How to Build a Travel Security Kit
Pack a physical and account kit together: disk encryption, a password manager, a hardware key or authenticator, a cable lock, and a spare lock screen.
[ journal ]
The kit sits next to the passport pouch: a cable lock, a hardware key on a ring I will notice if it is missing, a second device that can approve a login. Security on the road is not a mood and it is not a café-Wi-Fi essay. It is a short list of objects and settings that still work when the room is someone else’s and the desk is a lobby.
Full-disk encryption is on before I leave. If the laptop walks, the disk is a brick to anyone without my credentials. I have watched people treat FileVault or BitLocker as optional because “it’s just a travel machine.” That machine holds the same mail, the same tokens, the same half-written work. Encryption is default. Auto-lock is aggressive. A spare lock-screen timeout in the OS settings is cheaper than a second of bravery in an airport lounge.
Password manager, not a notes file. Unique secrets, recoverable from a second device I do not keep in the same bag. Hardware key if the account allows it; authenticator app if it does not. I do not SMS-code anything I care about while roaming. Phone numbers move. SIMs fail. I have been locked out of a panel in a hotel because the 2FA path assumed a US number that no longer rang. The kit exists so that story happens once.
Cable lock at coworking. Not because I believe in invincible cables. Because an unattended bag on a café chair is how laptops leave. I loop it when I walk to the bathroom. I do not loop it and then feel immortal. Physical theft is still the boring incident. The account kit does not help if the machine is gone and the session was unlocked.
What I leave out of this kit: the full public-network sermon. VPN, HTTPS, hostile café SSIDs belong in another note. This bag is encryption, vault, second factor, lock, lock screen. I test the restore path before a long haul. A hardware key I cannot enroll, a backup code I cannot find, a password manager that only lives on the laptop I just checked: those are failures I have already paid for.
Paperwork and uptime share a pouch for a reason. If I can open the machine, prove who I am, and leave the desk without donating hardware, the sprint can continue in the next room. That is the kit. Everything else is commentary.
— JV · Dark Heart Labs.