Cell Phone and Digital Evidence Searches in the Military
Key takeaways
- Digital privacy is real: the Supreme Court requires a warrant for cell phone content even incident to arrest, and for historical cell-site location data. Riley v. California, 573 U.S. 373 (2014); Carpenter v. United States, 138 S. Ct. 2206 (2018).
- You retain a reasonable expectation of privacy in a personally owned computer or phone even in a shared room on base. United States v. Conklin, 63 M.J. 333 (C.A.A.F. 2006).
- Probable cause for one device does not automatically extend to your other devices — an agent’s generic “Soldiers transfer files” claim is not enough. United States v. Nieto, 66 M.J. 101 (C.A.A.F. 2017).
- Whether agents may demand your passcode after you ask for a lawyer depends on how they got the phone: lawful consent seizure, yes; seizure under an authorization, no. United States v. Robinson, 77 M.J. 303 (C.A.A.F. 2018); United States v. Mitchell, 76 M.J. 413 (C.A.A.F. 2017).
- Forensic examinations must stay within the authorization’s scope and be reasonable in timing and duration. United States v. Osorio, 66 M.J. 632 (A.F. Ct. Crim. App. 2008); United States v. Gurczynski, 76 M.J. 381 (C.A.A.F. 2017).
Your privacy in phones and digital data
The Supreme Court has recognized what every service member knows: a modern phone is not an “effect” like a wallet, it is a life archive. In Riley v. California, 573 U.S. 373 (2014), the Court held that police must generally get a warrant before searching the digital contents of a cell phone, even one seized incident to a lawful arrest. Carpenter v. United States, 138 S. Ct. 2206 (2018), extended the principle to data held by third parties: obtaining seven days of historical cell-site location information from a wireless carrier is a Fourth Amendment search requiring a warrant — despite the plain language of the Stored Communications Act and R.C.M. 703A.
Military courts track the same trajectory. A service member sharing a two-person room on base keeps a reasonable expectation of privacy in the files on a personally owned computer, United States v. Conklin, 63 M.J. 333 (C.A.A.F. 2006), and personal e-mail carried on a commercial service enjoys protection comparable to letters and phone calls. United States v. Maxwell, 45 M.J. 406 (C.A.A.F. 1996). The layers of process differ by data type: content of communications from a provider requires a warrant issued by a military judge under the Stored Communications Act and R.C.M. 703A, transactional records take a court order on a relevance-and-materiality showing, and basic subscriber information carries no reasonable expectation of privacy at all. United States v. Ohnesorge, 60 M.J. 946 (N-M. Ct. Crim. App. 2005).
| What the government wants | What it needs |
|---|---|
| Contents of your phone or computer (extraction, forensic exam) | Search authorization or warrant on probable cause, with particularity — or your voluntary consent |
| Stored messages and account content from a provider | Warrant from a military judge (or civilian judge) under the SCA and R.C.M. 703A |
| Historical cell-site location information | Warrant supported by probable cause. Carpenter |
| Transactional records (logs, non-content data) | Court order — specific and articulable facts showing relevance and materiality. R.C.M. 703A(c)(1)(A) |
| Basic subscriber information | No warrant — no reasonable expectation of privacy. Ohnesorge; United States v. Allen, 53 M.J. 402 (C.A.A.F. 2000) |
“CID took my phone”: seizure, extraction, and retention
Seizing the device and searching its contents are two different Fourth Amendment events. Agents may seize a phone on probable cause to believe it contains evidence, M.R.E. 316, and may secure it while they seek authorization — but the seizure itself must be lawful, and what counts as a seizure is contested ground. Moving a Soldier’s electronic media to the center of his barracks room did not meaningfully interfere with his property interest, so when he withdrew consent before agents took the media, the subsequent seizure violated the Fourth Amendment. United States v. Hoffmann, 75 M.J. 120 (C.A.A.F. 2016).
Retention has limits too. Seizures must be reasonable in duration, and a demand for the property’s return weighs in whether continued retention is reasonable. United States v. Harborth, 2025 CAAF LEXIS 436 (C.A.A.F. 2025). The extraction that follows — typically a Cellebrite-style image of the device examined at a forensic lab — is the search, and it must be authorized, within scope, and timely. A forensic search conducted nine months after the warrant issued, and five months after the accused had already been convicted of the offenses named in it, was constitutionally unreasonable. United States v. Gurczynski, 76 M.J. 381 (C.A.A.F. 2017).
Practical point: agents rarely rely on one theory. The file will show a “consent” conversation, then an authorization, then perhaps a second authorization when the first examination found something new. Each handoff is a seam — and each seam is where suppression lives.
Digital warrants: probable cause, nexus, and particularity
Probable cause for a device search follows the ordinary totality-of-the-circumstances rules of the command-authorized search doctrine, with two digital-specific pressure points:
- Nexus between devices. There is no intuitive link between a phone and every other device you own. A CID agent’s training-and-experience assertion that Soldiers commonly transfer videos from phones to larger devices was not, by itself, probable cause to search the accused’s laptop. United States v. Nieto, 66 M.J. 101 (C.A.A.F. 2017). In child pornography cases, courts have found probable cause from website membership under the totality of circumstances, United States v. Clayton, 68 M.J. 419 (C.A.A.F. 2010), but attempted enticement alone did not establish probable cause to search a computer. United States v. Hoffman, 75 M.J. 120 (C.A.A.F. 2016).
- Particularity. The authorization must describe what examiners may look for specifically enough to prevent “a general exploratory rummaging,” measured by what could reasonably be described at that point in the investigation. United States v. Richards, 76 M.J. 365 (C.A.A.F. 2017). Examiners must tailor their methodology to the warrant’s terms; an examination that exceeds them is unlawful, and inevitable discovery did not save one that did. United States v. Osorio, 66 M.J. 632 (A.F. Ct. Crim. App. 2008).
Plain view inside a device is the recurring flashpoint: because examiners must open files to review them, courts worry that digital plain view converts every device warrant into a general warrant. The majority approach adapts plain view incrementally to electronic evidence, and the CAAF has held that a search method “is not unreasonable simply because it is not optimal”:
“[W]hen it comes to cell phones and computers, although one search method may be objectively ‘better’ than another, a search method is not unreasonable simply because it is not optimal.”United States v. Shields, 83 M.J. 226 (C.A.A.F. 2023)
But plain view has a hard limit: it does not apply at all when the underlying search is constitutionally unreasonable. United States v. Gurczynski, 76 M.J. 381 (C.A.A.F. 2017).
Consent, passcodes, and the right to say no
Most military phone searches begin with a form and a request: “You don’t mind if we take a look, right?” Consent eliminates the probable cause and authorization requirements, M.R.E. 314(e) — but the government must prove voluntariness by clear and convincing evidence, consent may be limited to certain places, property, and times, and it may be withdrawn. Third parties with joint access can consent to shared devices: a roommate who used and maintained the accused’s unprotected computer validly consented to its search. United States v. Rader, 65 M.J. 30 (C.A.A.F. 2007).
Passcodes sit at the junction of the Fourth Amendment and the privilege against self-incrimination, and the CAAF has drawn a fine line. After a suspect requests counsel, agents may still ask for the passcode of a phone seized pursuant to the suspect’s lawful consent, United States v. Robinson, 77 M.J. 303 (C.A.A.F. 2018) — but where the phone was seized under a search authorization rather than consent, a post-request passcode demand is off limits. United States v. Mitchell, 76 M.J. 413 (C.A.A.F. 2017). Whether the physical act of unlocking a phone is testimonial and incriminating remains unsettled. United States v. Nelson, 2022 WL 1230605 (C.A.A.F. 2022). The defense translation: say no clearly, say it early, and put nothing in writing without counsel.
What this means if you’re being asked for your phone right now
You may refuse consent, and you should — politely and unambiguously. If agents have probable cause they can seize the phone anyway, but making them use legal process preserves every suppression argument; signing the consent form forfeits most of them. Do not volunteer your passcode, do not “just unlock it real quick,” and if you have asked for a lawyer, say nothing more at all. Then write down exactly what was said and when, and call a defense lawyer the same day — the consent-versus-authorization distinction that controls your passcode rights turns on details that are freshest now.
Government computers, banners, and monitoring
The rules flip on government systems. Government property not issued for personal use carries a rebuttable presumption of no expectation of privacy, M.R.E. 314(d), and an accused who used the government computer provided for official duties failed to rebut it. United States v. Larson, 66 M.J. 212 (C.A.A.F. 2008). E-mail on a monitored government server hosting all “personal” mailboxes carried no reasonable expectation of privacy either. United States v. Monroe, 52 M.J. 326 (C.A.A.F. 2000).
The banner is not a blank check, though. Where the log-on notice described access to “monitor” the system and law enforcement instead ordered a content examination of particular e-mails unrelated to system maintenance, the CAAF found a reasonable expectation of privacy and suppressed. United States v. Long, 64 M.J. 57 (C.A.A.F. 2006). The workplace balance comes from O’Connor v. Ortega, 480 U.S. 709 (1987) — “operational realities” determine privacy, and work-related searches are judged on reasonableness — refined for electronic devices in City of Ontario v. Quon, 560 U.S. 746 (2010). Read your banner literally: what it authorizes, the government may do; what it does not, remains contestable.
Suppression angles in digital cases
Digital cases generate more suppression issues per prosecution than any other category. The checklist we run:
- The seizure — was there probable cause to take the device, was consent voluntary, was withdrawn consent honored (Hoffmann), and was retention reasonable in duration (Harborth)?
- The authorization — neutral issuing official, current probable cause, device-specific nexus (Nieto), and particularity (Richards)? See command-authorized searches.
- The examination — within scope (Osorio), reasonable in method (Shields), and reasonable in timing (Gurczynski)? Was a second authorization obtained when the search purpose changed?
- The provider records — warrant for content and CSLI (Carpenter), proper orders for transactional data?
- The statements — passcode demands and interview answers tested against Article 31 and the Mitchell/Robinson line.
- The fallback exceptions — good faith and inevitable discovery, which the government will invoke and which have real limits in scope-violation cases.
Each angle is raised by a particularized objection in a pre-plea motion to suppress under M.R.E. 311 — the procedure, burdens, and waiver traps are covered in the parent search and seizure guide. And when the extraction produces messages the government wants to read to the panel, the hearsay rules and Confrontation Clause open a second front.
Practitioner’s note
In our practice, the extraction report is where digital cases crack. We demand the forensic examiner’s notes, the search protocol, and the dates of every examination pass — then compare them to the authorization’s terms and timeline. It is remarkable how often the image was taken before the authorization was signed, the examiner browsed categories the warrant never mentioned, or a “second look” happened months later without new process. We also reconstruct the consent conversation minute by minute, because the difference between a phone handed over by consent and one seized under authorization controls the passcode rules — and, frequently, the whole case.
Frequently asked questions
Can CID take my phone without a warrant?
CID can seize your phone if agents have probable cause to believe it contains evidence, or if you consent — and they can hold it while seeking a search authorization. But seizing the phone is not the same as searching it: reading its contents generally requires an authorization or warrant based on probable cause, and unreasonable retention of the device can itself be challenged.
Do I have to give CID my phone passcode?
You cannot be forced to provide it, and after you ask for a lawyer the rules tighten: CAAF allows a passcode request when the phone was seized through your lawful consent, but not when it was seized under a search authorization. The safest course is to decline to provide the passcode and say nothing until you have counsel.
Can the government read my texts and social media messages?
Only with legal process. Content held by providers — messages, email, account data — requires a warrant from a military judge or civilian court under the Stored Communications Act and R.C.M. 703A, and historical cell-site location data requires a warrant under Carpenter. Basic subscriber information and some transactional records take less, because courts find little or no privacy interest in them.
Does the military own everything on my government computer?
Largely, yes. Government computers issued for official use carry a presumption of no privacy expectation, and monitored government email servers get little protection. The exception is when the log-on banner promises only system monitoring and law enforcement instead conducts a targeted content search — CAAF has suppressed evidence in exactly that situation.
If I consented to a phone search, can I change my mind?
Yes. Consent can be limited to certain places, property, and times, and it can be withdrawn before or during the search. CAAF has suppressed evidence where agents continued after an accused withdrew consent before his property was meaningfully seized. Withdrawal does not undo what agents already lawfully found, which is why limiting or refusing consent at the outset matters.
What are my rights if a search of my phone went beyond what was authorized?
Forensic examiners must stay within the authorization's scope, use a reasonable method, and act within a reasonable time. Evidence from an examination that exceeded the warrant's terms, or that occurred long after the authorization without new process, can be suppressed under M.R.E. 311 — but only if your lawyer raises a particularized objection before you enter a plea.
About the attorneys behind this guide
Michael Waddington, Civilian Military Defense Lawyer
Michael Waddington has defended digital-evidence courts-martial for more than 25 years — online sting operations, Article 120 cases built on text threads, and child exploitation prosecutions resting on forensic extractions. A former Army prosecutor and defense counsel and a nationally known cross-examination instructor, he wrote this guide around the questions he puts to CID agents and forensic examiners on the stand: when the image was taken, what the warrant actually said, and who typed the passcode.
Alexandra González-Waddington, Founding Partner
Alexandra González-Waddington, founding partner of Gonzalez & Waddington, has spent more than 20 years defending service members whose phones and computers became the government’s case — in sexual assault, domestic violence, white-collar, and classified-information prosecutions worldwide. Her review of this guide concentrated on the consent and passcode traps: the recorded “friendly” conversations, the forms signed without counsel, and the withdrawal rights most clients never learn until it is too late.
Talk to a civilian court-martial defense lawyer today
Gonzalez & Waddington defends Soldiers, Sailors, Airmen, Marines, Guardians, and Coast Guardsmen worldwide — in UCMJ investigations, courts-martial, Article 15/NJP actions, GOMOR rebuttals, administrative separation boards, and Boards of Inquiry. We defend the whole case: the investigation, the trial, the administrative fallout, and the long-term consequences to your rank, retirement, clearance, and discharge.
Sources for this guide include the Uniform Code of Military Justice, the Manual for Courts-Martial (2024 ed.), the Rules for Courts-Martial, the TJAGLCS Criminal Law Deskbook, and the cited decisions of the Court of Appeals for the Armed Forces and the service Courts of Criminal Appeals. It is attorney advertising and general legal information — not legal advice, and reading it does not create an attorney–client relationship. Every case turns on its own facts. Service procedures vary; Army references (AR 27-10) are noted where used.