OSI Asked for My Phone Password. Do I Have to Provide It?

OSI asked for my phone password. Do I have to give it? No. You do not have to tell OSI, CID, NCIS, or your commander your passcode, and you shouldn’t. I’m Michael Waddington, civilian military defense lawyer and co-founder of Gonzalez & Waddington. Phone evidence decides more military cases now than witnesses do. And the passcode question is where a lot of service members give the case away. Here’s the law and here’s what to do.

Start with the principle. Your passcode is something you know. Telling it to an investigator is a statement, and the military courts have treated a compelled passcode as testimonial. That means Article 31 of the UCMJ protects it. When an agent says, “We just need your code to verify a couple of things.” That’s a request for a statement from a suspect, and you can refuse. Now, three situations you need to understand. Situation one, they ask for the code with no paperwork.

This is a consent request. Say, “I do not consent to a search of my phone, and I’m not providing my passcode.” If you type the code in for them, you’ve consented, and under Military Rule of Evidence 314, that search is lawful forever. Your lawyer can’t undo it. Situation two, they have a search authorization from a commander or a military judge. Under Military Rule of Evidence 315, that lets them seize the phone and search it.

It does not, by itself, let them compel you to unlock it. They may try to break into it with forensic tools. That takes time and doesn’t always work. Your passcode still stays in your head. Situation three, biometrics. This is the gray area. Some courts treat a fingerprint or face unlock as non-testimonial, like a fingerprint card, meaning it can be compelled with an authorization. Others disagree. The practical advice is simple.

If you’re under investigation, turn off Face ID and Touch ID today, and use a long passcode. A six-digit code is cracked in hours. A strong alphanumeric passcode may never be. What not to do. Don’t wipe the phone. Don’t factory reset it. Don’t delete threads. Don’t lose it. That’s obstruction of justice under Article 131b. It’s usually detectable and it turns a defensible case into a conviction. A locked phone is your right.

A destroyed phone is a crime. What to do instead. First, refuse consent out loud. Second, don’t unlock it just to show them one thing. Third, if they seize it, ask for a receipt on the property form. Fourth, call a military defense lawyer before you go home because the phone often isn’t the only device they’ll want. At Gonzalez & Waddington, we’ve won cases because the phone stayed locked and the government’s forensic extraction came back empty or too late.

We’ve lost cases that were winnable because the client typed in six digits to seem cooperative. So, OSI asked for your phone password. Do you have to give it? No. Refuse consent, keep it locked, don’t destroy anything, and call us. I’m Michael Waddington with Gonzalez & Waddington. We defend service members worldwide. You can learn more at ucmjdefense.com or call 1-800-921-8607 for a free confidential consultation.