Security Tips for Travel
Faculty, staff, and students traveling internationally with laptops, phones, and other mobile devices face unique security risks, including theft, loss, seizure, tampering, or unauthorized access to devices, software, and data.
Use the recommendations below before, during, and after your trip to help protect your devices, University data, and accounts while traveling abroad.
Before You Leave
Device Choice
Take only the devices you need for your trip.
Reducing the number of devices you travel with decreases the risk of loss, theft, or unauthorized access.
Limit the Amount of Data You Carry
Before traveling:
- Store files in OneDrive whenever possible instead of locally on your device.
- Remove sensitive or confidential University data that is not required for your trip.
- Avoid storing regulated or restricted information on devices.
Examples of sensitive information include:
- Personally Identifiable Information (PII)
- FERPA-protected student information
- HIPAA-related information
- Financial records
- Unpublished research
- Proprietary University information
- Student grades, comments, or academic records
Email Access
Consider removing your University email account from personal devices before traveling internationally. At a minimum, limit the amount of email synchronized to your devices.
You can access your University email securely through a web browser using:
Outlook on the Web
Using Outlook on the Web reduces the amount of University data stored locally on your device while still providing access to your email when needed.
Verify Account Access
Before departing, verify that you can successfully access your accounts and authentication methods.
Verify Your Password
Ensure you know your current University password.
If necessary, review:
Self-Service Password Reset Instructions
Review Your MFA Methods
Verify that your authentication methods are up to date and available while traveling.
Review:
- Microsoft Authenticator registrations
- Phone numbers used for verification
- Backup authentication methods
- Devices you no longer use
Manage your security information at:
Whenever possible, configure multiple authentication methods before departure.
Review Recent Sign-In Activity
Review your recent Microsoft sign-in activity before traveling.
- https://mysignins.microsoft.com
Investigate any unfamiliar sign-ins before you leave.
Secure Your Devices
Fisher-issued devices are configured to meet University security standards. If you plan to use personal devices to access University resources, review the following recommendations.
Security Updates
- Install the latest operating system updates.
- Update browsers and applications before departure.
Firewall Protection
- Ensure the device firewall is enabled.
Encryption
Enable full-disk encryption where permitted by local laws.
Examples include:
- BitLocker (Windows)
- FileVault (MacOS)
Mobile devices should also have device encryption enabled whenever possible.
Password Protection
- Use strong, unique passwords or passkeys for all devices and accounts.
Web Browser Settings
- Configure browsers to clear browsing history, cookies, and cached data when closed.
Sign Out of Applications
Before traveling, sign out of applications and cloud services that do not need to remain connected.
This reduces the amount of locally stored data and requires authentication before access is restored.
Review Service Availability Restrictions
Microsoft 365 services are available in most countries and regions. However, access to some services may be restricted in certain locations due to local regulations or service limitations.
Before traveling, review:
Microsoft 365 International Availability
Google Workspace Availability
While Abroad
Physical Security
Keep devices under your physical control whenever possible.
- Never leave devices unattended in public places.
- Do not leave devices in vehicles.
- Use hotel safes or approved locking devices when appropriate.
- Be aware of your surroundings to reduce the risk of theft or shoulder surfing.
Network Security
When accessing University resources:
- Avoid unsecured public Wi-Fi for sensitive activities.
- Use trusted networks or personal hotspots whenever possible.
- Use the University VPN when accessing University resources.
- Disable automatic wireless network connections.
- Turn off Wi-Fi, Bluetooth, and NFC when not needed.
Public Computers
Do not use public or shared computers to:
- Access University systems
- Access University email
- Access sensitive or confidential information
Data Handling and Charging
Protect University Data
- Avoid storing sensitive data on devices whenever possible.
- Use approved cloud storage services and secure network connections.
Charge Devices Safely
Do not use:
- Unknown USB drives
- Untrusted charging cables
- Public charging stations
Public charging stations may expose devices to unauthorized data access, sometimes referred to as "juice jacking."
Use trusted chargers and cables whenever possible. Consider using charge-only cables while traveling.
Sign Out When Finished
When you are done accessing University resources:
- Sign out of email
- Sign out of cloud storage services
- Sign out of University applications
- Sign out of shared or temporary devices
After You Return
Review Account Security
Review your recent account activity for any signs of unauthorized access.
Review Sign-In Activity
Look for:
- Unrecognized sign-ins
- Unexpected locations
- Unknown devices
Review MFA Methods
Verify that all registered authentication methods belong to you and that no unauthorized methods have been added.
Change Passwords if Necessary
Change your University password and any other accounts used during travel, especially if:
- Security concerns occurred during the trip
- A device was lost, stolen, or confiscated
- You used untrusted networks
- VPN access was not always available
- You suspect account compromise
Incident Reporting
Report any lost, stolen, confiscated, or potentially compromised devices or accounts as soon as possible.
Contact:
- OIT Service Desk
- St. John Fisher University Safety & Security
When reporting an incident, provide:
- Device type
- Accounts involved
- Description of potentially exposed data
- Location and circumstances of the incident
Prompt reporting can help reduce the impact of security incidents and protect University data.
Helpful Resources
Password Reset
Self-Service Password Reset Instructions
MFA Management
Microsoft Security Information
Microsoft Sign-In Activity
Microsoft My Sign-Ins
Email Access
Outlook on the Web
International Service Availability
Microsoft 365 International Availability
Google Workspace Availability
By taking a few minutes to prepare before your trip and reviewing your account security when you return, you can significantly reduce the risk of unauthorized access to your University accounts and data while traveling internationally.