USB & Public Charging Safety

A free charging station at an airport, hotel or cafe is tempting when your battery is low. But a USB port can carry data as well as power, and a modified port or cable could try to install malware or steal data. Unknown USB drives and cables are also a risk. The real-world threat is smaller than the headlines, but easy habits remove it.

• Travelers
• Everyone
• Workplaces

What the risk is

• “Juice jacking” is when a public USB charging port, or a cable left in one, is set up to move data to or from your device, or to install malware, in addition to charging it.
• The FBI’s Denver office and the FCC have warned travelers to avoid public USB charging stations, and to carry their own charger and cable. There are few confirmed real-world cases, but the warning is a low-cost precaution, and security researchers have demonstrated that it’s possible.
• Modern phones help. Current iPhones and Android phones ask whether you trust the connected device before sharing data, and default to “charge only” on an unknown connection. These prompts are a key protection. Never tap Trust or Allow data access on a public port.
• Malicious cables exist. Some look like ordinary charging cables but contain hidden chips that can act as a keyboard, run commands or give an attacker access. They have been demonstrated by researchers and sold as testing tools.
• Unknown USB drives (flash drives) can carry malware that runs when plugged in, or that fools the computer into thinking it’s a keyboard. Criminals have mailed or dropped infected drives, and have even sent them to businesses as fake gifts.
• Other risks: poorly made chargers and cables can overheat or start fires, and counterfeit ones may damage your phone. See Lithium-Ion Battery Safety.

Charging safely away from home

• Bring your own charger and cable, and plug into a regular wall outlet (AC), not a public USB port. This is the safest way.
• Carry a power bank (portable battery), charged before you travel.
• Use a “USB data blocker” (sometimes called a USB condom) or a power-only (charge-only) cable if you must use a USB port. These block the data pins so only power gets through. Buy from a reputable brand.
• Don’t use cables found in public, given as free gifts, or left plugged into a station or in a rental car.
• Lock the phone or turn it off while it charges on an unknown port, which reduces data access.
• Watch for the trust prompt, and decline it. If a “Trust this computer?” or “Allow data transfer?” question appears when you plug in, say no, unplug and use another way to charge.
• Check ports and stations for signs of tampering, such as loose or mismatched ports, stickers or added hardware.
• Buy certified accessories and avoid cheap unbranded chargers and cables. Look for safety marks such as UL, and follow the manufacturer’s advice. See Extension Cords for general power safety.
• Keep your phone updated, which fixes security flaws. See Software Updates.

Unknown USB drives and devices

• Never plug in a USB drive you found, were mailed, or got at an event or from an unknown source. Curiosity is exactly what attackers count on. Hand a found drive to IT or security staff, or throw it away.
• Don’t plug unknown devices into work computers, or let others plug theirs in. Follow company policy.
• Don’t accept free USB gadgets, such as promotional flash drives, fans or lights, from unknown sources, and don’t connect them to your computer.
• Avoid public computers for sensitive tasks such as banking, and never save passwords on them.

• Use trusted drives and scan them for malware before opening files. Consider turning off AutoRun and using encrypted drives for sensitive data.
• Prefer cloud sharing or secure transfer to USB drives for sensitive files. See Data Protection.
• Keep personal and work data apart and don’t charge personal phones from work computers if your policy forbids it.

What to do if you think a port or device was malicious

1. Unplug it and disconnect the device from Wi-Fi and mobile data.
2. Update the phone and run a security scan. On an iPhone, check for unknown profiles or apps. On Android, check for new apps and accessibility or administrator permissions. See App Permissions and Malware & Antivirus.
3. Change passwords from a different, clean device, starting with email, banking and work accounts, and turn on two-factor authentication. See Hacked Accounts.
4. Reset the device to factory settings if it behaves strangely and you can’t find the problem, restoring from a clean backup.
5. Tell IT or your employer if it involved a work device. Report scams and tampering to the venue and the authorities.

Workplace and travel tips

• Employers should have a policy on USB devices and may block USB storage, scan drives, and train staff about found drives and phishing. See Workplace Cybersecurity and Phishing.
• Travelers: pack a charger, a cable, a power bank and maybe a data blocker. Charge in a way that doesn’t leave your devices unattended. See Travel Safety.
• Rental cars and hotel clocks with USB ports are also public-type ports. Use a power-only adapter in the cigarette lighter or an AC outlet if you can.
• Use wireless charging from a trusted pad if you want to avoid cable data risks, though stay careful with the pad itself.

Charging safety checklist

• I carry my own charger, cable and a power bank, and use wall outlets in public
• I use a data blocker or power-only cable if I must use a USB port
• I decline “Trust this computer” and data access prompts on unknown ports
• I never plug in found, mailed or free USB drives or cables
• I follow workplace rules on USB devices and report suspicious ones
• I update my devices and know what to do if I suspect tampering

Last updated: October 4, 2026