What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Start with four control layers: lock down router administration and Wi‑Fi, keep every computer supported and patched, enforce multi-factor authentication (MFA) and least privilege for cloud accounts, and maintain encrypted backups that you can actually restore. These settings reduce the most common paths into a small business without assuming that every router, operating system, or cloud subscription uses the same menus.
Which security changes should a small business make first?
Use this order when time or staff is limited. The sequence puts account takeover and unmanaged internet-facing equipment ahead of less urgent refinements.
As an Amazon Associate I earn from qualifying purchases.
| Priority | Change | What to verify |
|---|---|---|
| 1 | Change the router administrator password; update router firmware; require the strongest Wi‑Fi encryption the model supports. | The old default credential no longer works, the firmware is supported, and business devices connect using the intended encrypted network. |
| 2 | Turn on MFA for administrator, privileged, and remote-access accounts. | Each user can complete the provider’s accepted MFA method and recovery details are controlled by the business. |
| 3 | Enable automatic updates, malware protection, and the system firewall on computers. | Unsupported operating systems and applications are identified for replacement, not merely left on an exception list. |
| 4 | Apply least privilege and remove access that is no longer needed. | Employees, contractors, and service providers have individual accounts and only job-required permissions. |
| 5 | Automate protected backups and test retrieval. | At least one copy is encrypted and offline or isolated, and a staff member can restore a representative file. |
Record each change, its date, the person responsible, and the next review date. Exact labels depend on the device model, software version, cloud provider, and subscription; use current vendor documentation or a qualified service provider for the final click-by-click procedure.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Router and Wi‑Fi settings
The router controls the boundary between the internet and your office or remote workspace. A secure wireless password alone is not enough if the router’s management account still uses a default credential or its firmware is no longer maintained.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Replace the default administrator password
Sign in to the router’s management interface using the address and procedure in its current manual. Change the administrator username or password from the factory value to a unique, long password that is not reused anywhere else. Store it in the business password-management process, not on a label attached to the router. Confirm that the previous credential cannot still administer the device.
Some models expose a separate setting for administration from the internet. If that control exists, follow the manufacturer’s guidance for restricting management to the local network or an approved management path. Do not assume that a “Wi‑Fi password” change also changes the administrator credential; they are normally separate settings.
Keep firmware current and supported
Check the model’s support page for the latest firmware and for the vendor’s end-of-support status. Enable automatic firmware updates when the model offers them and the business can tolerate its restart behavior. Otherwise, schedule a recurring manual check and document the installed version. A router that cannot receive security updates should be placed on a replacement plan rather than treated as permanently secure.
Use the strongest available Wi‑Fi encryption
Choose the strongest encryption mode the router and all required business devices support. Avoid leaving an open network or an obsolete compatibility mode enabled just to accommodate an old device. If an older device cannot use the chosen mode, isolate or replace it instead of weakening the network used for business systems. Set a long, unique wireless passphrase and change it when an unauthorized person may have learned it.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Separate visitors and untrusted devices
Use a guest network or stronger network segmentation to keep visitor devices, smart equipment, and other less-trusted systems away from business computers and administrative interfaces. Confirm what traffic the guest network can reach; a label such as “Guest” does not prove that isolation is active. For a more controlled design, ask the router or network provider whether it supports separate virtual networks, firewall rules between them, and a documented way to administer those rules.
What about hiding the network name?
A CISA-hosted FCC small-business tip sheet recommends hiding the Wi‑Fi network name (SSID). Treat that as an additional, older tip-sheet recommendation—not as a substitute for encryption, a strong passphrase, and controlled access. Hidden SSIDs can also make onboarding and troubleshooting harder, and they do not make a determined network observer unable to discover the network. If you enable the option, document the exact SSID and connection process for authorized staff.
Router verification checklist
- Test that the management page is reachable only through the intended administration path.
- Connect a business laptop and confirm the expected encryption mode and network segment.
- Connect a guest device and verify that it cannot reach shared folders, printers, or management pages that should be private.
- Export or record the supported configuration and firmware version so recovery does not depend on memory.
Computer settings to change
Computers are safer when the business knows what exists, keeps it supported, and limits what a compromised account can do.
Maintain an equipment and software inventory
List every business computer, operating system edition and version, installed business application, owner, and support or end-of-life date. Include laptops used from home and devices that connect only occasionally. This inventory tells you where automatic updates are enabled, which machines need replacement, and whether a device has disappeared from management.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Enable automatic updates
Turn on automatic updates for the operating system, browsers, productivity applications, security tools, and device firmware where the vendor supports it. Configure restart or maintenance windows so updates complete rather than remaining indefinitely pending. For software that cannot update automatically, assign an owner and a recurring manual check. Keep a record of exceptions and the compensating action, such as removing the application or taking the device off the business network.
Replace unsupported systems and applications
End-of-support software may continue to run, but it no longer receives the fixes the vendor provides. Replace unsupported operating systems, applications, and hardware, or isolate them while a replacement is funded and scheduled. Do not describe an unsupported device as protected merely because antivirus software is installed.
Use malware protection and the system firewall
Enable the operating system’s supported malware protection and keep its definitions or engine updates current. Leave the host firewall enabled unless a documented, equivalent control is managing it. If a business application requires an exception, allow only the necessary program, port, or network scope and record who approved it. Periodically review exceptions; temporary troubleshooting rules often become permanent exposure.
Use individual accounts and limited privileges
Give each worker a separate account rather than sharing one login. Reserve administrator rights for tasks that require them and use a standard account for routine work. Individual accounts make access removal and investigation possible when a staff member, contractor, or provider leaves.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Cloud and other account settings
Cloud services move the security boundary to identity and permissions. A stolen password can be enough to bypass a well-configured office network unless the account has another verification factor and narrowly scoped access.
Require MFA, starting with the highest-impact accounts
Turn on MFA first for global administrators, billing and security administrators, remote-access users, and any account that can reset other users’ credentials. Then extend it to every employee and contractor account the provider supports. Confirm which MFA methods the service accepts and whether the recovery process is controlled by the business. A FIDO2 security key can be useful where the provider supports it, but compatibility, enrollment, spare-key handling, and account-recovery procedures must be checked before purchase.
Use unique passwords and a managed recovery process
Every cloud and administrative account should have a unique password. A password manager is a category-level option for generating and storing those credentials; choose one that fits the business’s device, sharing, and recovery requirements. Do not put shared credentials in email or a common document. Keep emergency recovery codes in a protected location that authorized personnel can reach when the primary administrator is unavailable.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Apply least privilege
Match permissions to job duties. A person who only reads reports should not receive an administrator role, and a service integration should not receive full access when a narrower scope is available. Review roles, API tokens, shared mailboxes, and third-party integrations on a schedule and after role changes. CISA guidance for small and midsized businesses specifically emphasizes least privilege for service-provider access.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Remove access promptly and monitor providers
Disable accounts when employment or a contract ends, remove former users from groups, rotate shared secrets, and revoke tokens that are no longer needed. Review provider relationships and access logs where the service offers them. Ask each provider who can administer your tenant, what MFA and audit controls are available, how support access is approved, and how an account can be recovered if the original administrator leaves.
Backup settings that make recovery possible
A backup is useful only if it is current, protected from the same incident as the original, and retrievable. CISA guidance recommends automated, regular backups; encryption; and an offline or air-gapped copy.
Automate critical data and configurations
Identify accounting records, customer files, contracts, source code, email, and system configurations that the business cannot recreate. Schedule automatic backups at an interval that matches how much work the business can afford to lose. Include configuration exports for important network and cloud systems where the provider permits them.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesProtect copies from tampering
Encrypt backup data in transit and at rest. Keep at least one copy offline or isolated so ransomware or a compromised administrator cannot alter every version. An encrypted external drive can be one component, but it is not a complete plan if it remains permanently connected or if nobody rotates, stores, and inventories it safely.
Test restoration
Restore a representative file and, periodically, a complete system or service according to the business’s recovery priorities. Measure how long retrieval takes, verify that permissions and file integrity survive, and record any missing credentials or software dependencies. Update the procedure after every failed test or major system change.
A practical implementation playbook
- Assign ownership. Name one accountable person and a backup, even if an outside provider performs the technical work.
- Inventory first. Record routers, access points, computers, applications, cloud tenants, administrators, service providers, and backup locations.
- Close high-risk gaps. Change default credentials, enable MFA for privileged and remote users, and remove obsolete accounts.
- Patch and segment. Turn on automatic updates, replace unsupported equipment, enable firewalls, and separate guest or untrusted devices.
- Build recovery. Automate encrypted backups, create an offline or isolated copy, and perform a restoration test.
- Document and review. Keep configuration notes, vendor support dates, exceptions, recovery codes, and review dates in a protected location.
When a menu or feature is missing, do not guess. Check the current vendor documentation for the exact model, software version, and subscription tier, or have a qualified provider confirm the supported control. Security settings that the product cannot enforce should become a documented replacement or compensating-control decision, not an untracked assumption.
Quick Recap
Common failure modes and fixes
- “We changed the Wi‑Fi password, so the router is secure.” Change the separate administrator credential, update firmware, and verify management access.
- “Automatic updates are on, but an old laptop remains in service.” Check support status; replace unsupported operating systems, applications, and hardware.
- “Everyone uses one cloud login.” Create individual accounts, require MFA, assign job-based roles, and disable access when a person leaves.
- “The backup drive is plugged in all the time.” Keep an encrypted offline or isolated copy and test that it can be restored.
- “The guest network has a different name, so it must be isolated.” Test reachability to business devices and confirm the router’s segmentation settings.
- “A provider has administrator access forever.” Review the relationship, limit permissions, require approved access, and monitor available logs.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
