PanicStation.org
UK USA
us Legal, police, prison & official contact regulator asks for passwords • agency asks for passcode • asked to unlock phone on the spot • asked for device pin during investigation • asked for work email password • government inquiry credential request • asked to approve authenticator prompt • asked for two factor code • asked to share login credentials • subpoena and password demand • warrant and unlock request • compelled unlocking concern • fifth amendment passcode question • biometric unlock pressure • unsure if request is lawful • worried about refusing access • asked for account access • asked to unlock laptop • official interview password request

What to do if…
a regulator asks you to provide passwords or passcodes during an inquiry

Short answer

Don’t give passwords, passcodes, or 2FA codes verbally “in the moment”. Ask for the request in writing (subpoena, warrant, or court order) and involve an attorney (or your organization’s counsel/compliance lead) before providing any access.

Do not do these things

  • Don’t share your actual password, device PIN, or 2FA codes to “make it easier”.
  • Don’t unlock a device/account and then leave officials alone with it without counsel-approved boundaries.
  • Don’t delete messages, wipe devices, change accounts, or “clean up” after contact.
  • Don’t lie, guess, or volunteer extra accounts/devices because you’re flustered.
  • Don’t physically resist or interfere. Your goal is to pause, document, and route everything through the proper legal process.

What to do now

  1. Move the request onto formal paper. Calmly say:
    “I can’t share passwords or passcodes informally. Please provide the subpoena/warrant/court order or a written request stating the authority and scope.”
  2. Identify who is asking and what tool they’re using. Ask for the agent’s name, agency, and case/reference number, and whether this is:
    • a subpoena/document demand,
    • a request for testimony/interview, or
    • a request for device/account access tied to a warrant or court order.
  3. Call counsel immediately (or your organization’s counsel).
    • If you have a lawyer: contact them before disclosing anything.
    • If this is work-related: notify your legal/compliance contact and IT/security lead right away.
    • If you’re in custody: clearly request an attorney and stop discussing access credentials until you have advice.
  4. Offer cooperative alternatives that avoid handing over credentials. While counsel reviews the request, propose:
    • Producing documents/data through counsel (exports, copies, logs) limited to the written scope.
    • A supervised review where you navigate while they observe, limited to what’s legally authorized.
    • Temporary/least-privilege access created by IT/admin (time-limited account), instead of your personal credentials.
  5. If they insist you must unlock immediately, ask for the exact written authority compelling that specific act. In the U.S., compelled unlocking (especially memorized passcodes versus biometrics) can vary by jurisdiction and the facts. Your safest move is:
    • ask to see the warrant/court order they’re relying on,
    • say you will respond through counsel, and
    • do not physically resist.
  6. Preserve and document. Write down what happened (who asked, what they requested, when, what papers were shown). Preserve relevant devices and accounts as-is until your attorney gives direction.

What can wait

  • You do not need to decide today whether to provide broad access. Right now, you only need to avoid irreversible mistakes and get the request properly scoped and reviewed.
  • You do not need to provide a full explanation, background story, or extra accounts/devices in the moment.
  • You do not need to make technical changes or run searches unless counsel directs it.

Important reassurance

It’s normal to freeze when an official asks for a passcode. Asking for written authority and involving counsel is a standard protective step—especially because passwords and 2FA can expose far more than a request is entitled to.

Scope note

This covers immediate first steps when you’re asked for passwords/passcodes during an inquiry. The right response depends on whether this is a civil regulator, criminal investigation, custody setting, and what legal papers (if any) have been served.

Important note

This is general information, not legal advice. If you’re served with a subpoena, warrant, or court order—or you’re in custody—get legal advice immediately and avoid deleting or altering data.

Additional Resources
Support us