What to do if…
police ask you to consent to access your cloud backups or online accounts
Short answer
Do not give voluntary consent in the moment. Say, “I do not consent to access to my accounts or cloud backups,” and ask for a lawyer before answering substantive questions or signing anything.
Do not do these things
- Do not share passwords, passcodes, recovery codes, or one-time codes merely because you are asked.
- Do not approve login prompts or unlock apps that are already signed into your accounts merely because you are asked.
- Do not sign a consent form while you feel pressured or before you understand what it covers.
- Do not delete messages or files.
- Do not reset passwords or make rushed account changes while you are under pressure.
- Do not lie, argue, or physically interfere with officers.
What to do now
- Ask, “Am I free to leave?” If officers say yes and you choose to leave, leave calmly. If officers say no, do not argue or physically resist.
- State your position once: “I do not consent to access to my cloud backups or online accounts.”
- Ask, “Is this a voluntary request, or are you relying on legal authority?” Do not try to debate the answer during the encounter.
- Do not type credentials, read codes aloud, approve login prompts, or unlock signed-in apps. If officers say they have authority, repeat that you do not consent and do not physically interfere.
- If you do not want to answer substantive questions, say, “I am going to remain silent. I want a lawyer.” If you are detained or arrested, repeat this as needed. Do not volunteer account details, and do not lie.
- If paperwork is shown to you, ask to read it and request a copy when possible. Note which accounts, dates, and types of data it appears to cover, but leave legal interpretation to a lawyer.
- If a device is taken or access is attempted, write down the agency, officer names or badge numbers if known, the date and time, the accounts mentioned, what you were asked to do, and that you stated non-consent.
- Contact a criminal-defense lawyer as soon as practical, especially if officers took a device, presented paperwork, questioned you, or said they had authority to access an account.
What can wait
- You do not need to decide in the moment whether you will ever cooperate with account access.
- You do not need to explain your refusal or tell your side of the story.
- You do not need to locate backups, troubleshoot logins, reset passwords, or change account settings while you are under pressure.
- You can leave later account-security decisions until after you have legal advice.
Important reassurance
A request for quick access can feel overwhelming. Clearly refusing voluntary consent, avoiding rushed account actions, and asking for a lawyer are reasonable first steps. Police may seek some online-account data from a provider through legal process without asking you to log in, so you do not need to resolve the request yourself in the moment.
Scope note
These are first steps for the first minutes or hours of an encounter. Later decisions, including how to respond to paperwork or claimed legal authority, may need advice from a criminal-defense lawyer familiar with your state and situation.
Important note
This is general information, not legal, medical, financial, therapeutic, or other professional advice. Rules can vary by state and circumstances. This guide does not cover border or port-of-entry encounters, where different rules may apply.
Additional Resources
- American Civil Liberties Union — Know Your Rights
- American Civil Liberties Union — Recording and Documenting Police and Federal Agents
- Congress — ALDE 00000792
- LII / Legal Information Institute — 18 U.S. Code § 2703 - Required disclosure of customer communications or records
- Electronic Frontier Foundation — How Cops Can Get Your Private Online Data
About this guide
This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.