By J. Mesa
More people travel for work and leisure each year, and each trip puts your devices and data in unfamiliar places. Airports, hotels, and cafés are where attackers look for easy targets.
Here are twelve tips to protect your privacy and personal data while you travel, organized by what to do before, during, and after the trip.
What are the biggest cybersecurity risks when traveling?
- Public Wi-Fi in airports, hotels, and cafés
- Lost or stolen devices
- Shoulder surfing, where someone reads your screen or watches you type
- Public charging stations and shared computers
- Travel scams, such as fake booking sites and phishing emails about your reservation
- Card fraud at unfamiliar ATMs and shops
What should I do before I leave?
- Update your software. Install updates for your operating system, apps, and security software. Updates fix known flaws that attackers exploit.
- Back up your devices. If a phone or laptop is lost, you keep your data.
- Turn on device encryption and a strong screen lock.
- Turn on “Find My” tracking and remote wipe for phones and laptops.
- Tell your bank and card issuer about your travel dates if they ask for notice, and turn on transaction alerts.
- Travel light. Leave devices and data you don’t need at home.
1. Use a VPN
A virtual private network encrypts your internet connection. That makes it harder for others on the same network to see what you do. Use one on any network you don’t control.
2. Use a password manager
A password manager creates and stores a strong, unique password for each account. If one account is exposed during your trip, the rest stay safe.
3. Avoid public Wi-Fi
Public networks are often unsecured, and attackers set up fake hotspots with names like the real one. Use your phone’s mobile data or hotspot when you can. If you must use public Wi-Fi, confirm the network name with staff and connect through your VPN.
4. Be cautious with email
Be wary of unexpected messages with links or attachments. Travelers get phishing emails that pose as airlines, hotels, and booking sites. Check your reservation in the company’s own app.
5. Turn on two-factor authentication
Two-factor authentication requires a second proof, such as a code from an app, along with your password. It blocks access even when a password is stolen. Use an authenticator app. Text-message codes can fail when you are abroad without service.
6. Use a firewall
A firewall blocks incoming connections from unknown sources. Make sure the one built into your computer is on, and set the network type to “public” when you join a network away from home.
7. Keep your software updated
Install updates before you leave. Don’t accept an update offered through a hotel or airport network pop-up. Attackers have used fake update prompts to install malware.
8. Pay with a credit card
Credit cards offer stronger protection than debit cards. Under US law your liability for unauthorized credit card charges is capped at $50, and a debit card puts your bank balance at risk. Use ATMs inside banks, and cover the keypad.
9. Guard your personal information
Be careful about sharing your full name, date of birth, or Social Security number while you travel. Don’t post your location or travel dates in real time.
10. Use a privacy screen
A privacy screen narrows the viewing angle of your laptop or phone, so the person in the next seat can’t read it. It prevents shoulder surfing on planes and in lounges.
11. Keep your devices with you
- Never leave a device unattended in a café, a conference room, or a car
- Carry laptops in your hand luggage
- Use the hotel safe for devices you leave in the room
- Lock your screen every time you step away
12. Avoid public charging ports and shared computers
A USB port can carry data as well as power. Use your own charger and a wall outlet, or carry a power bank. Don’t log in to personal or work accounts on a hotel business center computer.
Is hotel Wi-Fi safe?
Treat it as public. Many guests share it, and you can’t see how it is managed. Use a VPN or your phone’s hotspot for anything sensitive, such as banking and work.
What should I do if my device is lost or stolen?
- Use “Find My” to locate it, lock it, or erase it.
- Change the passwords for accounts you used on it, starting with email.
- Report it to your employer if it holds work data.
- Report it to local police and get a report number for insurance.
- Tell your mobile carrier, so they can suspend the SIM.
What should business travelers do?
- Follow your company’s travel policy
- Use the company VPN for all work
- Carry only the data the trip requires
- Don’t discuss confidential matters where others can hear
- Be careful with devices and USB drives handed out at conferences
- Report any lost device or suspicious activity to IT right away
Do I need to worry about Bluetooth and file sharing?
Turn off Bluetooth, AirDrop, and similar sharing features when you are not using them. In a crowded place, an open setting lets strangers send you files or try to connect to your device.
What should I do when I get home?
- Change the passwords you used on public networks
- Review bank and card statements for unfamiliar charges
- Run a security scan on your devices
- Remove travel apps you no longer need
- Post your trip photos now
How do I avoid travel booking scams?
Fake travel sites and listings take your payment and disappear. Book through companies you can verify, and type their web address yourself. Be wary of a price far below every other listing, a host who asks you to pay outside the booking platform, and any request for payment by wire or gift card.
Your next step
Before your next trip, run through the “before I leave” list and install a VPN. Protecting your privacy on the road takes attention and good habits. If your team travels for work, Cerberus Cybersecurity can add travel security to your cybersecurity training and your written policies. Contact us to learn more.
Leave a Reply