Marcel Reifenberger
Tips from our Chief Information Security Officer Marcel Reifenberger
With the start of the vacation season, one topic is becoming increasingly important: digital security when traveling. Smartphones, laptops, and tablets are now constant travel companions and often store a wealth of sensitive information. At the same time, they are more likely to be left unattended, connected to open Wi-Fi networks, or plugged into unfamiliar chargers. All of this makes protecting these devices a particular challenge. Our security expert Marcel has put together a few important tips on how you can effectively protect yourself from digital threats before, during, and after your trip.
26. June 2025
|
Reading time: 5 min.

Take only the essentials
Before you set off, it is advisable to think carefully about which devices you will actually need on vacation. People often pack too much technology, which increases the risk of loss, theft, or damage. This is particularly critical if the devices contain important data. It is advisable to limit your selection to the essentials and, if possible, leave devices containing particularly sensitive information at home.
Encrypt devices and secure them physically
Once you have decided which devices to take with you, you should encrypt the hard drive before you leave so that stored data cannot be easily accessed in the event of loss or theft. Most operating systems offer this feature as standard: Apple, for example, through a combination of code and iCloud, Windows and Android through integrated encryption tools. This feature should be enabled to prevent unauthorized access. In addition, physical security measures such as laptop locks or lockable bags provide extra protection.
Keep systems and software up to date
Not only before a trip, but in general, all devices should be up to date. This applies to operating systems as well as apps and applications. Outdated software poses a significant security risk. We also recommend using “Advanced Endpoint Protection,” which detects potential vulnerabilities and warns of unsafe applications.
Set up a travel email account
There are not many measures you can take to protect yourself from spam emails. A separate email account for travel bookings, hotel reservations, or event registrations helps to keep your main address clean. A neutral address without personal information such as your name or date of birth is ideal.
Activate two-factor authentication
Access accounts can be protected much better with two-factor authentication: in addition to the password, a second form of verification is required, such as a one-time code sent by text message or via an authenticator app. Even if a password falls into the wrong hands, access remains blocked without this second factor. Apps that generate time-limited codes offline are particularly secure. Biometric methods such as fingerprint or facial recognition can also serve as additional protection.
Secure banking and payment services
A key question when preparing for a trip is how to protect your bank account. More and more banks are offering financial transaction alerts. These notify the account holder via text message or app if unusual activity occurs on their account. Modern AI systems also analyze user behavior and raise the alarm in the event of suspicious transactions, such as sudden debits abroad or transactions from different locations within a short period of time. Such warning systems help to detect fraudulent activities at an early stage and enable a quick response.
Don’t forget to back up your data
Essential – not just when traveling: A current backup protects against data loss. Whether on an external hard drive, USB stick, or in a secure cloud – if you back up regularly, you are on the safe side in an emergency and no important data will be lost if a device is damaged or stolen.
Use public Wi-Fi with caution
Whether at the airport, hotel, or café, open Wi-Fi networks are convenient but pose significant risks. They are often unencrypted, making it easy for data to be intercepted or users to be redirected to fake websites. The solution: VPN apps. They encrypt your internet connection, protecting you from data theft and phishing.
Disable Bluetooth and device detection
Less well known but no less risky: Bluetooth connections can also become a gateway for attackers – especially in public places such as shopping centers, train stations, or on the street. When searching for networks or Bluetooth connections, every device sends out a MAC address – a kind of digital serial number that can be used for identification. Some devices use similar or derived MAC addresses for Wi-Fi and Bluetooth, which can be used to create movement profiles. Modern devices therefore rely on MAC randomization to reduce this risk. This involves using a random MAC address when searching for networks or sending Bluetooth. In addition, it is advisable to only activate Bluetooth when actually needed.
Stay away from public charging stations
Need to quickly charge your smartphone or tablet at the airport? Better not. USB charging stations in public places can be manipulated to capture data or install malware. Even charging cables from strangers can contain spyware. A personal power bank is the safer choice.
Protect your screen from prying eyes
Simple but effective: privacy filters prevent unauthorized persons from reading passwords or sensitive content. This is particularly useful protection against visual espionage on trains, at airports, or in cafés. For users who do not use biometric authentication, a moment of inattention can have serious consequences. The criminal steals the device and now has access to all data and accounts. Privacy screens are available for tablets, laptops, and now also for smartphones.
Observe the legal situation in your destination country
Not all countries have the same data protection and freedom of expression regulations as we do. In some countries, such as China, VPNs are prohibited, social media platforms are blocked, and encrypted devices may be checked upon entry. Sensitive content should therefore be backed up or deleted in advance. The State Department provides up-to-date information on the local legal situation.
Political statements, e.g. on social media, can also have serious consequences depending on the country – including deportation or imprisonment. Caution is advised here. Freedom of expression as you know it in Germany does not have the same status everywhere in the world.
Lock up your valuables
Hotel rooms are not impenetrable for criminals: card key systems can be manipulated and locks are easy to pick. Valuables should therefore be kept in hotel safes. On city breaks, lockers at train stations or in secure facilities offer safe storage. If you are traveling by car, valuables should never be left in plain sight in the car – this is an invitation to thieves.
Detect bugs
It sounds like something out of a spy movie, but it’s reality: hidden microphones or cameras in everyday objects are not fiction. Suspicious objects in hotel rooms – such as irons or smoke detectors with unusual cables or damage – should be examined closely. Listening devices can be the size of a fingernail and hidden in many objects. Some devices, such as TMS trackers, can record and transmit phone calls. Encrypted connections should be used for confidential conversations whenever possible.
Use unfamiliar devices with caution
Computers in hotels or internet cafés should be used with caution. They may be infected with keyloggers or screen recording software that secretly record keystrokes or screen content. Therefore, you should always use incognito mode in your browser. In addition, you should clear your cache and history. Nevertheless, the following still applies: Do not use unfamiliar devices for sensitive tasks such as online banking or entering passwords.
Check device behavior and account activity
The most important thing after your trip is to keep your eyes open – watch your device behavior and account activity. Unexplained app installations, sudden system slowdowns, or suspicious transactions can indicate a security incident.
Delete or deactivate your travel email account
Once you return, you can deactivate or delete the email address you set up for your trip. Before doing so, it is advisable to check for any suspicious messages or unusual activity.
Modern travel security involves much more than protection against pickpockets. Anyone traveling with technical devices should also be aware of digital risks. With forward planning, careful behavior while on the move, and a final security check upon your return, you can enjoy a relaxing and safe vacation. After all, digital security begins with clear awareness and ends with consistent vigilance.