Traveling with Technology
Travel compresses your attack surface problems into two weeks: unfamiliar networks, physical theft opportunities, border inspections, and the loud fact that your house is empty. Most travel-security advice oscillates between paranoia and myth. Here is the field-tested middle.
Before you leave
- Update everything. Patches installed at home beat patches downloaded over hotel Wi-Fi.
- Back up everything. If the trip goes badly, devices should be replaceable objects, not sole copies of your life.
- Enable find-and-wipe on each device, and confirm you can actually trigger it from another one.
- Travel light on data. Take the device you need, not the archive you own. For high-stakes destinations, a travel phone with only what the trip requires turns a seizure or theft into an inconvenience.
- Save the quiet flex for later. Real-time vacation posts advertise an empty home to anyone watching. Post the album when you're back.
On the road
Networks
Hotel and airport Wi-Fi deserve the full public-network treatment (see the Wi-Fi guide): sharing off, no real credentials into captive portals, sensitive work over your phone's hotspot or a VPN. Assume conference and hotel networks are observed; in some jurisdictions, that is not a metaphor.
The juice-jacking question
Malicious public USB ports are rare in practice — but the countermeasure is so cheap it's silly to skip: carry your own wall charger and cable, or a data-blocking adapter. Power outlets can't negotiate a data connection. Problem retired.
Physical custody
More laptops are lost than hacked. Keep devices on your person or in the room safe; lock screens with short timeouts; use a privacy screen if you work sensitive material in economy class. The person beside you doesn't need your quarterly numbers, and cameras above ATMs don't need your PIN — shield it.
Borders
Many countries, including the U.S., assert authority to inspect devices at the border, and your options differ by citizenship and destination. The practical stance: cross with less. Data that isn't on the device can't be casually browsed; a signed-out cloud account is a locked door rather than an open folder. Power devices fully off before crossing — encryption is strongest before first unlock. If a device is taken out of your sight and returned, treat it as untrusted until wiped.
When you return
- Change passwords for anything you logged into from shared or borrowed machines. Better: never log into anything from a hotel business center — those keyboards have long memories.
- Review account activity on email and banking for sessions you don't recognize.
- If any device left your custody, back up the data and rebuild it clean.
Stop packing your whole digital life. Think about what each border, network, and hotel room can see. Connect through infrastructure you carry, not infrastructure you find.