What to do if…
police ask you to hand over passwords or account logins related to an investigation
Short answer
Don’t volunteer passwords or log in “on the spot”. Ask if you are free to leave; if not, clearly invoke your right to remain silent and request a lawyer before you provide any access or consent.
Do not do these things
- Don’t consent to a search of your phone/accounts just because you feel pressured or confused.
- Don’t type your passcode or sign in “so they can take a quick look” without legal advice.
- Don’t share one-time verification codes (2FA), backup codes, recovery keys, or password-manager access.
- Don’t start explaining or arguing your case in the moment — keep it short.
- Don’t delete messages, wipe devices, or change things to “fix it” — that can create new legal trouble.
- Don’t assume the rules are the same everywhere in the USA (court rulings on compelled access vary).
What to do now
- Find out your status. Ask: “Am I free to leave?”
- If yes: leave calmly and contact a lawyer before responding further.
- If no: proceed as if you are being detained.
- Invoke your rights out loud (short and clear). Say: “I am invoking my right to remain silent. I want a lawyer. I do not consent to a search of my devices or accounts.”
- Ask what legal authority they’re relying on. Calmly ask:
- “Do you have a warrant or court order?”
- “What exactly does it cover — which device or which account?” Phone searches commonly require a warrant in many situations, but there are exceptions — don’t argue the law on the spot.
- Don’t help expand access. Even if they have paperwork for a device, that does not automatically mean you should provide passwords or sign in to cloud/social/email. Say: “I’m not providing passwords, codes, or logging in without my attorney.”
- Be careful with “consent” language. If they keep asking, repeat: “I do not consent. I want a lawyer.” (Then stop talking.)
- Write down what happened as soon as you safely can. Note agency, officer names/badge numbers, date/time, what was requested (password? passcode? 2FA?), and whether you were shown a warrant/order.
- If your account provider contacts you, pause. Save any emails/texts about logins, resets, or law-enforcement requests. Don’t click through in a rush — show them to your lawyer.
What can wait
- You do not need to decide right now whether you will cooperate beyond what your lawyer advises.
- You do not need to explain why you won’t share access in the moment.
- You do not need to contact your employer, school, family, or the account provider right now (unless your lawyer tells you to).
- You do not need to make device/account changes right now.
Important reassurance
Freezing up or feeling pressured is normal. Passwords and logins are unusually high-risk because they can open far more information than you intend. Invoking your rights and asking for a lawyer buys time and helps prevent irreversible mistakes.
Scope note
This guide covers first steps when police ask for passwords/logins. In the USA, rules about compelled device access can vary by jurisdiction and by the kind of order involved, so don’t try to decide the law in the moment — get legal advice.
Important note
This is general information, not legal advice. Laws and court rulings vary by state and federal circuit, and facts matter (detention status, warrant scope, probation/parole conditions, border searches, and specific court orders). If police request access to your devices or accounts, try to speak to a criminal defense attorney promptly before providing passwords, passcodes, logins, or verification codes.
Additional Resources
- https://supreme.justia.com/cases/federal/us/573/373/
- https://www.nacdl.org/Content/Compelled-Decryption-Primer
- https://www.nacdl.org/getattachment/31317952-b53d-48ce-93bc-e44889f4804b/compelleddecryptionprimer.pdf
- https://www.eff.org/issues/know-your-rights
- https://www.justsecurity.org/63827/split-over-compelled-decryption-deepens-with-massachusetts-case/