When working from home, it’s important to ensure that your home network is properly secured. The tips below can help you strengthen your network’s security. You can usually find specific instructions in your router’s user manual or on the manufacturer’s website.

• Use a strong, unique Wi‑Fi password: A robust password helps prevent unauthorized users from connecting to your network. Refer to your router’s manual if you need help changing it.
• Enable WPA3 encryption: WPA3 (Wi‑Fi Protected Access 3) is the most secure wireless encryption standard currently available. Turning it on helps protect your data from potential cyberattacks.
• Keep your router’s firmware up to date: Install firmware updates regularly and enable automatic updates if your device supports them. These updates often patch security vulnerabilities.
• Change your router’s default admin password: This is different from your Wi‑Fi password. Many routers ship with generic default login credentials, which makes them easy for attackers to guess. Updating this password significantly improves your network security.

Protecting your accounts is essential. Follow the best practices below to keep your information safe:

• Use strong, unique passwords for every account: Reusing passwords increases the risk that multiple accounts could be compromised at once.
• Store your passwords in a trusted password manager:
  • Password managers allow you to remember just one master password while securely storing the rest.
  • They help you generate long, unique passwords for each account without having to memorize them.
  • Be sure to use a very strong master password and enable a highly-secure MFA option for your password manager. This is the key to protecting all your stored credentials.
  • Examples of password managers include 1Password, Bitwarden, KeePass, Dashlane, or RoboForm
• Always use Multi-Factor Authentication (MFA) on every account: MFA is required for your OC account and provides an extra layer of protection in case someone obtains your password.
  • Whenever possible, avoid using SMS for MFA, as it is more vulnerable to interception and social engineering than other methods. 
  • Go a step further and use passwordless authentication methods. Use passkeys through the Microsoft Authenticator app or FIDO2 security keys. By removing the need to enter a password, you significantly reduce the risk of it being captured through phishing or fake login pages, making it much more difficult for cyber criminals to gain access to your account.
  • For strong protection, use one of the following MFA options instead of SMS:
    • Passkey within Microsoft Authenticator - Passwordless option
    • Security key (FIDO2) - Passwordless option
    • Microsoft Authenticator
    • Hardware token
• Be cautious with unexpected MFA prompts: Only approve MFA requests that you initiated. If you receive an MFA notification you did not trigger, contact IT Security immediately. This may be a sign someone is trying to access your account.

Safeguarding college‑related and personal information requires using technology responsibly and following OC's policies and standards. By following these practices, you help protect both college and personal information from unauthorized access, data breaches, and other security risks.

• Only Use OC Devices for Sensitive Work
  • Only use your OC-provided device whenever accessing sensitive college information.
  • Sensitive information includes (but is not limited to) student records, employee data, financial information, confidential emails, and internal documents.
  • Refer to the Standard for Security Classification of College Information to understand how OC defines low, medium, high, and very high‑risk data.
• Protect Your Personal Data
  • Avoid using OC devices and services to store or access personal accounts, personal files, or non‑work‑related services.
  • For guidance on acceptable incidental personal use, review the Use of Information Technology Resources policy.
• Encryption and Storage Requirements
  • Save all sensitive files only in approved, secure, and encrypted OC storage locations.
  • Only store and share files through SharePoint and OneDrive using your OC account. Never save sensitive work files on personal cloud services, unapproved platforms, or unencrypted devices.
  • Consult the Standard for Transmission and Sharing of College Electronic Information for detailed requirements on securely sharing and transmitting OC data.

For more information on device security, please view OC's Standard for Securing computing and mobile device storage.

Be cautious of unexpected password reset requests and avoid “urgent” emails asking for personal or account information.

• Report suspicious emails and messages immediately to IT Security.
• Check out our Simulated Phishing Email Campaigns article for tips on spotting and reporting phishing scams.