Mobile Security Guide for Remote Workers
Your phone contains your email, 2FA codes, banking apps, and work tools. It's your most sensitive device — here's how to secure it.
iOS Security Checklist
- Use a 6-digit passcode minimum (alphanumeric is better)
- Enable Face ID / Touch ID
- Enable Find My iPhone (Settings > [Name] > Find My)
- Enable 'Erase Data' after 10 failed passcode attempts
- Install a VPN app and enable auto-connect for Wi-Fi
- Enable Lockdown Mode if you're a high-risk target
- Disable lock screen notifications for sensitive apps
- Review app permissions: Settings > Privacy & Security
- Enable automatic iOS updates
- Use iCloud Advanced Data Protection for E2E encryption
- Disable Siri on lock screen
- Enable Stolen Device Protection (iOS 17+)
Android Security Checklist
- Use a strong PIN (6+ digits) or password
- Enable fingerprint / face unlock
- Enable Find My Device (Settings > Security > Find My Device)
- Verify encryption is active (Settings > Security > Encryption)
- Install a VPN app and enable auto-connect
- Only install apps from Google Play Store
- Disable 'Install from unknown sources'
- Review app permissions: Settings > Apps > [App] > Permissions
- Enable automatic system updates
- Use Work Profile for BYOD (separates work and personal data)
- Enable Google Play Protect scanning
- Disable USB debugging unless actively developing
VPN on Mobile: What You Need to Know
Battery Impact
With WireGuard protocol, expect 3-5% additional battery drain. IKEv2 is similar. OpenVPN uses more battery (8-12%). All are acceptable for daily use.
Auto-Connect Settings
Configure your VPN to auto-connect when joining Wi-Fi networks. Most VPN apps have this in Settings. On Android, you can also set an "Always-on VPN" at the OS level.
Split Tunneling (Android)
Android supports split tunneling — route work apps through VPN while letting personal apps connect directly. iOS does not support this.
Kill Switch
Android has OS-level "Block connections without VPN" (Settings > VPN > gear icon). iOS VPN apps implement their own kill switches.