Can You Refuse to Give Agents Your Phone Passcode? The Fifth Amendment Answer.

Many courts treat memorized phone passcodes as testimonial knowledge. As a result, many courts refuse to grant agents passcode enforcement power under the Fifth Amendment. A police passcode request does not carry the force of a court order, and while officers often make these requests, they generally do not have the power to force compliance.

Importantly, refusing to comply with an officer’s passcode request is not, in itself, a crime. While agents may be able to obtain a warrant based on the refusal, refusing to provide a password to an officer’s request for a device inspection is not a stand-alone federal offense.

A judge can, however, compel a suspect to unlock his or her phone. This occurs if the government can make a “sufficient foregone-conclusion showing” that the suspect knows the passcode and that the device contains evidence in the case. If a judge compels unlocking in this scenario, the suspect must comply, and continuing to refuse could expose him or her to criminal contempt sanctions.

Refusing a border agent’s demand for device access is another situation that requires care. While refusing to unlock the device for a manual inspection may result in the agent taking the device for temporary detention, this generally will not lead to a denial of admission or other consequence.

The issue of compelling a passcode at the border is still more disputed than compelling a manual device inspection. However, refusing to provide your device passcode at the border still carries the potential for significant consequences. Noncitizens may face admission consequences, while citizens could face extended device seizures, along with other negative consequences.

If you have any concerns about the legality of your or someone else’s passcode demands, our legal team can help you make an informed decision about whether to comply. If necessary, we can contact the government on your or your loved one’s behalf to ensure your or their Fifth Amendment rights are protected.

How Should I Respond When Agents Demand My Passcode?

If agents demand your passcode, you can clearly invoke your right to remain silent. You can also request to speak with a lawyer and then affirmatively refuse to answer further questions. Importantly, agents will only provide a Miranda warning if you are in their custody. Noncustodial interviews can produce admissible statements without Miranda warnings. As a result, you should be prepared to affirmatively invoke your rights in all scenarios.

Discussing the Possible Consequences of Lying to Agents or Destroying Data

When communicating with agents, you must be careful not to make false statements. Under 18 U.S.C. § 1001, lying to federal law enforcement agents is a federal crime. While agents have the right to seize your phone, destroying data on it after the seizure, or even deleting evidence stored in the cloud, could expose you to criminal charges of evidence tampering and/or obstruction of justice. If federal agents are investigating you, it is also imperative to be extremely cautious when speaking to your coworkers, clients, and former colleagues. Even if you communicate in confidence, these statements could ultimately be used against you.

Communicating With Agents at Your Home

If federal agents or prosecutors arrive at your home, do not assume that the encounter is custodial. In many cases, interviews conducted in a suspect’s home are treated as noncustodial, meaning agents will not have to read you your Miranda rights. However, if you do not proactively exercise your right to remain silent or speak with a lawyer, you could end up compromising your case.

Communicating With Agents via Social Media or Online Forums

If agents or prosecutors contact you over social media, online forums, or any other internet-based platform, don’t assume that the content of your messages is protected by attorney-client privilege. Even if you are communicating on behalf of your attorney, or if you copy your attorney in the discussion, these statements can be used as evidence against you.

Does a Phone Warrant Mean I Must Unlock It?

Riley v. California, 573 U.S. 373 (2014), discussed above, did not exempt cell phones from the warrant requirement upon arrest; in fact, Chief Justice John Roberts wrote for a unanimous Court that cell phones “differ in both a quantitative and a qualitative sense from other objects that might be kept on an arrestee’s person,” and that officers must generally secure a warrant before searching one. That said, Riley did not, however, eliminate voluntary consent searches of devices.

Does a Decryption Order Change Things?

But, even if agents have obtained a decryption order from a court, this order does not replace the search limits of the Fourth Amendment. A court order permitting agents to decrypt a device doesn’t give them a license to look at everything. For example, it must not include data beyond the specific category of information described in the warrant. Similarly, a phone-data search warrant may not be broad enough to compel you to unlock the device.

What If the Government Obtains a Subpoena?

But, you may have a different Fifth Amendment argument to make here. A subpoena may trigger “act-of-production” Fifth Amendment objections that aren’t triggered in the context of police questioning. Our senior lawyer and founder, Dr. Robert S. Spodek Law Group, frequently files and defends these objections and subpoenas in district courts and circuit courts across the country.

When Should I Expect a Warrant?

Depending on the circumstances, it may be possible to argue against the validity of a warrantless search. For example, you can still challenge a warrantless device search based on a variety of grounds. If agents are searching your device based on consent, you can potentially challenge this consent for lack of voluntariness, because of the scope of the search, because you withdrew your consent, or because you did not have the legal authority to consent to the search. In Maryland, Richardson v. State, 481 Md. 423 (2022), held that a cellphone warrant failed the Fourth Amendment’s particularity requirement. Specifically, Richardson rejected the warrant’s general authorization to search and seize “any and all information” and “any and all data” on the phone, holding that a digital warrant must identify the information sought and its likely location, though the court declined to suppress the evidence because the officers had relied on the warrant in good faith.

Why Does the Fifth Amendment Protect a Phone Passcode?

The Fifth Amendment does not prohibit agents from demanding evidence against a suspect. Instead, the Fifth Amendment only bars agents from compelling self-incriminating testimony. However, the determination as to whether a piece of information is testimonial, and whether that information is protected by the Fifth Amendment, is a fact-specific inquiry. As the Supreme Court has explained: “In the most important respect, that information, whether it is testimony or not, must be in the suspect’s possession in order that he or she can be compelled to turn it over.”. As such, as long as the information sought by the government is testimonial, and as long as the act of reciting or typing the information makes the information’s existence, authenticity, or control in the possession of the accused an implicit (or explicit) admission of guilt, then the Fifth Amendment will apply.

Why Is Producing Data Testimonial in Nature?

In the act of reciting or typing the passcode, the accused is confirming to the government that he or she has knowledge of the passcode. By producing this evidence, the accused is also confirming to the government the existence, control, and authenticity of any information found within the device. This constitutes a testimonial admission.

What Is the Foregone Conclusion Doctrine?

The “foregone conclusion doctrine” is a key exception to the Fifth Amendment’s Act of Production protection. The foregone conclusion doctrine allows government agents to compel the production of evidence when the production “would not have any real or meaningful testimonial value, because the government already knows that the record in question exists and is in the possession of the witness, and it knows specifically what it contains.” As a result, when the act of production does not provide any new or additional testimonial value, a production demand can be lawfully enforced despite a Fifth Amendment act-of-production objection.

Is the Knowledge of a Phone Passcode Always a Foregone Conclusion?

The application of the foregone conclusion doctrine is subject to considerable debate. For example, in federal courts, judges are currently split as to whether, for example, a suspect’s knowledge of a phone passcode is, in itself, a foregone conclusion, or whether the government must make the foregone conclusion showing regarding certain specific files or data within the device. The United States Fourth Circuit Court of Appeals has previously held that “the act of entering a password into a cell phone is distinct from the act of disclosing the password, because that is where the actual production of evidence is located.” In contrast, writing down a password involves communicating a specific message which contains the actual passcode. When writing down a password, the act of production and the testifying act of revealing the password’s communicative content become the same thing.

Spodek Law Group, led by managing partner Todd Spodek, defends clients in federal criminal and white collar matters.

Do Passcode Rules Change Between States and Federal Courts?

The answer depends on the jurisdiction. State courts, like federal courts, are split on whether compelling a defendant to decrypt a cell phone or computer password violates the Fifth Amendment. For example, in Commonwealth v. Jones, 481 Mass. 540 (2019), the Supreme Judicial Court of Massachusetts established a high burden for prosecutors to meet. According to Jones: “If the government seeks to compel decryption as an act of producing evidence, then the government must demonstrate that the defendant knows the passcode.” Id., at 563. In order to compel a defendant to unlock a device under Jones, prosecutors must prove the defendant’s knowledge of the passcode beyond a reasonable doubt. Importantly, Jones did not require prosecutors to meet this high burden specifically with regard to files within a computer or cell phone as long as the government could prove the defendant’s knowledge of the password beyond a reasonable doubt.

How Differently Do State Courts Approach the Issue?

State courts have a similar split with federal courts. New Jersey’s Supreme Court upheld the order compelling a defendant to disclose an iPhone password in State v. Andrews, 234 A.3d 1254 (2020). On the other hand, Florida’s District Court of Appeal found that compelling the defendant to disclose his password violated the Fifth Amendment in G.G.A.Q.L. v. State, 257 So. 3d 1058 (Fla. 4th DCA 2018), 257 So. 3d 1058 (Fla. 4th DCA 2018).

How Differently Do Federal Courts Approach the Issue?

United States courts are also split, and individual federal courts have disagreed. For example, in 2012, the Eleventh Circuit blocked federal government agents’ attempts to compel the decryption of hard drive, while the Ninth Circuit upheld contempt for the defendant’s refusal to disclose his or her password in United States v. Apple MacPro Computer, 851 F.3d 238 (3d Cir. 2017), 851 F.3d 238 (3d Cir. 2017).

Is Entry of a Decryption Key Testimonial in Massachusetts?

In the Massachusetts case of Commonwealth v. Gelfgatt, 468 Mass. 512 (2014), the state’s highest court held that the facts conveyed by entering a decryption key were a foregone conclusion, so the act of decryption was not a testimonial communication protected by the Fifth Amendment. The court explained that compelled decryption was permissible because it “would not communicate facts of a testimonial nature to the Commonwealth beyond what the defendant already had admitted to investigators.” While Gelfgatt initially had the same logic as Jones, it was eventually superseded in part by Jones.

What Is the Correct Legal Standard for Passcodes?

Determining the correct legal standard for passwords and passcodes in your jurisdiction is incredibly important. At Spodek Law Group, our senior lawyers are intimately familiar with the differences in the law between states and federal circuits. We use this knowledge to best protect our clients’ interests. If you are facing a password or passcode demand from federal government agents, you should reach out to us.

What Happens if a Judge Orders Me to Unlock?

If a judge orders you to unlock your phone or computer, you can either refuse (which could expose you to civil contempt and civil confinement sanctions) or, you can request a stay in order to allow for review of the order. With a stay, you can pursue challenges in appellate courts and delay your obligation to comply with the order until the issues at hand are resolved.

In other cases, defendants who have legitimately forgotten their cell phone or computer passwords can avoid coercive civil contempt sanctions by testifying that this is the case. This is because civil contempt must be intended to be coercive, and confinement must be terminated when no longer serving as coercion.

As noted, civil contempt is a different form of punishment compared to criminal contempt. Criminal contempt punishes a defendant’s past defiance or insults directed toward the court. Civil contempt sanctions must end when confinement no longer has a coercive effect. The statutory cap on confinement for civil contempt is the life of the proceeding in which the order was issued, or 18 months.

U.S.C. § 1826(a) limits the confinement for the civil contempt in question. This makes it extremely difficult to punish individuals longer than the statutory cap, even if the individual refusing his or her phone password still does not comply.

With regard to accessing a decrypted phone or computer, act-of-production immunity may protect the defendant from the testimonial implications of complying with the order to unlock. As a result, act-of-production immunity might protect defendants from being charged with a crime based on the information derived from producing decrypted evidence.

However, that is where act-of-production immunity can create questions regarding the material found on a decrypted phone. This is because a decrypted file or document can be held to be a recording, not a testimony. Since the information found on the phone was created before the decryption attempt, there is no act of production here. As a result, a court order to decrypt a device without an act-of-production immunity protection could create an admission of guilt based on the evidence on a phone.

As discussed, the answer to the question of whether one can refuse to give federal agents the password or passcode to his or her device is a mixed bag. The answer largely depends on the circumstances in question, the laws of a particular jurisdiction, and what agents, prosecutors, or a judge may require you to produce. But a defendant’s decision should be based on clear communication with his or her attorney.

Our law firm has extensive experience in the digital world. We have advised many clients on what to say to federal agents and what they should avoid. If you need assistance with your case, you should contact Spodek Law Group today.

Can Agents Force Face ID or Fingerprint Unlocking?

The Fourth Amendment protects against unreasonable searches and seizures. For biometric unlocking, such as Fingerprint ID and Face ID, the analysis for biometric unlocking is separate from the analysis for memorized passcodes. For example, in United States v. Payne, 99 F.4th 495 (2024), Judge Moore found that compelling a defendant to unlock his cell phone with a thumbprint did not violate the defendant’s constitutional rights under the Fifth Amendment. However, the United States Court of Appeals for the Second Circuit rejected compelled fingerprint unlocking for iPhones in United States v. Brown, 125 F.4th 1186 (2025).

As of now, the Supreme Court has not yet resolved the issue of whether agents can force Face ID or fingerprint unlocking. While the United States courts that have decided this issue are split on whether this violation exists, this disagreement persists partly because some of the courts have concluded that the act of physically applying a suspect’s finger to a device is different from ordering the suspect to unlock the device. As a result, physical exemplars do not get the same protection as testimonial evidence.

The Massachusetts SJC has not yet decided the issue of whether agents can force Face ID or fingerprint unlocking under the state’s constitution or the U.S. Constitution. This is another reason why you should speak with a lawyer before doing anything.

Although some attorneys will argue that Face ID or Touch ID offer protection, many others would argue that unlocking a device using biometrics will not offer the same protection as unlocking using a passcode. In fact, it will likely provide significantly less protection.

Can Agents Search My Phone Without My Passcode?

If agents refuse to accept your Fifth Amendment objection or are not yet ready to file their case with a court, they may decide not to compel unlocking of your device. Instead, they may decide to attempt a forensic unlock to access your data. While agents cannot be entitled to use your phone-passcode under the Fifth Amendment without a court order, this is only if agents are seeking your testimony. They can, however, force your hand and your fingerprints to unlock the phone if they have a valid reason for doing so. However, if you have the fingerprints or face ID disabled on your phone, agents may try to use their forensic unlocking software. One of the most famous tools that agents use is Cellebrite, which targets the vulnerability in the phone’s operating system in order to unlock the phone’s storage. GrayKey is another tool that is widely used by law enforcement.

Another thing that you need to keep in mind is that agents do not necessarily need to have your phone passcode to access your phone data. If they obtain an order to a cloud provider (such as Apple, Google, or Samsung), then they might have access to information that you had stored in the cloud. However, these providers generally demand a valid warrant. Similarly, if agents have access to another user’s credentials, then agents can also access your data through the other user’s account. Cellular providers also store certain types of records, and in some cases, these records could serve as enough evidence against you without compelling your passcode.

Furthermore, remember that while agents might have access to your phone based on a warrant, the warrant doesn’t necessarily give agents a license to search your device on a different occasion. For example, if you consent to a search or agents are in possession of a warrant, agents may be unable to navigate your phone files after this limited search is over, unless they obtain a new warrant. Similarly, while viewing your phone’s locked screen, the text displayed will not necessarily allow them to navigate your phone’s folders and files, provided that these files are hidden.

The warrantless seizure of devices is allowed when agents find the devices under a valid exigent circumstance. However, the search of the device in itself requires a warrant, regardless of the circumstances of the arrest.

Speak With a Federal Defense Lawyer

If you are dealing with any part of what this article describes, the next step is a conversation with a lawyer who handles these cases. Spodek Law Group is a second generation criminal defense firm practicing since 1976, representing clients nationwide from offices in New York, Brooklyn, Queens and Los Angeles. Call 212-300-5196 to speak with our team.