Home Office Antivirus Checklist: Find the Overlap Before You Renew
Before you renew antivirus for a home office, list every device that touches work, find out which security tool is actually running on each one, and cancel or consolidate the duplicates. Then check the things antivirus cannot do for you: backups, multi-factor authentication and separating work from family use. Most home offices that overpay for security are not under-protected because of the wrong brand. They are paying for overlapping tools while one shared laptop or one unprotected phone carries the real risk.
This checklist walks through that review in the order that saves the most money and closes the most gaps. It takes about an hour, and you only need to do it once a year, ideally a few weeks before the renewal email arrives.
Why a home office needs its own checklist
In a small office, devices usually have a clear owner. At home they rarely do. The same laptop may handle client files, personal banking, a child's homework, video calls and family browsing in a single afternoon. A phone holds both the work inbox and a dozen random apps. Old trial software and a bundled security suite from the internet provider sit next to whatever you actually paid for.
Government guidance for small organisations makes the same point from the other side. The US Federal Trade Commission's small-business cybersecurity advice asks owners to keep security software updated, require multi-factor authentication and limit who can reach sensitive data, and CISA's guidance for small businesses treats ransomware as a serious threat to organisations with limited recovery resources. Antivirus is one item on those lists, not the whole list. A renewal is a good moment to check all of them.
1. Map every device that touches work
Write down every device, not only the one you think of as the "work laptop". Include personal laptops used for work email, desktops, phones and tablets with client files or messages, a shared family computer, the old machine kept for accounting software, and any external drive or NAS that holds backups.
Next to each device, note four things: who uses it, whether it stores client or financial data, whether that user has admin rights, and which security product (if any) currently protects it. This one table answers most renewal questions. If seven devices touch business data, a five-device plan is not enough, however good the product is.
2. Find the duplicate subscriptions
Home offices often pay twice for the same protection without noticing. Look through card statements and app-store subscriptions for:
- the main paid antivirus or security suite;
- a separate VPN or password manager that the suite already includes;
- identity-monitoring add-ons, which may not cover your country;
- a security bundle from your internet provider or phone carrier;
- a separate mobile security app on phones already covered by a family plan;
- expired trials that still nag for an upgrade.
Overlap is not always bad. A separate password manager you actually use may be better than the one bundled with a suite. The problem is paying for features you never configured, or not knowing which tool is meant to alert you. If you are weighing a bundled VPN against a standalone one, our guide to antivirus vs VPN explains what each layer does.
3. Make sure only one tool is doing real-time scanning
Two real-time antivirus engines on one computer can slow it down and fight over the same files. On Windows 10 and 11 this is partly handled for you: Microsoft's documentation says that when a non-Microsoft antivirus is the primary product, Microsoft Defender Antivirus moves into disabled mode automatically. Microsoft also warns that if you later uninstall the other product, you should make sure Defender is switched back on.
That second point matters at renewal time. If you cancel a paid suite, open Windows Security afterwards and confirm that virus and threat protection is active again. Do not assume it is. For many single-user setups, built-in protection is enough on its own; our article on whether Windows Defender is enough covers when it is and when it is not.
On each device, confirm which product owns real-time protection, remove leftover trials completely (not just the tray icon), and check that browser extensions from old suites are gone.
4. Check ransomware protection as its own item
"Antivirus installed" does not mean "ransomware ready". CISA's #StopRansomware Guide focuses on prevention and on limiting damage, especially through offline backups and access control. Some products add a dedicated layer on top of scanning. On Windows, controlled folder access is one example: Microsoft describes it as a way to stop untrusted apps from changing files in protected folders. Paid suites use other names for similar features.
For each work device, check whether behaviour-based ransomware detection is on, whether protected folders cover the folders where client work actually lives (not just Documents), and whether you get an alert when something is blocked. Our ransomware protection guide goes deeper on the layers.
5. Confirm backups live outside the device
If important files exist only on the laptop you are protecting, a single failure, theft or ransomware attack can wipe out the business record. Before renewing, check that client documents, invoices and accounting files are backed up to a cloud service or an external drive, that the backup is not permanently connected where ransomware could reach it, and that you have actually restored a file from it in the last few months. Antivirus reduces the chance of an incident. A tested backup is what lets you recover from one.
6. Turn on MFA and clean up passwords
Many home-office incidents begin with a stolen password, not a malicious file, and antivirus cannot fix that. Make sure multi-factor authentication is on for email, banking, cloud storage and any domain or website hosting accounts. Use a password manager instead of passwords saved in a shared family browser, and remove access for former contractors or assistants.
7. Separate work from family use
You do not need a corporate policy, just a few boundaries. Give work its own user account on shared computers, or at least its own browser profile and password vault. Keep client files out of shared desktop folders. Do not give children or guests admin rights on a computer that holds client data. These steps reduce the chance that a game download or a stray browser extension affects your work, whichever antivirus you choose.
8. Compare the renewal price with what you actually use
Renewal prices are often much higher than the first-year offer. Before paying, compare the renewal amount, the number of devices covered, the auto-renew date and the cancellation or refund window. Then cross off the bundled features you never set up. If you only use real-time scanning and the VPN, a smaller plan or a different product may cost less for the same protection. Our page on antivirus deals and discounts explains how introductory and renewal pricing usually differ.
9. Treat lab results as one input
Independent labs such as AV-TEST and AV-Comparatives publish regular protection, performance and false-positive results, and AV-Comparatives also runs separate business security tests. They are the most useful outside evidence you have. They are still snapshots, not guarantees for your devices and habits. Use them to shortlist products, then decide on device coverage, support, price and ease of use.
10. Decide: renew, switch, cancel or upgrade
Renew when every work device is covered, updates are automatic, ransomware features are on, backups exist, MFA is active and the price is fair.
Switch when the product slows your machines, support has been poor, coverage does not match your device list or the renewal price jumped.
Cancel when the subscription duplicates another layer you have chosen as standard. Re-check Windows Security afterwards.
Upgrade when you now handle more client data, contractors use your devices or you need one dashboard to see every device. At that point, a business plan may suit you better than a family suite; see our small-business antivirus guide.
11. Write a short renewal note
Write down the device count, the product and plan you chose, the renewal date and price, which devices are not covered, which duplicate tools you removed, and the state of backups and MFA. Five minutes now saves an hour next year and helps anyone else in the household understand the setup.
Home office antivirus sign-off checklist
- Every device that touches work is listed with its user and protection.
- Duplicate subscriptions and expired trials are cancelled or removed.
- One product owns real-time scanning on each device; Windows Security is re-checked after any cancellation.
- Ransomware features and protected folders are switched on.
- Backups are off-device and a restore has been tested.
- MFA is on for email, banking, cloud and hosting accounts.
- Work and family use are separated where possible.
- Renewal price, auto-renew date and cancellation window are noted.
- The renew, switch, cancel or upgrade decision is written down.
No checklist guarantees protection from malware, phishing or account theft. This one helps you stop renewing blindly while the real home-office risk stays unmapped.
FAQ
Do home offices need paid antivirus?
Not always. A single careful user on an updated Windows or Mac computer can be well served by built-in protection. Paid protection makes more sense when you handle client files, share devices with family, need cover on several platforms, or want one place to manage everything.
Can one antivirus plan cover work and family devices?
Often, yes, if the licence terms and device count fit. Keep work files and accounts separated from family browsing even when one plan covers every device.
Is it safe to run two antivirus programs together?
Running two real-time scanners usually causes slowdowns and conflicts. On Windows 10 and 11, Microsoft Defender steps aside automatically when another antivirus is primary. Keep one main real-time product, and use a second tool only for occasional on-demand scans if you want a second opinion.
Is antivirus enough for ransomware?
No. It is one layer. Ransomware readiness also needs off-device backups, MFA, updates and limited admin rights.