Guest Wi-Fi at reception: what front desk and office staff should do
Got a suspicious email? Check it free Paste it into our free phishing checker and get a verdict with the red flags. No sign-up. Then run a free phishing test for your team. Check an email free → Ngozi is at the front desk of a small clinic. A man in a neat shirt says he is waiting for a client. He asks for the Wi-Fi, holds up a USB stick, and says, “Can I just print one page from your computer? My phone is nearly dead too.”
Four small asks. Each one is easy to say yes to. Each one is a way into the office.
You are the first person visitors meet. Here is how to be kind and careful at the same time.
What are the four asks?
- “What is the Wi-Fi?” Give the guest Wi-Fi name and password. Never the staff one.
- “Can I charge my phone off your PC?” Use a wall socket. Not a computer port.
- “Can you hold the door?” Ask them to sign in at the desk first.
- “Can I just print this?” Ask for the file by email instead of a stick.
Why guest Wi-Fi and not business Wi-Fi?
The staff network is where your printers, files and work computers live. A visitor’s phone or laptop is not under your control. It might have malware on it, and the visitor may not know.
A guest network keeps them apart. They get the internet. They do not get your files.
If your office does not have a guest network, tell your manager. The owner may find AkolagTech’s guide on guest Wi-Fi versus business Wi-Fi a helpful read.
What is the 10-second check?
The 10-second check
- Is this a guest? Give the guest Wi-Fi card. Not the staff password. Not a photo of the router sticker.
- Is it plugged into my computer? A stick, a phone cable or a power bank. If yes, say no.
- Did they sign in? Before they go through a door, they sign in and get a visitor badge.
- Do I know who they are here to see? Call that person. Do not take the visitor's word.
What do I say about USB sticks and chargers?
A USB stick can carry malware that starts the moment it is plugged in. CISA’s page on using caution with USB drives says not to plug in an unknown drive, and to hand a found one to IT.
You can say:
- “I am sorry, I cannot plug that in. It is an office rule. Can you email it to me?”
- “I can charge your phone at the wall socket by the sofa.”
- “IT does not let us use outside sticks. They can help you if you call them.”
Say it with a smile. You are not being rude. You are doing your job.
A charging cable can also be a trick. A cable that looks normal might hide hardware that does more than charge. Use your own cables and the office’s own.
What about tailgating?
Tailgating is when a person walks in behind you through a door that needs a badge or key. It happens because holding a door is polite.
In a small office, you can say: “Welcome! Let me sign you in at the desk first.” You can say it warmly and still not open the inner door.
If you see someone you do not know in a staff area without a badge, ask who they are here to see. If you do not feel safe, tell a manager. You do not need to be a hero.
What about “can I just print something from your PC”?
This is a common one. It sounds harmless. A file on a stick, a link, or a document on their phone can all carry something nasty.
Better:
- Have them email the file to a shared front-desk address, and you print it from there.
- Ask them to show you the page on their phone and print only a paper they hand you.
- For forms, keep a few printed copies at the desk so they do not need to print.
If you think the email looks odd, our guide to spotting a fake email can help.
What about the US and Nigeria?
In the United States, clinics, law offices and tax practices handle private data. A visitor on the staff network, or at an unlocked screen, is a rules problem as well as a safety one. See our posts on HIPAA for small practices and FTC Safeguards for tax preparers.
In Nigeria, the same applies to clinics, schools, banks and shops that hold customer data. If your office holds personal data, the NDPA has rules about keeping it safe. Our post on the NDPA staff training checklist is a good start.
What if you already did it?
Tell someone. A quick report is far better than a quiet worry.
- Gave out the staff Wi-Fi? Tell IT. They can change the password, and everyone gets the new one.
- Plugged in a stick or a phone? Unplug it. Tell IT right away. Do not keep working on that computer.
- Let someone in without signing in? Tell your manager. Check where they went.
- Printed something odd? Tell IT, and keep the file name or a photo of the page.
- Clicked a link? See what to do after clicking a phishing link.
Keep reading
Related guides: work phone safety habits, public Wi-Fi safety for staff and why to stop sharing work logins. A call from a “visitor” can also be a scam, as in AI voice scam calls. For safe email practice, see the QR code check too.
Try it safely
Our free phishing test sends your team safe, made-up phishing emails and shows who clicked and what to fix. See also how phishing simulation training works.
For managers and owners: front desk staff can only follow these steps if there is a guest network, a visitor sign-in and a rule they can point to. AkolagTech explains how to set up guest Wi-Fi versus business Wi-Fi.
Questions people ask
Why can't I give a visitor the staff Wi-Fi password?
Anyone on the staff network may be able to see shared printers, files and devices. A visitor's phone or laptop may also have malware without them knowing. The guest network keeps them apart from your work.
Is it safe to let a visitor charge their phone at my desk?
Use a wall socket or a charging spot meant for guests. Do not plug their phone, cable or power bank into your computer. A computer port carries data as well as power.
What should I do if someone asks to print from a USB stick?
Politely say no, and offer to have them email the file to the front desk or a shared address. Your IT team can tell you which way is safest.
What is tailgating?
It is when someone walks in behind you through a door that needs a badge or key. It is polite to hold the door, but it can let an unknown person into the building.
What do I do if I find a USB stick on the floor?
Do not plug it in. Give it to IT. CISA advises the same: hand found USB drives to security or IT and do not plug them in to see who owns them.