Marin CyberSafe News: Vacation Cyber Safety

In This Issue:

• • Before You Travel 
  • During Your Travel 
  • When You Return Home 

From the desk of Jason Balderama, CISO, County of Marin

Summer is a popular time to travel whether it be for a relaxing overnight or a week away exploring a new destination. You are likely taking along that smartphone or other device to assist with directions, locating or identifying points of interest, and capturing that special photo. Practicing good cyber hygiene before, during, and after your trip will help secure your devices and allow you to connect with confidence when you’re away from home.

Before You Travel

• Update your devices. Updating devices will fix security flaws and help keep you protected. Whether it’s your computer, smartphone, or gaming device, be sure to update your operating system, applications, antivirus software, and the like. If you haven’t already turned on automatic updates, now is a good time to consider doing so.
• Back up your devices. Back up information such as contacts, financial data, photos, videos, and other data in case a device is compromised during travel and you have to reset it to factory settings. 
  Lock your devices. Make sure to lock your devices when you are not using them. Set your devices to lock after a period of time and use strong PINs and passwords.
• Enable multi-factor authentication (MFA). MFA adds an additional layer of security to each of your accounts. When you turn on MFA, you use more than a password to log in, which might mean a fingerprint, facial scan, a text message, or an authenticator app. Enable MFA anywhere and everywhere you can.

During Your Travel

• Guard your devices.  Your devices are valuable, but your sensitive information is as well. Always keep your devices close at hand and secure in taxis, security checkpoints, airplanes, rental homes, and hotel rooms.
• Limit what you share. Limit the information you share on social media while on vacation and consider posting updates about your trip after your return. Revealing too much information while away can put you and others at risk. Criminals can gain useful information from such posts, like knowing you are away from your home. They may even attempt to contact your family and friends with a variety of scam tactics. Additionally, consider setting your social media accounts to only allow friends to view your posts.
• Avoid public Wi-Fi. While public networks are convenient, they are a security risk. Avoid connecting to public Wi-Fi unless absolutely necessary. Instead, consider using your phone carrier’s Internet connection or use your phone as a personal hotspot if your plan allows.  If you do need to connect to public Wi-Fi, verify with the establishment the name of the network and use a virtual private network (VPN), software that will encrypt your Internet traffic and prevent others from stealing your data. Verifying the network name is important as often times malicious individuals create similar connection points with a slight misspelling, hoping you will instead connect to their network.
• Avoid the use of public computers. Public computers such as hotel business centers and Internet cafes are often poorly managed and provide minimal security protection for users. If you must use a public computer, do not enter any username or password on the computer and do not connect or transfer data via thumb drive/USB.
• Turn off auto connect. While auto connect is enabled, devices will seek out and connect to available networks or Bluetooth devices. This could allow cyber criminals to access your device without you knowing it. Disable auto connect, Bluetooth connectivity and near field communication (NFC), like airdrop, so that you can select the network and you can control the connection.
• Delete data from your rental car. If you connect your phone to a rental car for navigation or other purposes, be sure to securely remove the device so that other individuals do not have access to your address book, device name, text messages (hands free calling), or other sensitive information.

When You Return Home

• Shred your boarding pass and luggage tag. Scannable codes on boarding passes and luggage tags include full name, date of birth, and passenger name record. These can also contain sensitive data from your airline record, like passport number, phone number, email address, and other information that you wouldn’t want to share publicly. For this same reason, never post boarding passes on social media.

• Scan for viruses and malware. It’s best to update your security software when you return home and scan for viruses and malware to be sure your device has not been compromised while you were away.

   

Disclaimer

The information provided in Marin CyberSafe News is intended to increase people’s awareness of cybersecurity and to help them behave in a more secure manner. Links in this newsletter are provided because they have information that may be useful. The County of Marin does not warrant the accuracy of any information contained in the links and neither endorses nor intends to promote the advertising of the resources listed herein. The opinions and statements contained in such resources are those of the author(s) and do not necessarily represent the opinions of County of Marin.

Copyright © 2025 County of Marin, All rights reserved.