⚖️ Biometrics can be compelled by law enforcement in many jurisdictions
-Passwords generally have stronger legal protection under the 5th Amendment in the US. When it matters, forcing password-only authentication adds a critical layer of legal defense.
+ +US courts are split on whether law enforcement can compel you to unlock a device using biometrics. Passwords and passcodes are generally treated as testimonial under the Fifth Amendment, they reveal the contents of your mind and are therefore protected. Biometrics, by contrast, have often been treated as physical evidence, more like fingerprints or DNA.
+That distinction is now breaking down.
+In United States v. Payne, the Ninth Circuit held that compelling a suspect to unlock a phone using a fingerprint did not violate the Fifth Amendment.
+Police physically grabbed Payne's thumb and used it to unlock his phone after he refused to provide the passcode. The court concluded this did not implicate the Fifth Amendment because the act required no cognitive exertion and did not reveal the contents of Payne's mind.
+The court analogized the compelled fingerprint unlock to traditional forms of physical evidence collection, such as fingerprints taken during booking or a blood draw.
+Holding: No Fifth Amendment violation.
+Source:
+The D.C. Circuit reached the opposite conclusion in United States v. Brown.
+In that case, the FBI compelled the defendant to unlock his phone using a fingerprint. The court held that this did violate the Fifth Amendment, reasoning that the act of unlocking the phone communicated protected facts — including that the defendant knew how to open the device and exercised control over its contents.
+Rather than treating biometric unlocking as purely physical, the court emphasized the implicit testimonial communication involved in successfully unlocking a personal device.
+Holding: Compelled biometric unlocking was testimonial and unconstitutional.
+Sources:
+These decisions create a direct circuit split:
+That split makes eventual Supreme Court review likely. Until then, your constitutional protection depends on where you are.
+On January 14, 2026, FBI agents executed a search warrant at the home of Washington Post reporter Hannah Natanson, seizing her phone, two laptops, and a Garmin watch.
+The warrant reportedly included a section explicitly titled "Biometric Unlock", authorizing agents to attempt to unlock seized devices using Natanson's face or fingerprints rather than demanding a passcode.
+Natanson had communicated with more than 1,100 confidential sources using Signal and other encrypted tools. The warrant created a legal pathway to access those communications without compelling her to disclose a password.
+Security and press-freedom experts warned that biometric unlock provisions collapse the practical barrier between possession of a seized device and access to its encrypted contents.
+Sources:
+At US ports of entry, Customs and Border Protection (CBP) can search electronic devices without a warrant. The more complex question is what they can compel.
+If your device is protected by a password, you may refuse to provide it. CBP can seize the device, but the encryption barrier remains legally and technically intact.
+If biometrics are enabled, that barrier may not exist. Agents can potentially unlock your device using your face or fingerprint — sometimes without your cooperation, and in some jurisdictions without violating the Fifth Amendment.
+For people carrying privileged or sensitive material, journalists protecting sources, lawyers with client communications, activists with vulnerable contacts, disabling biometrics before reaching the border restores the legal distinction between possessing a device and accessing its contents.
+Sources:
+In some countries, the biometrics-versus-password distinction is legally irrelevant: the law may criminally compel password disclosure.
+Even then, the difference matters.
+With passwords, you retain agency, you may refuse and face legal consequences. With biometrics enabled, that choice may be taken from you entirely.
Protecting sensitive client or company data across borders
+Safeguarding sources and confidential information
+Maintaining attorney-client privilege
+Securing devices in hostile environments
+When you need instant password-only security:
-Protecting sensitive client or company data across borders
-Safeguarding sources and confidential information
-Maintaining attorney-client privilege
-Securing devices in hostile environments
-Get the panic button your Mac deserves.