Cell Phones and International Travel

The easiest border crossing is a boring one.

You don't need to win an argument with a customs officer about your rights. You need there to be nothing worth arguing about. A phone with nothing sensitive on it gets handed over, unlocked without a second thought, glanced at, and returned. No detained device, no five-day wait to get your only phone back, no awkward standoff. That's the actual goal here - not "protect your data from a search," but "make the search a non-event."

What you're actually up against

Under CBP's current directive (updated January 2026), border agents can perform a basic search - manually looking through what's on your device - with no suspicion required at all, and that applies to everyone, including US citizens, at any US port of entry or exit. An advanced search (plugging in forensic equipment to copy or extract data) now only requires "reasonable suspicion or a national security concern" plus supervisory approval - a real loosening from the older standard. If you decline to unlock a device, they can detain it, typically up to five days, longer with approval - a real cost if it's your only phone. Non-citizens may face additional consequences for refusing that a citizen wouldn't.

Other countries have their own rules, some considerably more aggressive than the US - do a little research on your specific destination before you go, especially if you have anything on your device you'd rather keep private.

None of this requires anything shady on your part. Attorneys carry privileged client material, journalists carry source communications, activists carry organizing details, and plenty of ordinary travelers just don't love the idea of a stranger scrolling through their photos and messages. All of that is reason enough.

The easy default: a dedicated travel phone.

Set this up before you leave, not at the airport.

• Use a cheap, separate device - it doesn't need to be new or expensive, just clean.
• Load only what the trip actually needs: boarding pass / airline app, offline maps, a translation app, maybe one messaging app.
• Handle two-factor authentication properly, in advance. Either add the travel phone as an additional trusted device on your important accounts ahead of time, or generate and save backup codes before you go. Don't restore a backup or move your SIM over - that just recreates the exact problem you're trying to avoid.
• Don't let it quietly become a mirror of your real phone. Log into only what you need, skip syncing your main photos/messages/email onto it.
• When you're through customs and settled, keep using it as your travel phone - the goal isn't to suffer, it's to have nothing worth hiding.

This solves the usual objection to "just leave your phone home" - you're not actually giving up your boarding pass, your maps, or your ability to get a text. You spent twenty minutes before the trip instead of losing anything at the airport.

The alternative: bring your real phone, but clear it out first.

If you genuinely need your primary device with you, this is the fallback:

1. Upload anything sensitive to cloud storage before you travel - a zero-knowledge/encrypted service if it's genuinely sensitive material (see our Cloud Storage article). Or skip the cloud entirely: copy it to a local hard drive or USB stick over a cable, and leave that drive at home rather than packing it. No provider, no jurisdiction question, no account for anyone to compel - just make sure the drive itself is encrypted (see our Encryption article) in case it's ever lost or accessed by someone else at home.
2. Actually delete the local copies - not archive them. Empty the "recently deleted" folder in Photos or wherever, since most apps keep a 30-day recovery bin sitting right there on the device by default.
3. Sign out of the cloud apps, or at least turn off sync, so a live feed of thumbnails doesn't reload the moment there's a connection. Google Photos backup specifically is worth checking - it's on by default for most Android phones and will quietly keep re-uploading new photos in the background even after you've deleted the local copies, undermining the previous step without you realizing it. Turn it off, not just pause it, before you travel. Using a third-party gallery app instead of Google's own Photos app sidesteps this concern entirely, since it doesn't come with Google's cloud backup baked in - one less setting to remember to check.
4. Put the phone in airplane mode before you reach the checkpoint. CBP's own policy says agents aren't supposed to intentionally reach into cloud-only content - airplane mode makes that separation physically real instead of just a policy on paper.
5. Don't reconnect until you're clear of the checkpoint and back on a connection you trust, then redownload what you need.

Worth knowing: this protects you well against a basic (manual look-through) search. It's weaker against an advanced forensic search, since deleting a file doesn't always wipe it from flash storage right away, and recovery tools can sometimes pull back recently-deleted data that a manual search never would. For most travelers that's a non-issue, since advanced searches are the exception, not routine. If you're in a higher-risk category - journalist, activist, attorney with privileged material - don't rely on deletion alone; use the dedicated travel phone instead, or combine both.

Quick version

• Most travelers: get a cheap travel phone, load it with just what the trip needs, leave the real one home.
• Need your real phone: move sensitive stuff to the cloud, delete it locally, airplane mode before the checkpoint.
• High-risk travelers: do both, and look into your specific destination's rules before you go - they vary a lot from country to country.