- 521
- 39
Hello everyone. Today I'd like to discuss a topic that becomes relevant at a very specific moment: when you cross a border or travel to a country with active surveillance. Most people think about this after the fact, already sitting at the airport. I'll break down what to do before, during, and after your trip.
Before departure: preparing your devices.
The first decision you need to make in advance is which devices to take with you. The ideal option for traveling to a high-risk country is a separate, "clean" device that doesn't contain anything sensitive and is used only for travel. It has no history, no accounts, no personal data—it's simply a tool.
If you're taking your primary device, the minimum checklist before departure looks like this: Make a full encrypted backup and leave it at home. Delete everything from the device that isn't needed for the trip—the less data on the device, the less you stand to lose if it's confiscated. Disabling biometric unlocking and switching to a PIN-only system is legally important because in some jurisdictions, a fingerprint or face can be used to force unlock without your consent, while knowledge of a PIN is more strongly protected by the right not to incriminate yourself.
On GrapheneOS, enable the duress PIN mentioned in the previous post and set the auto-reboot to a short interval—for example, 4-6 hours. This means that even if the device was seized while you were sleeping or distracted, it will require the full PIN after reboot, not biometrics.
Border crossings are the most sensitive issue.
Customs and border authorities in many countries have broad powers to search devices without a warrant and without explanation. This isn't a hypothetical scenario—the practice of searching devices at the borders of the US, UK, Australia, and many other countries is well-documented.
The most important thing to understand is that a powered-off device with full-disk encryption is significantly more difficult to crack than a device in sleep mode or with the screen on. Before going through security, your device should be completely powered off. Once powered on, it will require a PIN before unlocking for the first time, providing a significantly higher level of data protection even if physically seized.
If you are asked to unlock your device, depending on the jurisdiction, you may have the right to refuse, but this could result in detention or confiscation of the device. This is a legally complex area, which varies greatly by country and whether you are a citizen or a foreigner. It's a good idea to research the specific legal situation in your destination country in advance.
Network security in the country
Public Wi-Fi in hotels, cafes, and airports is a potentially hostile network environment. The basic rule is to always keep a VPN enabled when connecting to any unfamiliar network. However, there's a caveat: in countries with active censorship, VPNs themselves can be blocked or detected. In such cases, pluggable transports for Tor (obfs4, Snowflake), as discussed earlier, are needed—they mask the fact that a secure connection is being used.
Mobile data via a local SIM card is generally more secure than public Wi-Fi in terms of MITM attacks from neighboring devices on the network, but it poses another problem: SIM card registration using a passport in most countries means the operator knows your identity and binds all connections to it.
Charging via public USB ports in airports and hotels is a separate attack vector, known as juice jacking. USB can transmit not only power but also data, and a compromised charging port could theoretically communicate with a device. A simple solution is to use only your own charging cable and adapter, or a USB data blocker—an inexpensive adapter that physically disconnects the data contacts, leaving only the power supply.
Hotel: Physical Device Security
: Devices left unattended in a room are potentially accessible to staff or other interested parties. A classic scenario is called an evil maid attack: physical access to an unprotected device, even for a short time, allows for the installation of a hardware keylogger or the compromise of the system bootloader.
Minimum precautions: always turn off the device when leaving the room, keep critical items with you, and not in the hotel safe—the safe is locked by staff. For a paranoid level of protection, Haven, the previously mentioned app from Snowden's team, turns a second phone into a presence detector in the room while you're away.
Communications while traveling
: For sensitive conversations, use only encrypted messengers from the list discussed earlier, via Tor or a VPN. Regular calls and SMS are completely transparent to the local operator and potentially to local intelligence agencies. In countries with active surveillance, this isn't paranoia, but basic hygiene.
Social engineering is a separate issue. In some countries, local contacts or casual acquaintances can be a source of information for third parties. This doesn't mean paranoidly avoiding all contact, but it does mean being careful about what and to whom you share information about your activities, itinerary, and the purpose of your trip.
Upon return
, if your trip was to a high-risk country and your device could have been physically compromised, the safest option is a full factory reset and restoration from a pre-trip backup. This is radical, but it's the only way to guarantee the removal of potential implants at the operating system level.
Changing passwords and keys used while traveling is a wise measure in case they were intercepted through means you can't verify.
The main practical lesson is that digital security while traveling isn't a single tool, but a set of consistent decisions before, during, and after, and the most important one is made at home: take a minimum of data with you, because data that isn't on your device can't be compromised in any way.
Before departure: preparing your devices.
The first decision you need to make in advance is which devices to take with you. The ideal option for traveling to a high-risk country is a separate, "clean" device that doesn't contain anything sensitive and is used only for travel. It has no history, no accounts, no personal data—it's simply a tool.
If you're taking your primary device, the minimum checklist before departure looks like this: Make a full encrypted backup and leave it at home. Delete everything from the device that isn't needed for the trip—the less data on the device, the less you stand to lose if it's confiscated. Disabling biometric unlocking and switching to a PIN-only system is legally important because in some jurisdictions, a fingerprint or face can be used to force unlock without your consent, while knowledge of a PIN is more strongly protected by the right not to incriminate yourself.
On GrapheneOS, enable the duress PIN mentioned in the previous post and set the auto-reboot to a short interval—for example, 4-6 hours. This means that even if the device was seized while you were sleeping or distracted, it will require the full PIN after reboot, not biometrics.
Border crossings are the most sensitive issue.
Customs and border authorities in many countries have broad powers to search devices without a warrant and without explanation. This isn't a hypothetical scenario—the practice of searching devices at the borders of the US, UK, Australia, and many other countries is well-documented.
The most important thing to understand is that a powered-off device with full-disk encryption is significantly more difficult to crack than a device in sleep mode or with the screen on. Before going through security, your device should be completely powered off. Once powered on, it will require a PIN before unlocking for the first time, providing a significantly higher level of data protection even if physically seized.
If you are asked to unlock your device, depending on the jurisdiction, you may have the right to refuse, but this could result in detention or confiscation of the device. This is a legally complex area, which varies greatly by country and whether you are a citizen or a foreigner. It's a good idea to research the specific legal situation in your destination country in advance.
Network security in the country
Public Wi-Fi in hotels, cafes, and airports is a potentially hostile network environment. The basic rule is to always keep a VPN enabled when connecting to any unfamiliar network. However, there's a caveat: in countries with active censorship, VPNs themselves can be blocked or detected. In such cases, pluggable transports for Tor (obfs4, Snowflake), as discussed earlier, are needed—they mask the fact that a secure connection is being used.
Mobile data via a local SIM card is generally more secure than public Wi-Fi in terms of MITM attacks from neighboring devices on the network, but it poses another problem: SIM card registration using a passport in most countries means the operator knows your identity and binds all connections to it.
Charging via public USB ports in airports and hotels is a separate attack vector, known as juice jacking. USB can transmit not only power but also data, and a compromised charging port could theoretically communicate with a device. A simple solution is to use only your own charging cable and adapter, or a USB data blocker—an inexpensive adapter that physically disconnects the data contacts, leaving only the power supply.
Hotel: Physical Device Security
: Devices left unattended in a room are potentially accessible to staff or other interested parties. A classic scenario is called an evil maid attack: physical access to an unprotected device, even for a short time, allows for the installation of a hardware keylogger or the compromise of the system bootloader.
Minimum precautions: always turn off the device when leaving the room, keep critical items with you, and not in the hotel safe—the safe is locked by staff. For a paranoid level of protection, Haven, the previously mentioned app from Snowden's team, turns a second phone into a presence detector in the room while you're away.
Communications while traveling
: For sensitive conversations, use only encrypted messengers from the list discussed earlier, via Tor or a VPN. Regular calls and SMS are completely transparent to the local operator and potentially to local intelligence agencies. In countries with active surveillance, this isn't paranoia, but basic hygiene.
Social engineering is a separate issue. In some countries, local contacts or casual acquaintances can be a source of information for third parties. This doesn't mean paranoidly avoiding all contact, but it does mean being careful about what and to whom you share information about your activities, itinerary, and the purpose of your trip.
Upon return
, if your trip was to a high-risk country and your device could have been physically compromised, the safest option is a full factory reset and restoration from a pre-trip backup. This is radical, but it's the only way to guarantee the removal of potential implants at the operating system level.
Changing passwords and keys used while traveling is a wise measure in case they were intercepted through means you can't verify.
The main practical lesson is that digital security while traveling isn't a single tool, but a set of consistent decisions before, during, and after, and the most important one is made at home: take a minimum of data with you, because data that isn't on your device can't be compromised in any way.