The specific vulnerability of travel

An adult and child on a conveyor belt like at an airport

The risk when travelling many people don't consider

Collaborative post by another author.

There are things experienced travellers sort before a trip without thinking twice. They scan documents to the cloud. They enable two-factor authentication on banking apps. They download an offline map of the area they are visiting. These habits accumulate over years of being caught out, and most of us have the stories to prove it.

Email security rarely makes the pre-departure checklist. But, it should.

At home, your email account sits behind your familiar devices, your private Wi-Fi trusted network, and the predictable pattern of daily routine. On the road, that security disappears. You're logging on from airport lounges, hotel business centres and café Wi-Fi networks: precisely the environments that security researchers consistently identify as high-risk. The National Cyber Security Centre (NCSC) guidance on securing your email account makes it clear that email is the master key to your digital life. If your inbox is compromised everything accessible via a "forgot my password" link becomes reachable too.

For travellers, the stakes are higher than for most. Your inbox holds booking confirmations, passport details sent to visa services, insurance policy numbers, accommodation addresses and a detailed record of where you are and where you're going.

What most free email providers are actually doing

The dominant free email providers operate on a straightforward model: the service is free because you are, in some form, the product. While major providers have moved away from scanning the literal text of your emails to serve ads, they still collect vast amounts of metadata. This includes who you email, how often you travel, which companies send you receipts and your general location. This data is used to build a profile about you that is then monetised through targeted advertising.

For everyday domestic use, many people accept this trade-off without much thought. Travel introduces another level though. If your email account is compromised on a public network, the attacker gains access not just to your messages, but to every other account those messages can unlock. And if your provider has already been sharing data with third parties or integrated apps, you may have less visibility into who has access to your information than you realise.

The practical argument for switching

A free email account from a provider built around privacy rather than advertising works differently at a fundamental level. End-to-end encryption means messages are readable only by sender and recipient. A zero-knowledge architecture means the service cannot hand over your data to third parties even if asked, because they don't hold readable versions of it.

Like choosing the right clothes is essential before departure, privacy-focused tools increase your security on the road. You are less exposed when logging in from unsecured networks. Your booking history and travel documentation cannot be accessed at the server level. And if your device is lost or stolen, the encryption holds, ensuring your personal details and those of your family remain private.

The counterargument, addressed honestly

The common objection is that switching email providers is disruptive. This is true. There is a transition period of forwarding old addresses, updating subscriptions and notifying contacts. For someone with over a decade of email history in one place, the inertia is real.

The counterpoint is that this disruption is front-loaded and finite. The switch takes effort once, but the improved security and privacy persist indefinitely. Most people who make the change report that the process, while mildly tedious, takes less than a day.

The stronger objection is that most travellers will never be targeted and the risk is theoretical. This is also true. But experienced travellers are people who have learned to prepare for situations they hope will never arise. Travel insurance, photocopied passports and offline navigation are all based on the same logic.

A small decision with compounding returns

Email is infrastructure. It underpins bookings, communications, financial accounts and identity verification. Most travellers protect their physical possessions carefully. The digital equivalent deserves the same attention. And a genuinely private email account is, for most people, the most straightforward place to start.