A phone security checklist for travelling with crypto

• Before you leave
• Connectivity
• On the road
• When you get home

If you hold crypto and travel a lot, your phone is the weakest link in the whole setup. It holds your 2FA codes, your exchange apps, your wallet apps and your email, and it spends the trip in taxis, cafés and airport queues. This is the checklist I go through before every trip.

§Before you leave

• Move 2FA off SMS. SIM-swap attacks are the classic way people lose exchange accounts, and while you’re abroad you can’t walk into a phone shop to fix your number quickly. Use an authenticator app or a hardware key, and print backup codes.
• Back up your authenticator. If your phone is stolen in Lisbon you want to be able to restore TOTP codes on a spare device, not wait until you get home.
• Leave the seed phrases at home. Never photograph them, never carry them in your notes app. If you need a wallet on the road, carry a small hot wallet with travel money only.
• Turn on a strong device passcode (not a 4-digit PIN) and disable lock-screen previews for banking and exchange notifications.

§Connectivity

Public Wi-Fi in hotels and airports is where most of the sketchy stuff happens: captive portals asking for your email, fake hotspots with the hotel’s name, and networks that inject ads. I avoid them for anything financial and use mobile data instead.

My setup is a travel eSIM for data and my home SIM kept on for calls and bank texts, with roaming data switched off. I buy the eSIM from CryptoeSIM.io, which lets you pay for travel data plans with BTC, Lightning, ETH, USDT and a long list of other coins, and only asks for an email to send the QR code. Paying from a wallet instead of a card is one less place where my travel plans sit next to my name and card number, and I can sort it out the night before the flight.

A few tips if you go the eSIM route:

1. Install it at home on Wi-Fi, label the line clearly (“Travel data”), and set it as the data line only.
2. Keep your home number’s line active for SMS if you still rely on it anywhere.
3. Check your phone is carrier-unlocked before you buy anything.

§On the road

• Use a VPN on any network you don’t control, including the hotel’s.
• Don’t open exchange apps in public where someone can see your screen. Shoulder-surfing a passcode and then stealing the phone is a common combo in big cities.
• Have a “lost phone” plan written down: how to remote-wipe, which exchange support pages to hit first, and where your backup codes are.

§When you get home

Rotate any passwords you typed on shared devices, check exchange login histories, and remove travel-only apps you don’t need anymore.

None of this is exotic. It’s just the boring stuff that stops a lost phone from turning into a lost stack.