Borrowed and shared equipment.
WHAT TO ESTABLISH
Whose device it is, and what is acceptable.
WHAT TO AVOID
Signing into your accounts on a family or shared device Letting others use a device holding business accounts
WHY
Anyone using it can reach your accounts and saved passwords.
WHAT TO DO IF SHARING IS UNAVOIDABLE
Separate user accounts, each with its own password Never save business passwords in a shared browser profile Sign out fully after use
WHAT TO KEEP EXCLUSIVE
The device holding your authentication application.
WHY
Your second factor should be on a device only you use.
WHAT TO EXPLAIN TO OTHERS USING A WORK DEVICE
Not to install software Not to click through warnings To say if something odd happens
WHAT TO PREFER
A separate device for business, even a modest one.
WHAT IT COSTS
Less than a compromise.
WHAT TO CHECK PERIODICALLY
What is installed, and who has used it.
