Control the connection before you blame the Wi-Fi
The variable that changes most on the road is not the machine, it is the link. A cafe connection shared with twenty laptops, a phone plan with a hard cap, a train full of tunnels, a hotel network that crawls after the first gigabyte. macOS assumes bandwidth that is always present and never costs anything, so the first thing worth fixing is what your Mac is allowed to do with the bandwidth you actually have.
NetMute. A per-app firewall and data manager for people who keep changing networks. Set daily or monthly limits per app plus a global cap, with a warning at a threshold you choose and an automatic block at one hundred percent. Limits live inside network profiles that switch automatically by Wi-Fi SSID, so home rules and hotspot rules stay separate. Hotspot protection applies a strict profile the moment you join an unknown network and handles captive portals, so hotel and airport logins still work. Free to download on the Mac App Store, with Premium as a single in-app purchase and no subscription. The caveat: it is a control layer, not a speed boost.
TripMode. The name most travelling Mac users already know, and it earned that years ago. It sits in the menu bar, lists every app trying to use the connection, and lets you allow or block each one per network, remembering the choice the next time you join that hotspot. Consumption is shown per app and per network. It is paid, and if what you want is a fast manual gate you flip when you tether rather than quota-based automation, this is the most direct route to it.
Low Data Mode. Built into macOS, free, and routinely ignored. Turn it on for a specific Wi-Fi network or for your personal hotspot and the system defers updates, pauses non-urgent background transfers, lowers FaceTime bitrate and holds back iCloud syncing. The caveat is that it is advisory: Apple's own services respect it, third-party apps are free to ignore it entirely, which is why the tools above exist.
Activity Monitor. Already installed, and still the fastest first diagnostic. The Network tab, sorted by bytes sent or received, names the process eating your allowance in about ten seconds, and the Energy tab does the same for battery drain. It keeps no history per network and cannot block anything, but it will tell you whether the problem is a sync client, a browser tab or a photo library.
Public Wi-Fi, and the honest limits of a VPN
Airport, hotel and cafe networks are rarely run by attackers, but you cannot verify anything about them either. Because almost all traffic is encrypted in transit now, someone listening passively is not reading your email. What stays exposed is more mundane: which servers you reach, DNS lookups the network can answer however it likes, a captive portal that intercepts your first request by design, other devices on the same flat network, and any app on your Mac that connects without asking.
A VPN, chosen on criteria rather than on advertising budget. Insist on an independently audited no-logs claim, the provider running its own DNS, modern protocol support such as WireGuard, a kill switch that genuinely blocks traffic when the tunnel drops, and a client that copes with captive portals instead of fighting them. Mullvad, Proton VPN and IVPN have all published independent audits. Whichever you pick, be clear about the trade: you are moving trust from a network you know nothing about to a company you chose deliberately.
It is worth being equally clear about what a VPN does not do. It does not stop apps phoning home, it only changes where they phone home from. It does not stop analytics inside services you are logged into, because there you identified yourself. It does not reduce data usage, and the tunnel adds overhead. And it does nothing about a background sync consuming the gigabytes on your travel SIM. Encryption and consumption are separate problems, which is why an outbound firewall and a VPN sit beside each other rather than replacing one another.
Tailscale. A WireGuard-based mesh network with a free tier for personal use, and worth setting up before you leave rather than from a hostel lobby. Laptop, phone and a machine at home join one private network, so you can reach files or a home server without exposing anything publicly. Its exit node feature routes traffic through your home connection when you want a known egress point. Caveats: exit node throughput is capped by your home upload speed, and it is a private network tool, not an anonymity tool.
1Password or Bitwarden. Travel makes password reuse expensive, because you sign in from more networks and more borrowed screens than you do at home. Both unlock against a local encrypted copy, so the vault still opens on a plane. Bitwarden is open source, with a free tier and a self-hosting option. 1Password is paid, more polished, and nags you usefully about reused and breached credentials. For either, keep your two-factor recovery codes somewhere that is not the laptop in your bag.
Then spend ten minutes on the free settings. FileVault on, so a stolen MacBook is an expensive brick rather than an open filing cabinet. The macOS firewall on. In Wi-Fi settings, stop your Mac joining open networks automatically, and forget hotel networks when you leave.
Offline-first notes, writing and reading
There is a simple test for whether an app belongs in a travel setup: turn Wi-Fi off and try to do your actual work. Plenty of well-loved tools quietly become a spinner. Offline-first apps keep their data on your disk and treat sync as an optimisation, and in a tunnel or at cruising altitude that distinction is the whole game.
Obsidian. Your notes are plain Markdown files in an ordinary folder, so search, backlinks and editing all work with the network off, and the writing outlives the app. It is free for personal use, and its official sync is a paid add-on you do not have to use, since any file sync, or none, works fine. The caveat is that it is a toolkit rather than a finished product, so update plugins on good Wi-Fi rather than discovering a broken one at a departure gate.
Apple Notes. Free, already installed, genuinely offline, and it reconciles cleanly when you reconnect. Its most underrated travel feature is document scanning from the iPhone camera straight into a locked note, which is where your passport page, visa letter, insurance details and tax-relevant receipts should live. The caveat is that bulk export is awkward, so treat it as a front end rather than your only archive.
iA Writer or Bear. Both paid, both storing your work locally, and either solves the same problem: somewhere pleasant to write that does not need a server. iA Writer is deliberately austere, plain text on disk with a focus mode that suits a noisy cafe. Bear is a better-looking Markdown notebook with tagging and fast search.
DEVONthink. A paid, heavyweight document manager, and the right answer if your work means carrying a research library rather than a handful of notes. PDFs, web archives and correspondence stay local with full-text search and OCR, so the whole archive is usable offline. The caveat is a real learning curve, so it is not something to install the night before a trip.
NetNewsWire. Free, open source, and the cheapest way to always have something to read offline, since it fetches your feeds while you have a connection and keeps them when you do not. Pair it with a read-later app or your browser's reading list, and get into the habit of filling the queue on hotel Wi-Fi the night before a travel day.
Files and backups that behave on a bad connection
Sync clients are the biggest silent consumers of travel bandwidth. Join a network and several of them wake up to reconcile everything that changed while you were offline, in whatever order they please. Two goals apply: pull only what you need, and still hold a real backup while your home drive is a few thousand kilometres away.
Dropbox with online-only files. Selective sync and online-only placeholders are why it still earns a place in a travel bag. Mark archives as online-only so a small SSD is not dragged down by years of material, and pin the current project folder so it stays available locally. The caveat is the obvious one: an online-only file needs a connection to open, so pin what you need before you board, not after.
iCloud Drive. The built-in equivalent, and adequate if you already live in the ecosystem. Optimise Mac Storage evicts files you have not touched, and you can right-click a folder and keep it downloaded. The caveat is less granular control than a dedicated client, plus a habit of deciding for itself what to evict, which is the wrong instinct the day before you leave coverage.
Syncthing. Free, open source, peer-to-peer, and the best way to move files between your own devices without paying for a round trip to a data centre. On hotel Wi-Fi or a hotspot, syncing a folder from phone to Mac happens over the local network at local speed and costs nothing from your plan. The caveat matters: two copies travelling in the same bag are not a backup.
Arq, or any cloud backup you can throttle. Arq is paid, backs up to storage you choose, and has bandwidth limits and scheduling built in, which is what makes it workable away from home. Backblaze is a subscription service with a continuous model that is easier to forget about. Either way the travel rule holds: continuous cloud backup over a tethered connection can quietly cost more than the trip, so throttle it, schedule it for hotel Wi-Fi, or block it where it does not belong.
Time Machine and a bus-powered SSD. Free, offline, and still the fastest way back from a dead machine. A small encrypted APFS drive turns a hardware failure abroad into an annoying afternoon rather than a lost trip, and needs no connection at all. Carbon Copy Cloner is a paid alternative if you want a bootable copy. The unglamorous discipline is carrying the drive in a different bag from the laptop, since a backup stolen alongside the Mac was never a backup.
Time zones, battery, and knowing what the machine is doing
Two problems remain once the connection is handled: coordinating with people who are not in your time zone, and getting through a travel day on a battery. Both are solved less by clever software than by seeing the right number at the right moment.
Fantastical. Paid and subscription-based, and still the strongest calendar on macOS for anyone who moves around. It handles per-event time zones properly, so a call booked in a client's time stays correct after you cross two zones, and it can show a second time zone beside your own. Natural language input lets you type a meeting in one line instead of navigating a form on a train. The caveat is that the subscription bundles plenty you may never touch.
Notion Calendar. Free, connects to Google Calendar accounts, and puts multiple time zones in the sidebar with a toggle between your home zone and wherever you currently are. Its scheduling links help when you are the one proposing times across three continents. The caveat is that it is tied to the Notion ecosystem and to Google accounts, so it fits some setups far better than others.
Raycast. Free, and known mostly as a faster launcher, but two features earn it a place here: a time zone converter you can summon with a keystroke mid-conversation, and clipboard history that survives the crashes you get when a laptop is pushed hard on a plane. The caveat is that its AI and sync features are cloud-based and paid, worth knowing if you are keeping background traffic down.
coconutBattery. Free, and it answers plainly what no built-in panel does: how much of your battery's design capacity is left, and how many cycles it has been through. That number decides whether you can risk a seat with no power socket. AlDente will hold the charge near eighty percent while you work plugged in for weeks, though check first, because recent MacBooks already include Optimised Battery Charging and an eighty percent limit.
iStat Menus and Amphetamine. iStat Menus is paid and puts CPU, memory, network throughput, temperature and battery time remaining in the menu bar, turning the diagnosis of a slow morning into a glance. Amphetamine is free on the Mac App Store and keeps the Mac awake through a long upload without you disabling sleep system-wide and forgetting. Between them they cover the last thing worth stating plainly: the scarce resources on the road are bandwidth, battery and attention.