Technology for Travel
Securing your Mobile Device for International Travel
If you travel internationally with a laptop, tablet or smartphone, you risk the loss or theft of not only your device but also the data stored on it. It is impossible to protect mobile devices against every form of system or information breach. The safest assumption is that if you take your mobile device with you, especially to high-risk countries, then it will be compromised in some potentially undetectable way. The U.S. State Department regularly issues travel advisories about high-risk countries. The only truly secure choice is not to travel internationally with your mobile device. If you don’t need it, don’t take it with you.
Malicious individuals who seek to compromise mobile devices may be interested in not only your business information but also your university username and password, which could then be used to directly access and exploit university systems and information resources. In addition, any malware installed on your mobile device while you were traveling could compromise university systems and data when you reconnected your device to the university network.
Before You Go
- Reset your university account passwords. At NC State, passwords expire at least once per year and more frequently in certain situations. Resetting your password before you travel restarts the default expiration clock and minimizes the chance you will need to change it again. See the Password Change Form.
- Ensure you have enabled Two-Factor Authentication to prevent unauthorized access to your information and data. If you have Two-Factor Authentication enabled, we strongly recommend using the Google Authenticator or Duo Mobile app on a smartphone and/or a U2F key, instead of receiving SMS messages for Two-Factor. For more information visit Two-Factor Outside the USA.
- Consider taking a disposable cellphone rather than your personal smartphone and then throwing it away when you come back.
- Back up your files and leave a copy in a secure location, such as your office or a departmental fileshare.
- Assess the sensitivity of the information stored on your mobile device. Determine whether it contains grades or comments on student work, unpublished research, proprietary information, or personally identifying information; e.g., Social Security number, tax return, health records. Encrypt, password-protect or remove such information — or just leave the device at home!
- You may be taking certain information, technology, software, or equipment that is subject to U.S. export control laws. It’s your responsibility to make sure that such items may be legally and safely transported to another country. Review Export Controls for more information.
- Patch your laptop with the latest virus definitions and security updates. Check with your local IT support for assistance.
- Turn off print- and file-sharing. Consult your local IT support if you are unsure how to do so.
- Make sure your laptop’s OS password (the one you enter at boot up) is strong and that you change it regularly.
- Set strong passwords, codes or screen locks on phones or tablets to make it harder for criminals to access your information if your device is stolen.
- Enable your personal firewall.
- Plan for the worst: ask your local IT support about tracking software in the event your laptop is lost or stolen while you’re away.
While Traveling
- Disable Bluetooth, Wi-Fi and GPS when you are not using them.
- In general, cellular networks are more secure than publicly available wireless networks. If you absolutely must use a wireless hotspot, never enter credit card or other sensitive information over it and, if possible, avoid visiting websites that require you to enter a password; e.g., your bank. Instead, limit your activity to casual web browsing; e.g., reading the news or finding a restaurant nearby.
- If you suspect that sensitive university information may have been breached, notify the university and local authorities as soon as possible.
When You Return
- Change your password immediately.
- If your device was lost or stolen while you are away, report it immediately.
- Update and patch all mobile devices.
- If you carried loaner equipment, such as a university laptop, ask your local IT support to wipe it upon your return.
- Use antivirus and anti-malware tools to scan and clean your device, and follow any remediation steps the tools recommend.