How to Secure Your Unattended Laptop

Image Created with Meta.AI

It happens to all of us. You're working remotely. You need to step away from your laptop for a minute to grab a coffee, chat with a coworker, or just stretch your legs. But what if that quick break turns into an opportunity for a prank or, worse, something malicious? In our fast-paced world, an unattended laptop is a vulnerable laptop. This guide will walk you through essential steps to secure your device, ensuring that when you come back, it's just as you left it—safe, sound, and ready to go. Here's what you need to know:

According to some reports, as many as 74% of all laptop thefts happen in public places or while traveling. This includes airports, cafes, hotels, and public transport. This means that a laptop left unattended in one of these locations is at a significantly higher risk than one left in a secure office or home. The statistics on theft from public places and the ease of unauthorized access to an unlocked device make it clear that the risk is high. The real danger isn't just a prank; it's a security incident that can lead to data breaches, identity theft, and significant financial loss. Here's what you can do to keep your laptop safe.

Password-Protected Lock Screen. Think of your laptop like your front door. You wouldn't leave your house unlocked when you step out, so why leave your digital life exposed? Enabling a password-protected lock screen is the digital equivalent of turning the key in the lock. This simple habit—a quick tap of a button or a short inactivity period—is your first and best defense against prying eyes, mischievous coworkers, and potential data theft. It's the easiest way to ensure that when you come back, your work is exactly where you left it, and your privacy remains intact. There are two methods you can use to lock your Windows and Macintosh computers:

How to Manually Lock Your Computer Screen

On Windows: Press the Windows key + L. Your screen will instantly lock, and you'll be required to enter your password, PIN, or use Windows Hello to unlock it.

On macOS: Press Control + Command + Q. This shortcut will immediately lock your screen and require a password to log back in.

How to Automatically Lock Your Computer Screen (after a period of inactivity)

Setting up an automatic lock is a crucial backup plan in case you forget to manually lock your screen.

On Windows

Open the Settings app (the gear icon on your Start Menu, or press Windows key + I).

Go to Accounts > Sign-in options.

Under the "Require sign-in" section, you can set a time frame for when Windows should require you to sign in again after you've been away. Choose a short time like "Every time."

You can also go to Settings > Personalization > Lock screen to adjust screen timeout settings.

On macOS

Click the Apple menu in the top-left corner of the screen and select System Settings.

In the sidebar, click on Lock Screen.

Look for the setting "Require password after screen saver begins or display is turned off."

Use the dropdown menu to select a short time frame, such as "Immediately" or "5 minutes."

Encrypt Your Laptop Data with BitLocker or FileVault.

You can also encrypt your system drive with BitLocker in Windows or FileVault in Mac. It features a pre-boot authentication mechanism that prevents the OS from loading without the encryption key. You can lock down the OS and encrypt data, so your system becomes inaccessible. If someone gains access to your PC, they still can’t steal data from it or try to access the OS, as it prevents access even before the OS loads.

Windows (BitLocker)

BitLocker is available on Windows 10/11 Pro, Enterprise, and Education editions. If you have Windows Home, you may have "Device encryption," which works similarly.

Click the Start button and type "Manage BitLocker."

Select Manage BitLocker from the search results.

Click Turn on BitLocker for the drive you want to encrypt (usually your main C: drive).

Follow the prompts to save your recovery key. You can save it to your Microsoft Account, a file, or print it. This key is crucial if you forget your password.

Choose whether to "Encrypt used disk space only" (faster for new computers) or "Encrypt entire drive" (more secure for computers with existing data).

Start the encryption process. It may take some time depending on the size of your drive. Your computer will likely need to restart to complete the setup.

macOS (FileVault)

FileVault is a standard feature on all modern Macs.

Click the Apple menu in the top-left corner and select System Settings.

In the sidebar, click on Privacy & Security.

Scroll down to the FileVault section and click Turn On.

You'll be prompted to enter your administrator password.

Choose how you want to unlock your disk if you forget your password:

Allow my iCloud account to unlock my disk (easiest method, links to your Apple ID).

Create a recovery key (a long string of letters and numbers you must write down and store in a safe place).

Click Continue. The encryption will begin in the background, and you can continue to use your Mac as it works. You can check the progress in the FileVault settings.

Disable External Boot Support

External boot support allows a computer to start its operating system from an external device, such as a USB drive or an external hard drive. Disabling this feature is an important security step to prevent unauthorized users from booting a malicious operating system on your machine. The method to disable this varies based on your computer's manufacturer and operating system.

On Windows

To disable external boot support on a Windows PC, you must access the UEFI/BIOS settings. Since manufacturers use different keys to enter the BIOS, you'll need to figure out which key your computer uses (common keys are F2, F10, F12, ESC, or DEL).

Restart your computer.

During the startup process, repeatedly press the key to enter the BIOS until the menu appears.

In the BIOS, navigate to the Boot or Security tab using the arrow keys.

Look for options like "Secure Boot," "Boot Order," or "External Boot."

Set your internal hard drive as the first boot device in the boot order.

Look for and disable options that allow booting from external or removable media, such as USB or network boot.

Save your changes and exit the BIOS. The computer will then restart and boot from the internal drive.

On macOS

Newer Macs with Apple silicon or a T2 Security Chip have an additional layer of protection called Startup Security Utility, which controls external boot support.

Shut down your Mac.

Press and hold the Power button (for Apple silicon) or Command + R (for Intel Macs) until you see the startup options or the Apple logo.

Select Options and click Continue.

Choose your administrator account and enter the password.

From the menu bar at the top of the screen, select Utilities > Startup Security Utility.

In the utility, you can set the Secure Boot level to "Full Security" and ensure that the option "Allow booting from external or removable media" is not selected.

Restart your Mac to apply the changes.

Hopefully, this will give you tips to help you keep your laptop safe. Apart from these protection measures, you should be careful about obvious signs of tampering, like a moved laptop or something attached to the laptop. If you find any tampering signs, it’s best to back up your important data and perform a clean install of your Windows or Macintosh computer. If you enjoyed this post, let me know in the comments below. If you have any questions, please reach out via email or on social media. I'm always available.

Looking for More Useful Tech Tips? Our Tuesday Tech Tips Blog is released every Tuesday. If you like video tips, I LIVE STREAM new episodes of 'Computer and Tech Tips for Non-Tech People' every Wednesday at 12:30 pm CST on Facebook, Instagram, LinkedIn, and Twitter.   Technology product reviews are posted every Thursday. You can view previous episodes on our YouTube channel.

Sign Up for My Newsletter! Click this link to sign-up and subscribe, and you will receive every tip directly in your inbox each week.

Want to ask me a tech question? Send it to burton@burtonkelso.com. I love technology. I've read all of the manuals, and I'm serious about making technology fun and easy to use for everyone.

Need computer or technology help? If you need on-site, remote tech support or Managed IT Services for your Windows\Macintosh, computers, laptops, Android/Apple smartphones, tablets, printers, routers, smart home devices, and anything else that connects to the Internet, please feel free to contact my team at Integral. My team of friendly tech experts can help you with any IT needs you might have. Reach out to us a www.callintegralnow.com or phone at 888.256.0829.

Looking for an on-air TV & Radio tech expert for media commentary, interviews, and expert analysis? I'm available for commentary and analysis on AI, cybersecurity, and breaking tech news. Let's connect!

Are you looking for a technology speaker to bring a fresh perspective to your next event? I'm a renowned tech expert and two-time TEDx keynote speaker who demystifies the complex worlds of Cybersecurity, Artificial Intelligence, and Digital Marketing. I deliver powerful insights that help organizations navigate the future of technology securely and effectively. I'd love to connect.

Please share this with your friends and family! If you found this post useful, would you mind helping me out by sharing it? Just click one of the handy social media sharing buttons below.

The above content is provided for information purposes only. All information included therein is subject to change without notice. I am not responsible for any direct or indirect damages arising from or related to the use of or reliance on the above content.