Separate the networks
Guests should never share a network with your registers or card terminals. A business router or managed switch lets you create separate networks (VLANs) for:
- Guest Wi-Fi, isolated from everything else.
- POS and card terminals.
- Security cameras and recorders.
- Office computers and staff devices.
Lock down the equipment
- Change every default password on routers, cameras and terminals.
- Turn on automatic firmware updates.
- Use WPA2 or WPA3 encryption on staff networks.
- Put network gear where customers cannot reach it.
Card payments and PCI DSS
Any business that accepts cards must follow the Payment Card Industry Data Security Standard (PCI DSS). For most small restaurants, the practical steps are:
- Use EMV chip and contactless terminals from a reputable processor.
- Never write down or store full card numbers.
- Keep terminals on their own network, away from guest Wi-Fi.
- Complete the annual self-assessment your processor asks for.
Watch for skimmers and tampering
Check card terminals regularly for loose parts or added devices, keep a list of serial numbers, and train staff to report anything unusual.
Plan for outages
Know what happens when the internet goes down: offline card mode, a backup connection, or a manual process. Test it before a Friday night teaches you.
How we help
We set up separated restaurant networks, guest Wi-Fi and camera systems, and run security reviews. See also our cybersecurity checklist.