Laptops, phones and tablets hold a business’s most valuable information: customer records, financial files, email and passwords. Losing one device, or having one infected with malware, can expose all of it. The good news is that a few consistent habits block the vast majority of common threats. Here is how businesses keep their devices safe, in order of impact.
1. Keep everything updated
Most successful attacks use security holes that already have a fix available. Turn on automatic updates for the operating system, web browsers and apps on every device. Replace computers that no longer receive security updates, such as those still running Windows 10, which reached end of support in October 2025.
2. Turn on multi-factor sign-in
Multi-factor authentication (MFA) requires a second step, such as a code from a phone app, in addition to a password. It stops most account takeovers even when a password is stolen. Enable it first on email, Microsoft 365, banking and any system with customer data.
3. Use strong, unique passwords
Reused passwords let one breach unlock many accounts. A password manager makes it practical for every person to use long, unique passwords everywhere without remembering them.
4. Encrypt laptops and phones
Encryption makes the data on a lost or stolen device unreadable without the sign-in. Windows 11 Pro includes BitLocker encryption for business laptops, and modern phones encrypt automatically when a passcode is set.
5. Protect against malware
Keep antivirus protection active on every computer, and teach your team to be cautious with unexpected attachments, links and requests for payments or passwords. Most attacks begin with a convincing email.
6. Back up important data
Follow the 3-2-1 rule: keep three copies of important data, on two different types of storage, with one copy off-site or in the cloud. An external drive combined with cloud storage such as OneDrive covers most small businesses. Test restoring a file every few months.
7. Have a plan for lost devices
Know in advance how you will lock or erase a missing laptop or phone, which accounts to change passwords for, and who needs to be notified. Device management tools let you wipe a lost device remotely.
8. Secure the network
A business-grade router or firewall, a strong Wi-Fi password and a separate guest network keep visitors and personal devices away from company systems. Learn more in our guide to securing a small office network.
Need help putting this in place?
Request a free security review and we will recommend the most important improvements for your business. The downloadable guide below summarizes these steps for your team.
Four security features worth adding to your next device refresh, from encrypted storage to biometric authentication.