What is a device check and why does it matter?
A device check confirms a computer meets security basics before it connects, so a stolen password alone isn't enough.
Start here
A device check confirms a computer or phone meets basic security rules before it’s allowed to connect. It matters because a valid password on an unknown or compromised device is still a risk.
Typical checks
- Operating system is supported and recently updated
- Disk encryption is on
- Screen lock and password are set
- Security software is running
- The device is known to the business, or explicitly approved
Why it matters
Stolen passwords are common. If access also depends on a healthy, recognised device, a stolen password alone is far less useful to an attacker. It also catches honest problems, like a laptop that hasn’t updated in months.
What users see
Usually nothing. If a check fails, they get a clear message saying what to fix, such as installing updates, and they’re back in once it’s resolved.
Device checks are built into our secure remote access. Next: zero-trust access versus a VPN.