Crew Wi-Fi onboard: connectivity without cyber risk
For seafarers, internet at sea means contact with family, banking and simply feeling human on a long contract. For the ship, every crew phone is also a device of unknown condition connected to the onboard network. The goal is to give the crew good connectivity without opening a door into the ship’s business and operational systems.
Why this matters to the company
Since 2021 the IMO expects cyber risks to be addressed in the ship’s safety management system (resolution MSC.428(98)). An infected crew laptop on the same network as the master’s computer or office systems is exactly the kind of risk that should be managed. At the same time, poor connectivity affects crew wellbeing and how attractive the company is for good seafarers.
Separate networks — the main rule
- Crew network — internet only, no access to any ship computers or printers.
- Business network — master’s and officers’ computers, email, documents.
- Operational systems — navigation and engine systems are not connected to the crew network at all.
- Separation is done with the router or firewall settings (separate networks or VLANs) — not just with different Wi-Fi passwords.
Rules for crew devices
- Personal devices connect only to the crew network.
- No USB flash drives from personal devices into ship computers.
- Phones and laptops are updated before joining the vessel — see the seafarers’ laptop checklist.
- Clear, written rules: what is allowed, what is not, and who to tell if something looks wrong.
Fair use of data
- Personal data allowances or time slots so one person’s video calls don’t take the whole channel.
- Automatic app and system updates paused on the crew network — they eat data quickly.
- A short guide for the crew on saving data — see internet on a ship: how to save data.
Ashore: what the office can do
- Keep an up-to-date list of what is connected onboard and who is responsible.
- Prepare the crew before joining: a one-page guide on connectivity and device rules.
- Make sure the office side — email, document storage, remote access — has two-factor protection, so that a stolen crew password can’t reach company data.
How I help
Onboard networks are set up by the vessel’s communication and equipment suppliers. I work on the shore side: the office network and computers of the crewing agency or ship manager, separate guest and staff networks, two-factor protection, device rules and short guides for crews in English, Russian and Georgian. IT support on contract →
Sources: IMO — Maritime cyber risk