Traveling abroad? Staying connected is easier than ever. Here are some tips and things to consider to keep your devices and your data secure while you travel. 

First, be aware of travel advisories and local laws on security restrictions for your destination country.  Some countries may have laws in place that restrict security settings like encryption, VPN use, or data export. For more information, please visit these websites:

Penn Global

Data Security

Office of Research Services

Additional Requirements for Taking Electronics Abroad

 

Securing your devices is an important step before and after you leave for your trip abroad. Not only is it important to think about what devices you bring and how you set them up before leaving, but it's also important to remember what to do while in the country you are in. Here are some things to consider.

Before you go:

• Bring only the devices you need. Consider whether you really need a phone, tablet, and laptop. By limiting the devices you bring, you can help minimize data and device theft.
• Make a trusted backup of any data and devices you plan to bring and leave that backup at home or in your office in a safe place.
• Bring only the data you need. Don't bring any sensitive or confidential data unless absolutely necessary.
• Consider whether your destination and/or the sensitivity of your data warrants bringing a loaner laptop and/or a burner phone. This helps ensure that the device you use on campus and at home remain secure after travelling. Please talk to your LSP if you are considering this so they can assist you. Note that these may be subject to availability.

While you are traveling:

• Avoid using free or cafe-type WiFi networks which tend to be insecure. Use Penn's GlobalProtect VPN to provide secure connections to Penn and for secure browsing.
• Consider turning off WiFi and Bluetooth when not in use. Never accept connections from unknown devices over Bluetooth or join unknown WiFi networks
• Be aware of your surroundings. Do not use portable media like USB keys or portable drives given to you and make sure to cover cameras or mute micorphones when you are not using them.
• Do not use public charging kiosks.
• Do not enter your username and passwords on a device you do not own. This ensures your credentials remain secured and cannot be stolen by bad actors. Use 2-step authentication for all logins, including personal accounts.

When you return:

• If you also accessed data while travelling and need to use it on your regular device, consider saving this information to removable media such as a flashdrive or external hard drive. This way the data is accessible to you but not saved locally on your device.
• If you used a loaner, return it to your LSP so that it can be wiped and reimaged

 

If you have any questions about your trip or would like further consultation before your leave, please reach out to your LSP or write to your SAS Information Security team at security@sas.upenn.edu.