind you before enabling video — whiteboards, delivery labels and documents are the usual accidental disclosures. If you share the home, use headphones so the other side's audio is not broadcast to people who never joined the call.