The Laptop Security Checklist for Coaches and Consultants Who Work on the Road

A typical week for a solo consultant might look like this: a discovery call from a café on Monday, a workshop in a client's meeting room on Wednesday, and a proposal finished on the train home on Thursday. That is three places outside your own office, all used by the one machine that holds your client notes, invoices, email and bank login.

For a one-person business, that laptop is the company. The good news is that protecting it doesn't take an IT department, just a handful of habits you set up once.

Client Data Is a Solo Business's Biggest Liability

When you work for yourself, you are the security team, and any mistake lands on your reputation.

The usual risk isn't a film-style hack. It's ordinary account takeover. Someone gets into your email, reads a few threads, then emails your clients an invoice with "updated" bank details. UK Finance and Action Fraud have warned businesses about this invoice and mandate fraud for years, because it works: the email comes from a real address the client already trusts.

Leaked documents carry a quieter cost. A strategy deck left in a publicly shared folder, or a client file sent to the wrong person, can end a relationship that took a year to build.

Other People's Wi-Fi: What Can Actually Be Seen

Most websites now use HTTPS, so the content of a page is encrypted between your browser and the site. That helps, but it doesn't make café or guest Wi-Fi private. Whoever runs the network can still see which services you connect to and when. On a busy hotspot, you also can't be sure the network is the real one: a fake hotspot named "Guest WiFi 2" costs an attacker very little to set up.

A VPN such as X-VPN adds a layer of privacy. It encrypts traffic routed through it between your laptop and the VPN server, reducing what the local network can learn about the services you use. The useful habit is simple: turn it on before you open your inbox on any network you don't own, whether that's a client's guest Wi-Fi, train Wi-Fi or an airport lounge.

Confirm the network name with staff before connecting. A network without a password is not automatically fake, but an unexpected login page asking for banking details or software downloads is a reason to stop. If you cannot verify the network, use your phone's hotspot instead.

Be clear about the limits. A VPN protects the connection, not your judgement. It won't stop you clicking a convincing phishing link, and it won't help if the laptop itself is stolen. That's what the next two sections are for.

Lock Down the Accounts That Run the Business

Start with email, because almost every other account can be reset from it.

• Use a password manager. One strong master password, and a unique password for everything else. Reused passwords are how one breach at a random website becomes a breach of your business.
• Turn on two-factor authentication, starting with email, then banking, invoicing, cloud storage and your calendar. Choose an authenticator app over text-message codes where the service offers it.
• Tidy client access. When an engagement ends, remove shared folders and revoke guest access to your tools. Old links stay live until someone switches them off.

Make the Laptop a Dead End for Thieves

If your laptop disappears from a train, the question is whether the thief gets a machine or your clients' files.

• Encrypt the disk. On a Mac this is FileVault; on Windows it's BitLocker or Device Encryption, depending on your edition. Without the password, the data stays unreadable.
• Set auto-lock to a few minutes, and lock the screen every time you stand up in a shared space.
• Enable automatic updates and install security updates promptly, restarting when needed.
• Add a privacy filter if you often work on trains or in client offices. It makes your screen harder to read from the side.
• Set up device recovery before you travel. Find My on a Mac supports locating, locking and remotely erasing the device; Find My Device on Windows supports locating and remote locking. Remote actions depend on the device being reachable, so keep disk encryption enabled too.

Set up your connection tools at home too, not in a hurry at the station. If you work on a Windows machine, install the VPN app for Windows before your next trip and check it connects, so protection is one click away when you're on someone else's network.

A 10-Minute Weekly Routine

Habits slip when they depend on remembering. Put a recurring ten-minute slot in your calendar, say on Friday afternoon, and run through the same list:

1. Check that your backup ran and that at least one copy of your work lives somewhere other than the laptop.
2. Open your email account's security page and review recent sign-ins. Anything you don't recognise means changing the password now, not on Monday.
3. Install waiting updates and restart.
4. Clear client files you no longer need out of your Downloads folder.
5. Review which shared links and folders are still open to people outside the business.

None of this will impress anyone in a pitch meeting. But the day a client asks how you look after their data, you'll have a real answer, and a consultant who can explain their own safeguards is easier to trust with someone else's.