Skip to content
EmpyreanTravel · Est. 1984

Money & Tech

Travel Cybersecurity: Protecting Your Devices and Data on the Road

Travel cybersecurity: prepare devices before you go, use public Wi-Fi safely, avoid public USB charging, understand border searches and protect work data.

Quick answer

Reviewed · 4 min read

Travel cybersecurity comes down to a few habits: update devices and turn on multi-factor authentication before you leave, use a VPN or your own hotspot instead of open Wi-Fi, charge from wall outlets rather than public USB ports, keep devices locked and with you, and carry only the data you need. Business travelers to higher-risk destinations may need clean loaner devices.

Researched and maintained by Empyrean Travel · How we research

Empyrean Travel · Boarding Pass
Before you go
Update, back up and enable MFA
Public Wi-Fi
Use a VPN or your own hotspot
Charging
Wall outlet and your own cable
At the border
Devices can be searched; carry less data

The checklist

Tick items off as you go — your progress stays in this browser.

0 of 12 done0%
Before you leave
On the road
If a device is lost

What should you do to your devices before you travel?

Ten minutes of preparation prevents most travel security problems.

  • Install operating system and app updates, which fix known security flaws.
  • Turn on multi-factor authentication for email, banking and work accounts, ideally with an authenticator app rather than text messages.
  • Use a password manager and a strong device passcode.
  • Back up phones and laptops, and enable remote locate and wipe.
  • Remove data and apps you won’t need on the trip.

Is hotel and airport Wi-Fi safe to use?

Treat it as untrusted. Criminals can set up fake hotspots with names like a hotel’s or airport’s network, and anyone on an open network may be able to see traffic that isn’t encrypted. Confirm the official network name with staff, use your company’s VPN, and save banking and sensitive work for your phone’s own data connection or hotspot.

Turn off automatic joining of open networks, and switch off AirDrop and Bluetooth discoverability in crowded places. A travel eSIM makes it easier to avoid public Wi-Fi altogether; see international phone plans and eSIMs.

Are public USB charging stations safe?

The FCC and FBI have warned about “juice jacking”: tampered USB ports or cables at airports and hotels that could install malware or copy data while your phone charges. Plug your own charger into a wall outlet instead, carry a power bank, and never use a cable you found plugged in or were handed as a freebie.

A charge-only cable, which carries power but not data, adds another layer of protection.

Can border officers search your phone or laptop?

Yes. U.S. Customs and Border Protection has authority to search electronic devices at the border, though searches are rare: CBP reports searching the devices of about 55,000 international travelers in fiscal year 2025, out of more than 419 million processed. Officers may not use your device to access data stored only in the cloud, and they disable network connections before searching.

Other countries have their own powers. The simplest protection is carrying less: keep sensitive work data in secure cloud systems rather than on the device. See U.S. customs when returning home.

How should companies protect business travelers’ data?

Set clear rules in your travel policy: VPN use on any network outside the office, immediate reporting of lost devices and no sensitive data stored locally. For higher-risk destinations, many companies issue clean loaner laptops and phones with minimal data, then wipe them on return.

Watch for travel-themed phishing, too: fake itinerary changes, airline refund messages and booking confirmations are common lures. When in doubt, check with your advisor through a known contact, not a link in the email. Data protection belongs alongside duty of care.

Frequently asked questions

Is it safe to use hotel Wi-Fi for work?

Only with protection. Hotel networks are shared and sometimes poorly secured, and criminals can create look-alike networks. Confirm the official network name, connect through your company’s VPN before opening work systems, and avoid sensitive transactions on unprotected connections. Your phone’s own data connection or a personal hotspot is a safer alternative for banking and confidential work.

What is juice jacking?

Juice jacking is the risk that a tampered public USB charging port or cable could install malware or copy data from a connected phone. The FCC and FBI have warned travelers to avoid public USB charging stations. Use your own charger in a wall outlet, carry a portable battery, or use a charge-only cable that blocks data transfer.

Can U.S. Customs search my phone when I return home?

Yes. CBP has legal authority to search electronic devices at the border, including for U.S. citizens, though only a small fraction of travelers are affected. Officers may not use the device to access information stored only remotely, and advanced searches that copy contents require reasonable suspicion or a national security concern under CBP policy. Carrying less sensitive data is the most practical protection.

Should I use a VPN when traveling?

Yes, on any network you don’t control, such as hotel, airport and café Wi-Fi. A VPN encrypts your traffic between your device and the VPN server, protecting it from others on the same network. Business travelers should use their company’s VPN. Note that some countries restrict or regulate VPN use, so check before you travel.

What should I do if my laptop is stolen abroad?

Lock or wipe it remotely, change passwords for email, banking and work accounts, and report it to your IT team immediately so they can revoke access. File a local police report, which insurers and employers often need. If your passport was taken too, contact the nearest U.S. embassy or consulate for a replacement.

Official sources

Rules, fees and schedules change — confirm the latest details at the source before you travel.

Ready when you are.

Tell Gigi where you're headed — she responds personally within one business day.