Device security, passwords and access control

Well-protected devices form the foundation of digital security. A firewall, an antivirus program and automatic updates for the operating system, programs and mobile devices reduce the risk of damage caused by malware or unauthorised access. Strong passwords and access controls are also important factors.

Smartphones, tablets and computers contain a lot of personal and important data. If they are not adequately protected, malware, hacker attacks or technical problems can quickly lead to damage or data loss. Using your devices and security features responsibly is key to fending off attacks early on.

Setting up devices

Modern operating systems already include basic security features such as a built-in firewall, antivirus protection and an automatic update function. Enable the appropriate feature when prompted during the installation of the operating system. In particular, make sure your device is always kept up to date, as outdated software provides an entry point for cybercriminals.

  • Make sure that all devices (computers, smartphones, tablets, etc.) automatically install available security updates.
  • Enable the operating system’s built-in firewall before connecting your device to the internet or another network.
  • Use antivirus software and enable the automatic update feature. Run a full system scan regularly.
  • Install only software and apps that you actually need, and download them exclusively from official manufacturer websites or official app stores.
  • Enable hard drive encryption. Hard drive encryption protects stored data from unauthorised access by making all content readable only after successful authentication – even if the device is lost or stolen.

Devices connected directly to the internet

Avoid connecting devices directly to the internet. Instead, use a router with a firewall as an intermediary. It is usually sufficient to connect the devices to your Internet service provider’s router. Be careful when changing access rules on your router’s firewall or your computer.

Devices directly connected to the internet require special protection. Use passwords that meet the current requirements, and make sure the software on the device is up to date and remains so through automatic updates.

Mobile phones

Mobile phones contain a wealth of personal and business data and therefore require additional protection:

  • Use secure authentication (PIN, password or biometric methods) and set a short automatic lock-out time.
  • Avoid conducting online banking or other sensitive transactions on public Wi-Fi networks, for example in cafés or hotels.
  • Download apps only from reputable stores, and carefully review ratings and access permissions.
  • Keep your operating system and apps up to date to patch known security vulnerabilities.
  • Create backups using cloud services, PC synchronisation or external storage media.
  • Ensure that the data on your device is stored in encrypted format.
  • Enable the appropriate services so you can locate your device or erase data if it is lost.

Home network and Wi-Fi

Your home network connects all your devices to the internet. An unsecured home network can serve as a gateway for criminals and put all connected devices at risk.

  • Secure your router and Wi-Fi network. Change the router's default password. Keep the firmware up to date, use the WPA3 security standard for Wi-Fi networks (WPA2 at a minimum), and set up a separate guest Wi-Fi network.
  • Use strong Wi-Fi passwords. Wi-Fi passwords must be longer than standard passwords – the NCSC recommends a minimum of 20 characters to effectively make attacks more difficult.
  • Protect your smart home devices. Change default passwords, perform regular updates and, where possible, avoid direct internet access to devices.

Passwords and access security

Your computer, your mobile phone and various online services all require you to set a password. Poorly chosen or overly short passwords pose a significant security risk. Protect your devices and online accounts from unauthorised access, just as you lock the door when you leave your house or flat.

  • Use a unique password for each service, enable two-factor authentication wherever possible, and use a password manager that supports this feature.
  • Use a separate password for each online service that is at least 12 characters and includes uppercase and lower-case letters, numbers and special characters.
  • Change your passwords immediately if you suspect that a third party knows them.
  • Never enter passwords on pages that you have opened via a link, and always type web addresses manually.
  • Reputable companies will never ask for your password via email or phone.
  • Lock your screen when not in use and never leave devices unattended in public.

You can check the strength of any password. The Data Protection Officer for the Canton of Zurich provides a password checker online (German) that is publicly available and free of charge.

Further information

S-U-P-E-R.ch – Carry out regular updates

Swiss Crime Prevention (SCP): Check your antivirus software (German)