Phones and border searches: what to know

Border officers in many countries can inspect phones, sometimes without any particular suspicion. Most travelers are never asked. Still, it helps to understand the basics before you go, especially if you carry sensitive work, client material, or personal photos you would not want a stranger to scroll through.

How border searches work

Borders are often treated differently from everyday life in law. In some countries officers may look through an unlocked phone, ask you to unlock it, or keep it for a more detailed examination. What happens if you decline varies a great deal. A citizen may be delayed. A visitor may be refused entry. In a few places, refusing to give a password can itself be an offense.

Searches also vary in depth:

Kind of search	What it can see
Manual look	What an officer can open by hand on an unlocked phone: photos, messages, apps, recent files.
Forensic copy	Specialist tools may copy the device and find more, including some deleted items and signs that encrypted data exists.
Cloud and accounts	Apps signed in on the phone can reach email, cloud storage and work systems far beyond what the phone itself holds.

If this, then that

There is no single right setup. Start from what you are carrying and how much it would matter if it were seen.

• If you carry nothing especially sensitive, update the phone, use a strong passcode, back it up, and travel as normal. That is enough for most trips.
• If you have private photos you simply would not want seen, the cleanest option is to leave them at home: back them up somewhere you control, remove them from the phone, and restore after the trip.
• If you carry client, patient or source material, check your professional body's guidance before you go. Many professionals travel with only what the trip needs, or with a separate travel phone.
• If you need to reach files during the trip, think about whether they can stay in a work system you sign into after arrival, rather than living on the phone as you cross.
• If you are traveling to a country with strict rules on devices or encryption, get advice specific to that country and your status well ahead of time.
• If you are worried about your safety, not only your privacy, speak to an organization that supports people in your situation before you travel.

Preparing before you travel

A checklist for the week before:

1. Carry less. The simplest protection is not having material on the phone at all. This is the single most effective step.
2. Back up first. If a phone is kept, lost or damaged, you can restore.
3. Consider a travel phone. Some journalists, lawyers and researchers carry a separate phone with only what the trip needs.
4. Update the phone. Current software has the latest security fixes.
5. Use a strong passcode, not a short PIN.
6. Know how to turn off biometrics quickly. On iPhone, pressing and holding the side button and a volume button until the power-off screen appears disables Face ID until the passcode is entered. On many Android phones, a Lockdown option in the power menu does something similar; search Settings for "lockdown" if you do not see it.
7. Sign out of sensitive apps. Email, cloud storage and work apps reach far more than the phone holds.
8. Check Recently Deleted and cloud sync. Items you thought were gone may still be there.
9. Write down important numbers on paper, such as a lawyer, your embassy, or your employer, in case the phone is kept.

At the border

Stay calm and polite. You can ask what is happening and whether you are required to unlock the device. If a device is kept, ask for a receipt. Afterward, write down names, badge numbers and times while you still remember them.

Do not lie to officials. In many countries that is a separate offense and can make things much worse than the search itself.

What hiding and encryption can and cannot do

Encryption protects data from someone who does not have the key. It does not help if you are required to unlock a phone or an app, and forensic tools may be able to tell that encrypted data exists even if they cannot read it. Hiding is not the same as not carrying.

VaultWell, coming soon, keeps photos, videos and notes in encrypted vaults that each open with their own path. For travel, its most useful feature is the boring one: export an encrypted .vwbackup file, keep it at home, remove the vault from the phone, and restore later by tracing its path.

We do not suggest using hidden vaults or a duress vault to mislead border officials. A duress vault permanently erases every other vault on the phone when opened, and doing that during an official search could have serious legal consequences, including being treated as destroying evidence. Not carrying the data is the cleaner choice.

Afterward

• If your phone was taken out of your sight, consider changing passwords for important accounts.
• If the phone was kept, follow the receipt process, and get advice if you need it.
• Restore anything you left at home once you have arrived somewhere you feel settled.

Questions

Related

• Crossing a border with your phone
• Duress passwords explained
• Encrypted backups