Direct Answer
In a coworking space, the operator controls the Wi-Fi, printers and building access, so SMBs should treat all three as untrusted and secure what they own: encrypted, centrally managed devices, multi-factor authentication on every account, and a VPN for sensitive work. Physical habits, such as never leaving laptops unattended, using privacy filters and taking confidential calls in closed rooms, matter more than in a private office. Keeping everything cloud-based with remote IT support means nothing critical depends on the shared space. deeploi, the All-in-One IT Management Platform for SMBs with or without an in-house IT team, combines device management, zero-touch onboarding and remote expert support for teams working from shared offices.
Key Takeaways
In a shared office, the operator controls the network, printers and building access, so treat all three as outside your security perimeter.
Your protection comes from the layers you own: encrypted devices, multi-factor authentication, automatic updates and a VPN for sensitive work.
Physical security matters more than in a private office, because strangers sit within arm's reach of your laptops and conversations.
Cloud-based device management and remote support replace the server room, so nothing critical lives in a space you don't own.
Give every employee a short, written rules sheet on day one, covering screen locks, printing, calls and who to contact when something goes wrong.
When your team works from a coworking space, someone else owns the Wi-Fi, the printers and the front door. That changes the job. You can't configure a router you don't control, and you can't vouch for the dozens of other companies on the same network. What you can do is secure your own side properly and ask the operator the right questions before you sign. This guide walks through both, in the order you'll actually need them.
What you need before moving into a coworking space
Two things make the rest of this straightforward. First, a current list of every company laptop, phone, business account and piece of software your team uses. You can't protect what you haven't written down, and this list doubles as the starting point for any office IT setup checklist later on.
Second, a named contact at the coworking operator who can answer technical questions. Not the sales rep: someone who knows how the network is built and who hands out door badges. If nobody at the space can answer those questions, that's already useful information.
It also helps to know which tools you genuinely need. Smaller teams often end up with overlapping subscriptions, and our overview of IT tools for teams without an IT department is a good sanity check before you add more.
Step 1: Audit the operator's setup before you commit
Before signing, ask the operator how the network is built. The answers tell you how much extra work sits on your side. Bring this list to the tour:
Is each company on its own network segment, or does everyone share one flat network?
Is there a separate network for guests and day-pass visitors, and how is it kept apart from member traffic?
Who can see print jobs on the shared printers, and how long are they stored?
How is building access controlled, and what happens to a badge when an employee leaves?
Are there lockable storage options or private rooms for confidential calls?
Who gets notified when the network configuration changes?
Write down where their responsibility ends and yours begins, then keep that note with your contract. Most operators manage the space well, but their security program covers the building, not your data. If you want a sense of what good separation looks like, our piece on guest Wi-Fi and visitor access explains the segmentation logic in plain terms.
Step 2: Secure devices and accounts, not the network
Assume the shared network is untrusted and build your protection one level up. That means every company device is encrypted (BitLocker on Windows, FileVault on Mac), locks its screen after a short idle period, installs security updates automatically and follows a password standard you actually enforce rather than suggest.
Then protect the accounts. Multi-factor authentication belongs on email, your cloud workspace, finance tools and anything holding customer data. Attackers have adapted to it, so pair it with awareness of MFA fatigue attacks and push approvals nobody requested. For anything sensitive over shared Wi-Fi, route traffic through a business VPN. The same thinking applies whether the desk is in a coworking space or a living room, which is why the secure home office checklist transfers almost directly.
Private devices deserve attention too. In a 2025 workplace cybersecurity survey, 72% of workers said they had used a personal device for work (RS Americas). In an open-plan shared office, an unmanaged phone or tablet signing into your workspace is a gap you can't see. Decide now whether you allow it, and under what conditions. For the wider picture, our cybersecurity guide for small businesses covers each security layer in more depth.
Step 3: Protect devices and conversations physically
In a shared space, physical security deserves as much attention as the network. Someone walks past your desk every few minutes, and most of them don't work for you.
Never leave a laptop unattended, not even for a coffee run. Use a locker, or take devices home at the end of the day.
Fit privacy filters to laptops and phones so the person at the next desk can't read your screen.
Sit with your back to a wall where you can, so nobody reads over your shoulder.
Don't open customer data in open seating. Move to a closed room or a booth when you need it.
Take confidential calls in phone booths or meeting rooms. Hiring discussions and pricing calls carry further than people think.
Avoid printing sensitive documents on shared printers. If you must print, use pull printing, which releases the job only once you're standing at the device.
Report a lost or stolen device immediately so it can be locked or wiped remotely, and put that rule in writing in your company device policy.
{{cta}}
Step 4: Run IT without a server room
You won't get a cabinet, a cupboard or a quiet corner for hardware, and that's fine. Keep everything cloud-based so nothing important depends on a box sitting in a building you share. File storage, identity, backups and device management all belong in services you can reach from anywhere.
Hardware should arrive ready to work. Have laptops shipped preconfigured to the coworking address or straight to an employee’s home, so they enroll in device management automatically the first time they’re switched on. That is how IT onboarding without the stress works in practice, and it removes the need for anyone to set up a machine at a hot desk. deeploi, the All-in-One IT Management Platform for SMBs with or without an in-house IT team, combines automated device and account management with IT experts you can reach remotely, which is what makes IT management for distributed teams work without a server room.
Support has to work the same way. Nobody is walking over to fix a laptop, so remote IT support for businesses needs to handle password resets, access questions and hardware diagnostics from a distance. The same model holds if you later add a second site, as our guide to IT across multiple locations in Germany describes.
Step 5: Write a first-day rules sheet for your team
One page, handed over on day one, saves a lot of awkward conversations later. Keep it short enough that people read it.
Lock your screen every time you stand up, even for a minute.
Your badge is yours. Don't hold the door for people you don't recognize.
Clean desk at the end of the day: no papers, no notebooks, no USB sticks left behind.
Don't bring clients or visitors into member-only areas without clearing it with the operator.
Forward suspicious emails to IT as an attachment instead of deleting them, because a screenshot hides the details IT needs to check where the email came from.
The contact for IT problems is listed below, along with the number to call immediately if a device goes missing.
If you want this formalized rather than informal, build it into a written policy. Our IT security policy template for SMBs gives you the sections auditors and enterprise customers expect to see.
Troubleshooting: common issues in shared office IT
The operator changes the Wi-Fi password or network configuration
It happens, usually without warning, and usually on a day when you have client calls. Keep a mobile hotspot plan as a fallback for at least a few team members, and agree in the contract that the operator notifies you of network changes in advance. If your VPN stops connecting after a change, that's often new filtering on their side, so ask before you start debugging your own setup.
A team member clicks a suspicious link on the shared network
Speed matters more than blame. Disconnect the device from Wi-Fi if anything was downloaded, report it to whoever handles your IT, then reset the affected password from a different device and sign the user out of all active sessions. Check the mailbox afterward for new forwarding rules. Breaches remain common: in the UK Cyber Security Breaches Survey 2025/2026, 43% of businesses reported experiencing a cybersecurity breach or attack in the previous 12 months (UK Department for Science, Innovation and Technology). If personal data was exposed, GDPR Article 33 requires you to notify your supervisory authority within 72 hours of becoming aware, unless the breach is unlikely to pose a risk to the people affected.
Frequently asked questions
Do we still need GDPR-compliant IT measures in a coworking space?
Yes. Your obligations don't shrink because you rent a desk instead of a floor. Encryption, access control, multi-factor authentication and patch management are expected regardless of where your team sits, and you still need to document them. A shared environment arguably raises the bar on physical measures such as screen privacy, clean desks and secure printing.
Can a coworking operator access our data through the shared network?
Without proper segmentation, other tenants and the operator's own equipment sit on the same network as your devices, which makes traffic visible in principle. The safeguards you control are the ones that matter: full disk encryption, MFA on every business account, a VPN for sensitive work and devices that are centrally managed rather than configured by hand.
How do we handle IT support without an IT closet on site?
Remote device management and remote support take the place of the server room. Devices are enrolled in the cloud, policies are pushed centrally, and problems get solved over a connection rather than in person. With deeploi, Sam, the AI IT support agent, answers instantly, 24/7, and human IT experts respond within 30 minutes. Sam acts as the first point of contact and hands complex cases to the IT support team.
Conclusion: your coworking IT checklist
Five steps, in order:
Audit the operator’s network, access and printing setup before you sign.
Secure your devices and accounts as if the network were hostile.
Add physical habits that fit an open, shared room.
Keep everything cloud-based so no hardware depends on the space.
Hand every new starter a one-page rules sheet.
Share the first part with your operator and the last part with your team. Then revisit the whole thing whenever you grow, change floors or renew the contract, because a setup that worked for eight people at two desks rarely still fits at thirty.
