Whether you are traveling for business or pleasure, being away from your home and your normal routine can introduce additional risk factors for your personal security.
Below are some tips we've compiled to help reduce the risk of travel.
Have plans to move? Check out Moving to a new home (and your Casa keys) for tips and best practices around moving.
Travel hubs/airports/train stations
- Fully power down your electronic devices before going through the security checkpoint. Once a device is outside of your control, anyone can do anything with it. It is much harder to unlock and decrypt a computing device when it is in a "powered off" state versus a "powered on" state where the device was previously unlocked (PIN code, biometrics). It is generally safer to power on all devices once passengers have boarded the plane and the plane doors have been locked. The risk of devices being seized once a plane is boarded and moving is much lower.
- Never take the majority of your Casa keyset with you. Your keyset is designed for geographical distribution and security. If you need to transact at your destination it is better to load a limited amount of funds into the Casa Single Key wallet. Having 2-of-3 or 3-of-5 keys in your possession makes YOU the single point of failure and puts your funds at risk.
- Don't advertise that you have anything to protect. Avoid wearing cryptocurrency shirts or having bitcoin stickers on the lid of your laptop. Criminals and thieves can identify this and target you.
- Only use your own device power chargers and cables. Attackers have been known to set up impromptu "charging stations" in travel hubs in the hopes that someone with an unpatched device will connect to it for charging purposes. Your device may charge, but it will also now be infected by a process known as "juice jacking."
Lodging and accommodations
- Hotel safes are not to be trusted for high-value items, including hardware wallets. These safes are easily accessible to hotel staff and cleaning services using bypass codes. These safes are even more easily accessible to attacks using things such as a room key, screwdriver, or ball-point pen cap. When in doubt, don’t bring high-value items with you. If you are going to use the safe, never use it for more than one key at a time!
- Some hotels and suites have a double door connecting rooms or bathrooms directly. If your room has a double-access door, ensure it is locked from your side. You can move or brace a piece of furniture against the door to stop an inquiring neighbor.
- Consider using a small portable non-intrusive "door brace"-style lock security device or deadbolt strap for your hotel door. These devices can vary in effectiveness, ease of use, and known flaws, but ultimately can help prevent an unwanted visitor from gaining entry while you are in your room.
- Airbnb-style lodging is great for cost but not as much for security. These accommodations are offered by individual owners rather than a company, and they may not have the same level of physical and network security controls. Your personal property may not be protected or covered by insurance in the instance of a break-in or robbery.
- Use a VPN at all times when on a shared network, including hotels, Airbnbs, and individual rental locations.
- Pseudonyms work in real life, too! When ordering delivery, food, or car rental services, use only a first or fake name if possible. If you decide to do this, make sure the hotel and clerk know as well, otherwise your pizza delivery for "Satoshi Nakamoto" may go to the wrong person.
- If you are using shared car transportation services, ensure the driver is who they say they are and works for the company they are representing. This does not need to be a full-blown interrogation but more of a verification: "Are you Kevin with Uber? Oh, your name is Pete. My mistake, my app does show that," can work well as a "false pretext" verification.
Events and conferences
- Ensure you have an emergency contact (or notify your Casa Emergency Contact) who knows you will be traveling to a remote location. This person does not need to know all of your whereabouts, but should be aware of your general plans and location.
- Update any computers, tablets, or mobile devices you may be bringing with you prior to the event. This ensures the latest security updates are applied and minimizes the risk of known attacks against the device.
- Turn off all unneeded network communications including Bluetooth, WiFi (in certain areas), and the MacOSX/iOS Airdrop file sharing utility. This stops random connections and scanners from picking up your devices for further analysis and potential attack. Learn how to disable AirDrop in this wiki article.
- Just like when you're traveling, make sure to use your own power chargers for your mobile and computing devices. A portable battery is a great and cheap option to charge while you’re on the move.
- Do not share any pictures of a location on social media while you are still in that location. It is better to post pictures after you have left the location or sometime thereafter. This stops a bad actor from finding your physical location in real time. One should also be aware of what is in the background of the photograph, who is in it, and if they are OK with the picture being posted online.
- While there may be some conflicting opinions regarding wearing a mask, it's a great excuse to hide your identity and blend into the crowd. Altering small things about your appearance can greatly help to obfuscate your identity.
- Be aware of those in attendance at afterparties, bars, and shared party locations. These patrons may not be attending the conference, but they are now extremely interested in your "bitcoin citadel retirement plan" they overheard you discussing. Limiting alcohol intake will also help to keep your senses sharp (but make sure you still have some fun!).
It is an effort to get back into the traveling security mindset, but hopefully some of these tips are things you can incorporate into your personal security plan. While most attendees at conferences should feel safe and not be targeted, "An ounce of prevention is worth a pound of cure."
Need peace of mind for your funds? Let's get it handled.
Casa Gold is FREE to try for 30 days and only $120 per year after that. Ready to move directly to our Platinum or Diamond tiers? You can get started here or book a call with our Client Services team to learn more.