Protecting shop or office Wi-Fi and separating card terminals

A weak business Wi-Fi network can give attackers a way to reach your computers and customer data. Separating your card payment equipment adds another layer. This is general guidance; always follow your payment provider's instructions.

Secure the Wi-Fi

1. Change the router's admin password from the default, and make it long and unique.
2. Use WPA2 or WPA3 security with a strong Wi-Fi password. Never leave it open.
3. Change the Wi-Fi password when staff leave.
4. Keep the router's software up to date, and replace routers that no longer receive updates.
5. Turn off features you do not use, such as remote administration, and WPS.

Give visitors their own network

Create a guest Wi-Fi that is separate from your business network. Customers and visitors can get online without reaching your till, files or printers. Most business routers offer this in a few clicks.

Separate the card terminals

• Card machines should not share a network with staff computers and guest devices. If they connect through your network, ask your payment provider how.
• Many terminals use their own mobile data connection or a dedicated line, which keeps them apart.
• If they must use your network, use a separate network or VLAN if your equipment supports it.
• Do not use the card terminal's network for general browsing or tills with weak security.
• Keep the terminal in sight, check for tampering, and know your supplier's contact details.

Other good habits

• Position the router out of customers' reach.
• Keep a list of devices connected to your network and remove those you do not know.
• Put smart devices and cameras on their own network if you can.

When to get more help

Get help if your router is old, if you are not sure how to create separate networks, if you accept card payments and are asked to complete a payment security form, or if you see unknown devices on your network.