Safeguard
Security Guides•

How to secure a phone hotspot before tethering a laptop

Steps to lock down a phone hotspot before you tether a work laptop: password, WPA3 where offered, names, device limits and what to check afterwards.

Safeguard Security Team
3 min read

To secure a phone hotspot, give it a long unique password, choose the strongest security mode the phone offers, use a neutral network name, turn it off when you finish, and keep the phone updated. Never switch the password off. Without one, the hotspot is an open network.

Definition

A hotspot, also called tethering, lets a phone share its mobile data connection with other devices over Wi-Fi. Android describes it as using the phone's mobile data to connect another phone, tablet or computer to the internet. The phone becomes a small router that you carry.

Steps

  1. Open the hotspot settings. On Android, swipe down from the top of the screen, then touch and hold the Hotspot tile. On other phones the option sits under network or connection settings.
  2. Set a long random password. A passphrase of several unrelated words works well and is easy to type once.
  3. Check the security mode. Android shows a Security setting. Pick the strongest option on the list and avoid None. If your phone and laptop both support WPA3, use it. The Wi-Fi Alliance says WPA3 gives WPA3-Personal users increased protection from password guessing attempts.
  4. Change the network name. Avoid your name, your employer or your phone model. A neutral name gives an observer less to work with.
  5. Limit the connected devices if the phone allows it. Android says a hotspot can share data with up to 10 other devices. Most developers need one.
  6. Join from the laptop once, save the network, and turn off automatic joining for any other networks you do not recognise.
  7. Turn the hotspot off when the job is done.

Mistakes people make

  • Leaving the password at the factory value printed in a screenshot or shared in a group chat.
  • Keeping the hotspot on all day so that a new device could attempt to join at any time.
  • Using the same password as a home Wi-Fi network.
  • Forgetting that the phone itself needs a screen lock and recent updates.
  • Ignoring data limits, which can lead to throttling in the middle of a long pull request review.

What to check afterwards

Look at the connected devices list before you close the laptop. If an unfamiliar device appears, change the password and turn the hotspot off. Rotate the password after a trip where you shared it with colleagues.

For the choice between hotspot and shared Wi-Fi, see Phone hotspot or hotel Wi-Fi for work: which is safer?.

A note for teams

If your engineers travel often, say in the travel policy that hotspot passwords are personal, not shared in tickets or chat. The one page travel policy template has a line for it.

Safeguard works on the code side, with dependency scanning, SBOMs and policy gates, so a build started from a hotspot still passes the same checks. You can run a free scan on a repository.

Quick check

Does WPA3 on a hotspot hide my browsing from the sites I visit?

No. It protects the wireless link between devices. The sites you visit still see your connection, so HTTPS and good account hygiene still matter.

How often should I change the hotspot password?

Change it if you shared it, if an unknown device connected, or after a trip. Otherwise a long unique password does not need frequent changes.

Sources

Last reviewed: 19 October 2026.

Never miss an update

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.