On a trip, a laptop is far more likely to end up in someone else’s hands than at home. The hardware can be replaced; your documents, emails and access to work systems are much harder to get back.
- A Windows password isn't enough: it protects the sign-in, not the drive.
- Before you leave: take only the data you need, leave a backup at home, encrypt your drives, set a pre-boot and a UEFI password.
- On the road: shut down instead of sleep, lock the screen, use a VPN on public Wi-Fi, keep the laptop in your hand luggage.
- If it's stolen: change passwords, sign out of all sessions, tell IT and the police.
What can go wrong on a trip
Your Windows password only protects the sign-in. Without encryption, anyone can read the drive in another computer or after booting from a USB stick.
Before the trip: prepare your laptop
Data that isn't on the laptop can't be stolen with it. Move archives, old projects and personal photos to a home computer or an external drive.
Abroad, local law may require you to give border officers access to your devices: one more reason to travel light.
Copy everything important to an external drive and leave it at home, not in the same bag. Keep your BitLocker recovery key and the Cryptic Disk header (encryption key) backup there too. The header backup is protected by the password valid when you saved it: without the password, encrypted data can't be recovered.
Write down the laptop's serial number for a police report or an insurance claim.
Without the password, an encrypted drive looks like random data in any computer.
- System drive (C:): BitLocker (Windows Pro, Enterprise, Education) or Device encryption (Windows Home, compatible hardware only). Save the recovery key.
- Data partitions, external drives, USB sticks: Cryptic Disk.
- Encrypted container: one file with all your work documents that mounts with your password as a drive in File Explorer. See How to Create an Encrypted Container.
Disk Password Protection asks for a password before the operating system starts. Without it Windows won't boot, even if the drive is moved to another computer or the program is uninstalled. In stealth mode no password screen appears, and the laptop simply looks frozen.
Step by step: how to set a password on computer startup.
- Set a UEFI (BIOS) administrator (supervisor) password.
- Disable booting from USB and other external devices.
- Keep Secure Boot on: the UEFI modules of Disk Password Protection 5.6 are signed with Microsoft UEFI CA 2023. On some models, especially Secured-core PCs, first allow the Microsoft third-party UEFI CA in the UEFI settings.
Test it at home before you travel and keep the BitLocker recovery key at hand.
Install Windows, browser and antivirus updates at home: a large update may not download over hotel Wi-Fi, and security fixes close known vulnerabilities. With a Microsoft account, turn on Find my device in Windows settings.
Honest limits: Cryptic Disk can't encrypt the system partition, so BitLocker stays in charge of C:. Disk Password Protection doesn't encrypt anything: booting from a USB stick skips its prompt, and the drive can still be read in another PC. That's why it goes together with encryption and a UEFI password. More on boot protection.
On the road: a few simple habits
Hidden volumes for especially sensitive data
If someone may force you to give up the password, Cryptic Disk offers hidden volumes: a second, hidden encrypted volume inside a container or drive.
If your laptop is stolen or lost
Email, Microsoft account, banking and work services. Start with any passwords saved in the browser.
In email, messaging apps, cloud storage and social networks. Remove the laptop from your trusted devices.
If it's a work laptop, so they can block access to company systems.
A police report for a theft; the airline, taxi company or hotel for a loss. Keep the report number for insurance.
Through your Microsoft account, if Find my device was on.
From the backup, on a new computer.
If the drive was encrypted and protected with a pre-boot password, the thief gets the hardware, not your files.
For a broader overview, read How to Protect Your Laptop and Data from Unauthorized Access. Disk Password Protection is on its download page.
FAQ
Is a Windows password enough to protect a laptop while traveling?
No. It only protects the sign-in, not the drive. The data is protected by encryption plus pre-boot and UEFI passwords.
Should I use sleep mode or shut down my laptop when traveling?
Shut it down. In sleep mode encrypted drives usually stay mounted and the keys stay in memory; after a shutdown, passwords are required again.
Do I need a VPN on hotel and airport Wi-Fi?
Yes, on any shared network. A VPN encrypts traffic between your laptop and the VPN server, so whoever runs the access point can’t see what you send.
Can Cryptic Disk encrypt my whole laptop?
No, it can’t encrypt the system partition. Use BitLocker or Device encryption for C:, and Cryptic Disk for data partitions, external drives and containers.
What should I do if my work laptop is stolen?
Tell your IT department right away, change your passwords, sign out of all sessions and file a police report. If the drive was encrypted, the files stay out of the thief’s reach.
No limitations during the trial. Windows 11, 10, 8.1, 8, 7, Vista and XP.
Free Trial Pricing & Buy