What to do if…
police ask you to consent to access your cloud backups or online accounts
Short answer
Don’t consent or hand over passwords in the moment. Calmly say you want to speak to a solicitor first, and ask for the request (and its scope) in writing.
Do not do these things
- Don’t give passwords, passcodes, recovery codes, or approve login/“push” prompts or one-time codes.
- Don’t unlock your phone “just to show them one thing” if the real ask is about cloud/accounts (being logged in can effectively grant access).
- Don’t sign a “consent” form you haven’t read and understood, especially if it’s broad (e.g., “any accounts” / “all data” / “no time limits”).
- Don’t try to “clean up” accounts (deleting or changing things can create serious extra problems).
- Don’t get drawn into debating the law on the spot—use one repeatable boundary: no consent without legal advice.
What to do now
- Create a pause and clarify what’s happening. Ask:
- “Am I being detained or am I free to leave?”
- “Am I under arrest?”
Then slow everything down: “I need a moment to understand what you’re asking.”
- Say your boundary clearly (and keep repeating it):
- “I do not consent to access to my cloud backups or online accounts.”
- “I want to speak to a solicitor before answering questions or signing anything.”
- Ask for a solicitor as early as possible. If you are in a police station, request legal advice immediately. (In England & Wales, free independent legal advice is available at the police station; elsewhere in the UK the process can differ, but asking for a solicitor is still the safest first move.)
- Make them spell out the exact scope in writing. Ask them to write down (or show you on the form):
- which account(s) (e.g., iCloud, Google, email, social media)
- what they want (backup contents, specific messages, photos, location history, login history, etc.)
- the date range
- whether this is voluntary consent or they are relying on a warrant/order/power
If it’s vague, say: “I can’t give informed consent to something that broad.”
- Do not “help them log in.” That includes typing passwords, reading out codes, approving 2FA prompts, scanning QR codes, or unlocking a device that’s signed into the accounts. If they say they have legal authority, respond: “Then please use that process without my consent.”
- Separate three different things (don’t let them blur together):
- Access to your online accounts/cloud (your consent is what they’re seeking)
- Taking/retaining a device (they may claim a separate power)
- Extracting data from a device (often handled with distinct paperwork/authorisation)
Ask: “Which of these are you asking me to agree to, specifically?”
- If you are a victim or witness, you can still say no—and you can ask for safeguards. Say:
- “I don’t feel able to give informed consent right now.”
- “Can you limit this to [specific account] and [specific dates]?”
- “What happens if I don’t consent?”
If you feel pressured, end with: “I want legal advice before I decide.”
- If anything is taken or any paperwork is used, record basics as soon as you can. Ask for (or note): officer names/collar numbers, the force, date/time, what you refused, what they asked for, and copies/photos of any forms you were shown or asked to sign (if permitted).
What can wait
- You do not need to decide right now whether you will ever give access—your first job is to avoid impulsive “all-access” consent.
- You do not need to explain your accounts, relationships, or history in the moment.
- You do not need to reset passwords, locate old devices, or “prove” anything right now—wait until you have legal advice.
Important reassurance
It’s normal to freeze or feel intimidated when someone in authority asks for access to years of private information. Calmly refusing consent and asking for a solicitor is a standard, reasonable boundary.
Scope note
These are first steps for the first minutes/hours of police contact. If you are arrested, interviewed, served paperwork, or your devices are seized, the right next step is legal advice tailored to your situation.
Important note
This is general information, not legal advice. Police powers and processes vary across the UK and by context (including terrorism-related powers). If you are being detained, interviewed, or arrested, ask for a solicitor as early as possible and avoid giving voluntary consent to broad digital access.
Additional Resources
- https://www.gov.uk/arrested-your-rights/legal-advice-at-the-police-station
- https://www.legislation.gov.uk/ukpga/1984/60/section/58
- https://assets.publishing.service.gov.uk/media/6580543083ba38000de1b792/PACE%2BCode%2BC%2B2023.pdf
- https://www.legislation.gov.uk/uksi/2022/1054/regulation/2/made
- https://www.gov.uk/government/consultations/extraction-of-information-from-electronic-devices-code-of-practice/extraction-of-information-from-electronic-devices-code-of-practice-accessible
- https://assets.publishing.service.gov.uk/media/699f2977532c9ad91ebbcd00/Digital_devices_seizure_and_retention_and_data_extraction_policy.pdf
- https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-sharing/sharing-personal-data-with-law-enforcement-authorities/