Do’s & Don’t’s of Working While Traveling: Staying Secure While Staying Online

Both Josh and I recently returned from international trips (as did many others this holiday season) and this is a topic that is top of mind for us when we travel. While Josh was enjoying the Christmas markets in Sofia, Bulgaria and I was enjoying the breath-taking sights Hobbitton and Lake Taupo in New Zealand, work didn’t stop for us. We know working while traveling (for work or pleasure) is the reality for many, so we wanted to share some “do’s and don’t’s” for working in your home away from home.

While relevant all the time, these tips are helpful reminders especially when we travel. These items encompass a wide range of information security topics including both digital and physical security considerations.

Connectivity

Do:

• Use trusted Wi-Fi networks such as a mobile hotspot (e.g. the one that is found on your smart phone). If you don’t have a mobile hotspot and cannot get one before traveling, look for Wi-Fi networks that require you to input a unique password.
• Use a VPN to encrypt your online activity, especially if you must use a public or shared network such as airplane Wi-Fi.
• Know and manage what your phone is connected to at all times. Review all app settings. Keep Bluetooth turned off unless you are using it. If you use AirDrop, restrict who you can send you information.

Don’t:

• Don’t use publicly available Wi-Fi without a VPN.
• Don’t transmit sensitive information (e.g. banking information, confidential emails) through Wi-Fi networks you do not completely trust.
• Don’t have your devices (laptop, phone, etc.) discoverable to everyone. This includes keeping Bluetooth and AirDrop turned off unless you are using it.

Data

Do:

• Use file-sharing platforms with end-to-end encryption to transfer sensitive data such as client files.
• Enable automatic backups to the cloud or another secure storage solution. This will protect your data from threat actors as well as unexpected connectivity interruptions.

Don’t:

• Don’t email sensitive files without encryption.
• Don’t text sensitive information unless you know you’re using a trusted encrypted third party messaging app such as Signal.

Credentials

Do:

• Use a password manager to generate and store credentials (passwords and other information that personally identifies you in digital settings) on all devices.
• Ensure a different password is used for each of your accounts.
• Regularly update passwords, especially if you have to use a shared or public device or network.

Don’t:

• Don’t reuse passwords across multiple accounts.
• Don’t share your passwords with anyone, not even trusted colleagues or family members. Do not share passwords even if it might seem convenient while traveling (e.g. sharing your desktop computer password with a colleague back in the office while you are traveling).

Devices

Do:

• Install and maintain reliable antivirus software.
• Physically secure your devices by using locks or carrying them with you at all times.

Don’t:

• Don’t ignore software update notifications for any of your devices including laptops and phones, as they often include critical security fixes.
• Don’t let your devices leave your sight! This includes going to the bathroom while on an airplane as well as running into the gas station for a quick pick-me-up coffee while on a road trip to see your family!

Situational Awareness

Do:

• Use a screen protector to prevent others from viewing your screen. This is especially important for when you’re in the middle seat on an airplane!
• Choose quiet, private spaces for handling sensitive tasks or calls. Even busy airports often have a quiet corner or small rooms to rent to take calls.
• Use headphones to prevent others from overhearing conversations.

Don’t:

• Don’t leave devices open and unlocked.
• Don’t display confidential information on screens visible to those around you. This is important to keep in mind while in close quarters even if you have a privacy screen.

Physical Security

Do:

• Be aware of your surroundings at all times.
• Keep devices in bags when carrying them with you.
• Ensure you have locks on your luggage including carry-on bags if possible.
• Review travel advisories from the U.S. Department of State when traveling internationally.

Don’t:

• Don’t post about where you are when you are out exploring. Wait until you get back to where you are staying.
• Don’t post about your trip until you return home if you live alone or have concerns about sharing the fact that you are out of town and thus not at your home. (Home/doorbell cameras can help keep piece of mind if you do decide to share that you are traveling and thus not at home.)

We hope these tips help you feel more confident while you travel. When in doubt, always air on the side of caution. If you have questions or concerns about any of these items, please reach out to protasec! And while this article is about working while traveling, Josh and I sincerely hope you do take some time to unplug. Safe travels!