A stolen laptop is an insurance claim. A laptop inspected at a border checkpoint is a different kind of problem: your email, your client files, your tax returns, and your photo library, sitting in front of a stranger while you wait.

That's why encryption belongs near the top of your pre-travel list. Not because border officers are villains, and not because you have something to hide, but because a modern laptop carries more of your life than any suitcase you'll ever pack. Full-disk encryption means that if the machine is lost, stolen, or inspected without your cooperation, the contents stay unreadable.

Below is how to set it up properly, back it up without creating a new hole, and travel with habits that match the protection.

Full-disk encryption is the floor, not the ceiling

A login password protects your user account. It does not protect the drive. Anyone with physical access can pull the disk out, drop it in a cheap adapter, and read the files from another machine. Full-disk encryption (FDE) closes that gap by scrambling the entire volume until the correct passphrase is entered at boot.

Most laptops sold in the last several years support it out of the box:

• Windows: BitLocker on Pro and Enterprise editions; Device Encryption on many Home machines. Look under Settings, then Privacy & security, then Device encryption.
• macOS: FileVault, under System Settings, then Privacy & Security, then FileVault.
• Linux: LUKS, usually offered as an option during installation. Choose it when you install, not after.
• Older machines and external drives: VeraCrypt, which can encrypt a whole disk or create an encrypted container.

Verify it, don't assume it

Plenty of people turned on encryption a year ago and never checked whether it stayed on. A dual-boot install, a partition resize, or a hardware change can leave a drive partially unprotected. On Windows, open Manage BitLocker and read the status line. On macOS, open Terminal and run fdesetup status; it should report that FileVault is On. Do this the day before you fly, not in the departures hall.

One more thing worth knowing: encryption protects a machine that is powered off. A sleeping laptop can keep its keys in memory. Shut down completely before you reach a border desk.

Choose a passphrase you can type under pressure

The strongest encryption in the world is only as good as the phrase that opens it. You will type it in airports, on a train, on a foreign keyboard, possibly with someone watching.

• Length beats symbols. Four or five unrelated words strung together are easier to remember and harder to crack than a short jumble of characters.
• Don't store it on the machine it opens. A password manager that lives on your encrypted drive can't help you before the drive is decrypted. Memorize the disk passphrase; use the manager for everything else.
• Use a different phrase from your email, banking, and work logins.
• Practise on the real keyboard. Key layouts differ between countries, and symbols move. Ten minutes of practice now saves a very awkward minute later.

Back up twice, and leave one copy at home

Encryption without a backup is a gamble in the other direction. Drives fail, and a forgotten passphrase is unrecoverable by design. The old rule still holds: three copies, on two kinds of media, with one kept somewhere else.

Sequence matters. Back up first, encrypt second, then confirm the backup actually restores. Open a document or two from the backup on a different machine before you leave. A backup you've never tested is a hope, not a plan.

And encrypt the backup too. An unencrypted copy of an encrypted laptop defeats the entire exercise. Use BitLocker To Go for external drives, an encrypted volume on macOS, a VeraCrypt container, or the encryption built into your backup software. Check what's syncing to the cloud as well — synced folders often hold readable copies of the very files you encrypted.

Decide in advance what actually travels with you

The safest data is the data you left behind. A light travel laptop with only what the trip requires is easier to secure and easier to hand over if you're ever asked. Sign out of accounts you won't use, disable browser sync, and remove saved passwords from the browser if you're crossing a border where device inspection is likely.

If the laptop belongs to your employer, talk to IT and legal first. Company devices often come with mandatory configurations, and wiping or altering one may breach policy or an agreement you signed.

Border crossings: what you can and can't control

Rules vary widely by country and change without much warning. In some places, officers may ask you to power on a device or provide a passphrase; refusing can mean delays, denied entry, or legal complications depending on where you are. Check current guidance for every country on your itinerary, including countries you're only transiting through, and speak to a lawyer if you carry sensitive material or work in journalism, activism, or research.

What you can control is preparation. Power the laptop down before you reach the desk. Carry only the data you need. Decide ahead of time what you'll say if asked for a passphrase — a calm, rehearsed answer is better than improvising. And remember that a disk you can't open is still a disk that raises questions, so think through the scenario rather than assuming it won't happen.

Small settings that matter more than they seem

• Set a firmware or BIOS password, and disable booting from USB devices.
• On Macs, set a firmware password and disable external startup in Startup Security Utility.
• Keep your screen lock timeout short — a minute or two, not fifteen.
• Treat public Wi-Fi as hostile. Use your phone's hotspot for anything sensitive, or a VPN you actually trust.
• Use an authenticator app or a hardware key for two-factor authentication, and carry your recovery codes somewhere offline.
• Turn on Find My or Find My Device for theft recovery. It won't help at a border, and that's fine.

The night before: a ten-minute checklist

1. Confirm full-disk encryption is on and reported as active on every device you're taking.
2. Run a fresh backup, then open a file from it on another machine.
3. Make sure the backup drive is encrypted and staying home.
4. Check that your disk passphrase isn't stored only on the laptop it opens.
5. Store recovery keys somewhere you can reach without the laptop, such as a safe at home or with a person you trust.
6. Log out of accounts you won't need, and remove saved credentials from shared apps.
7. Verify your two-factor recovery options still work.
8. Tell someone at home where the backup lives and how to reach you.
9. Note the time of your last full shutdown before the trip.

None of this takes long, and most of it you'll do once. Encrypt the disk, test the backup, travel light, and shut the machine down before you hand over a passport. That combination covers the vast majority of what can go wrong between your front door and your hotel room — and it lets you get back to the part of the trip you actually planned for.

Photo: Gustavo Fring / Pexels