How to Carry Less Data Across a Border
Every effective precaution for a border crossing is a decision you make at home, on a calm afternoon, with a working connection. There is nothing useful to do in a queue. The single question that matters is what you are willing to have reachable from the device in your hand, and the work is making the answer true before you leave.
This page is a preparation and recovery workflow. It is not legal advice, and it deliberately contains no tactic aimed at defeating an inspection — see below for why that distinction matters.
Decide the shape of the trip first
Three broadly different postures cover most travellers, and choosing one up front saves a lot of fiddling.
Ordinary trip, ordinary device. You take your usual phone, tidied up. Suitable for most leisure travel, and the assumption behind the rest of this page.
Reduced device. Your usual phone, but deliberately emptied of categories of material you would rather not carry, with those categories restored afterwards. More effort, meaningfully less exposure.
Separate travel device. A cheap secondary phone holding only what the trip needs: maps, tickets, messaging, a payment method. The strongest option, and the standard approach for people who cross frontiers often or carry confidential material professionally. It also solves loss and theft at the same time, which is the more likely event.
If you are travelling with employer equipment, none of this is your decision to make. That is covered in travelling with a work laptop.
Reduce what is on the device
Work through this in order. The theme is that “on the device” is a much wider category than most people picture.
Photo and video libraries. Usually the largest and most personal store on a phone, and often years deep. If your library syncs to a cloud account, you can leave it there and remove the local copies — but check whether your platform keeps recent items cached locally anyway.
Messaging history. Message archives can go back years and include other people’s material as well as your own. Exporting or archiving conversations you do not need on the trip is more effective than anything else on this list.
Documents and downloads. Scans of identity documents, contracts, tax paperwork, medical letters, and everything a browser has ever saved. This folder is invisible in daily use and frequently the most sensitive thing on the device.
Notes and password managers. Notes apps accumulate credentials and personal detail. A password manager is the correct place for secrets and can be locked properly; a notes app is not.
Email. Consider how much history your mail client keeps locally, and shorten the sync window if the option exists.
Second-hand data about other people. Contacts, shared albums, group conversations, and files colleagues sent you. Their material is not yours to expose, and this is the category travellers forget.
Understand what your accounts reach
Emptying local storage achieves less than expected if every app on the device is signed in to an account holding everything you removed. An unlocked phone is a key to those accounts, not merely a copy of some files.
Two habits help. First, know which apps hold live sessions to services you would consider sensitive, and be deliberate about which of those need to be signed in during the trip. Second, remember that signing out of an app on the device does not delete anything anywhere — it narrows what is immediately reachable, which is the actual goal.
None of this is unusual practice. It is the same reasoning you would apply to lending someone your phone for an afternoon.
Protect the device itself
Full-device encryption, which on current phones is generally on by default with a passcode set.
A long memorised passcode rather than a short numeric PIN. Length is what matters here.
Power the device fully off before arrival. A phone that has not been unlocked since boot is in its most protected state; one that is merely asleep is not the same thing.
Update everything before departure, since security updates are the difference between a known weakness and a fixed one.
Verify a backup restores. Not that a backup exists — that it restores. This is the step that makes reducing the device safe to do, and it is the step people skip.
What not to do
There is a line here, and it is worth naming plainly.
Removing material because you have decided not to carry it is ordinary data minimisation, and it is what this page recommends. Removing, concealing, or disguising material in order to defeat an inspection is a different act, and it can be an offence in its own right regardless of what the material was. So can misrepresenting what you are carrying, who you are, or what is on a device when asked by an official.
The practical argument points the same way as the ethical one. Anything done to obstruct is discoverable, escalates a routine interaction, and turns a short conversation into a long one — and forensic tools recover deleted material anyway. Preparation is effective precisely because it is not a trick: you genuinely do not have the material with you.
After the trip
The clean-up matters as much as the preparation, and it is the half people abandon.
- Restore what you removed from your verified backup, and confirm it came back.
- Review sessions and sign-ins across your accounts, and end any you do not recognise, including ones created on networks you used abroad.
- Change credentials you typed on an untrusted network or a shared machine.
- Remove travel eSIM profiles, saved guest networks, and temporary apps you installed for the trip.
- Re-enable anything you turned off, such as always-on tunnelling or automatic backup.
There is a fuller version of this in coming home after a trip: the reset checklist.
Where a VPN does and does not fit
It fits on either side of the crossing, not at it. Once you are on an unfamiliar network — the airport you land in, the hotel that evening — a tunnel is doing real work against the network operator’s visibility of your traffic. At the counter itself it does nothing, because inspection reads storage rather than traffic. The scope question is covered in should you use a VPN when crossing a border, and the pre-travel setup in the pre-departure connectivity checklist.
Bottom line
Carry less, encrypt what you carry, memorise a long passcode, power the device off before arrival, and verify your backup restores so that reducing the device costs you nothing. Do the reduction because you have decided what to travel with — not to obstruct anyone — and do the restore when you get home.