Your Fifth Amendment Right to Refuse to Provide Your iPhone Passcode in Massachusetts: What the Law Says

By Attorney Joe Serpa | Georgetown University Law Center | 30 Years Massachusetts Criminal Defense

June 2026

When Massachusetts law enforcement seizes a digital device and demands the passcode, many people comply out of panic, a desire to appear cooperative, or a mistaken belief that refusing will make them look guilty. That choice has real constitutional consequences. Under the Fifth Amendment to the United States Constitution and Article 12 of the Massachusetts Declaration of Rights, a police officer cannot force you to disclose a passcode on the street or in the booking room. Only a judge can order compelled decryption, and only after the Commonwealth makes a demanding evidentiary showing. Surrendering a passcode voluntarily is treated as a testimonial act, and the protection you give up cannot be recovered once the device has been searched. For related rights, see our pages on the Right to Remain Silent in Massachusettsand Illegal Searches and Seizures.

The Testimonial Act Doctrine

The Fifth Amendment privilege against self-incrimination protects a person from being compelled to make testimonial communications that are incriminating. The critical legal question in the passcode context is whether providing or entering a passcode constitutes a “testimonial” act.

The United States Supreme Court established in Fisher v. United States, 425 U.S. 391 (1976), that the act of producing evidence can itself be testimonial if it implicitly communicates a factual assertion. Production concedes that the item exists, that the person producing it possesses or controls it, and that it is authentic. The Court reinforced that principle in United States v. Hubbell, 530 U.S. 27 (2000), which rejected a compelled production of documents because the government could not show it already knew the documents existed or where they were. Disclosing a passcode confirms that the defendant knows the code and can open everything stored behind the lock screen.

Massachusetts has answered the core question directly. In Commonwealth v. Gelfgatt, 468 Mass. 512 (2014), the Supreme Judicial Court held that entering an encryption key into a seized computer is not a mere physical act like giving a blood sample or a handwriting exemplar. It is a communication of the defendant’s knowledge, and it is therefore testimonial in nature. That holding is protective, but it comes with a built-in limit. The Gelfgattcourt went on to hold that the compelled act loses its constitutional protection when the facts it conveys are already known to the government, and on the record before it the court allowed the compelled decryption under both the Fifth Amendment and Article 12.

The “Foregone Conclusion” Exception and Its Limits

The primary exception to Fifth Amendment protection in the digital context is the “foregone conclusion” doctrine, which traces back to Fisher. If the testimonial component of an act of production “adds little or nothing to the sum total of the Government’s information,” the act does not receive Fifth Amendment protection. The production is then treated as surrender rather than testimony.

In Gelfgattthe exception applied because the defendant had already told investigators in a postarrest interview that the seized computers were his, that their contents were encrypted, and that he was able to decrypt them. His compelled entry of the key told the Commonwealth nothing new. The decision left open how certain the government must be before a court may find the facts a “foregone conclusion.”

The SJC answered that question in Commonwealth v. Jones, 481 Mass. 540 (2019). When the Commonwealth seeks an order compelling a defendant to decrypt a device by entering a passcode, now commonly called a Gelfgatt order, Article 12 requires the Commonwealth to prove beyond a reasonable doubt that the defendant knows the passcode. That is the highest standard of proof our courts apply to any factual question. The court expressly rejected the Commonwealth’s argument that clear and convincing evidence should suffice, and it declined to speculate about the lower federal standard because Article 12 independently demands more.

Two practical points follow from Jones. First, the fact the Commonwealth must prove is the defendant’s knowledge of the passcode, not ownership or exclusive control of the device. In Jonesitself, the defendant’s possession of the phone at arrest, his prior statement to police that its number was his own, subscriber and cell site records, and a witness who reached him at that number together satisfied the burden even though others may also have used the phone. Second, the Commonwealth does not have to prove that it knows what specific files sit on the device before compelling passcode entry, a limit Justice Lenk criticized in a separate concurrence because the government’s real target is always the contents. Defense counsel should hold the Commonwealth to that showing at every stage. Unlocking is also only the beginning. The search that follows must still comply with the warrant requirements we explain in our guide to digital search warrants for phones and computers in Massachusetts.

Biometrics: Fingerprints, Face ID, and the Fifth Amendment

The Fifth Amendment analysis for biometric unlocking, meaning Touch ID, Face ID, and fingerprint scanners, is distinct from the passcode analysis, and the case law is unsettled.

Federal appellate courts are split. The Ninth Circuit held in United States v. Payne, 99 F.4th 495 (9th Cir. 2024), that compelling a parolee to unlock a phone with his thumbprint was not testimonial because the act required no disclosure of the contents of his mind. The District of Columbia Circuit reached the opposite conclusion in United States v. Brown, 125 F.4th 1186 (D.C. Cir. 2025), holding that compelling a defendant to unlock a cellphone with his fingerprint violated the Fifth Amendment on the facts before it. One line of authority treats the biometric act like a physical exemplar, while the other recognizes that it implicitly concedes control of the device and the ability to open it.

The Supreme Judicial Court has not decided whether the Fifth Amendment or Article 12 permits compelled biometric unlocking, so the question remains open in Massachusetts. Given the SJC’s history of reading Article 12 broadly, the defense argument for protection is substantial but untested. A defendant whose device opens only with a memorized code stands on the strongest available constitutional footing, while a defendant who relies on Face ID or a fingerprint may have less protection depending on which line of authority a Massachusetts court finds persuasive. Defense attorneys should monitor SJC rulings in this area closely.

What Happens if You Refuse

Refusing to provide a passcode to law enforcement does not, by itself, constitute a crime. A refusal to comply with a police request, as opposed to a court order, carries no criminal penalty. For more on your right to refuse cooperation with law enforcement, see our page on the Right to Remain Silent in Massachusetts. If the demand comes during or after an arrest, our guide on what to do if you are arrested in Massachusettswalks through the other decisions you will face in those first hours.

A court order is different. If a judge issues a Gelfgattorder compelling decryption and the defendant refuses to comply, the defendant may be held in civil contempt and can be confined until compliance. The proper response is litigation, not defiance. Whether the order is constitutional, and whether the Commonwealth proved the defendant’s knowledge of the passcode beyond a reasonable doubt as Jonesrequires, must be challenged through motion practice before compliance. Our overview of the Massachusetts criminal processexplains where these motions fit in the life of a case.

What is critical to understand is that a voluntary, unprompted disclosure of a passcode to a police officer, made without a court order, without counsel present, and without invoking the privilege, gives up the protection entirely. Once the passcode is given and the device is searched, no motion restores the privilege that was waived, and any remaining challenge must rest on other grounds such as defects in the seizure or the warrant.

The Massachusetts Declaration of Rights: Broader Protections

Article 12 of the Massachusetts Declaration of Rights provides that no subject shall be “compelled to accuse, or furnish evidence against himself.” The SJC has long recognized that this “furnish evidence” language sweeps more broadly than the Fifth Amendment’s “witness against himself” phrasing, and the court has held in numerous contexts that Article 12 provides greater protection than the federal floor. Jonesis the concrete proof in the digital context. The court grounded its beyond a reasonable doubt requirement in Article 12 and made clear that the standard applies whatever the Fifth Amendment standard may turn out to be.

Defense attorneys litigating passcode compulsion issues in Massachusetts should therefore assert Article 12 independently of the Fifth Amendment and brief the SJC’s broader testimonial doctrine as an alternative ground for suppression. The larger trend in digital privacy law points the same way. On June 29, 2026, the United States Supreme Court held in Chatrie v. United Statesthat geofence warrants are Fourth Amendment searches, a decision we analyze in our post on the Chatriegeofence ruling and its Massachusetts impact.

Practical Guidance: What to Do if Police Demand Your Passcode

Do not provide a passcode to a police officer without first consulting a defense attorney. A police request is not a court order. You have the right to decline, invoke your right to remain silent, and require law enforcement to seek judicial authorization before accessing your device.

Do not provide a passcode in exchange for a promise of leniency or a representation that it will “help your case.” These representations are not binding and do not create any legal obligation on the government.

Do not attempt to remotely wipe or delete data from a device that is in law enforcement custody or subject to a preservation order. Destroying or concealing that evidence can be prosecuted as tampering with evidence under M.G.L. c. 268, § 13E, a crime that carries up to ten years in state prison regardless of what the device contained. That offense sits in the same chapter of crimes against public justice as the Intimidation of a Witness statute.

If you have already provided a passcode, contact a defense attorney immediately to assess what was extracted, whether any of the resulting evidence is suppressible on other grounds, and what remedial steps are available. For a confidential case review, contact me at 617.936.0201.

Key Takeaways

• Entering or disclosing a passcode is a testimonial act under the Fifth Amendment and Article 12, and police cannot compel it without a court order. The SJC so held in Commonwealth v. Gelfgatt, 468 Mass. 512 (2014). See our page on the Right to Remain Silent in Massachusetts.
• The “foregone conclusion” exception allows a judge to compel passcode entry, but under Commonwealth v. Jones, 481 Mass. 540 (2019), Article 12 requires the Commonwealth to prove beyond a reasonable doubt that the defendant knows the passcode before such an order may issue.
• Biometric unlocking (Touch ID, Face ID) is analyzed differently, and federal courts are split. The Ninth Circuit found a compelled thumbprint unlock not testimonial in Payne (2024), while the D.C. Circuit found a compelled fingerprint unlock violated the Fifth Amendment in Brown (2025). The SJC has not yet decided the question.
• Refusing to provide a passcode to a police officer, as opposed to disobeying a court order, carries no criminal penalty. Refusing a court order can result in civil contempt, so the order must be challenged through counsel rather than ignored.
• A voluntary disclosure of a passcode to a police officer gives up the constitutional protection, and no motion can restore it after the search. Remaining challenges must rest on other grounds. See our overview of Illegal Searches and Seizures in Massachusetts.
• Article 12 should be asserted independently of the Fifth Amendment in passcode litigation. The SJC has a documented history of interpreting Article 12 more broadly than the federal floor, and Jones applied that broader protection to compelled decryption.
• Do not attempt to remotely wipe a seized device. Doing so can be prosecuted as tampering with evidence under M.G.L. c. 268, § 13E regardless of the device’s contents. See our related page on Intimidation of a Witness in Massachusetts.

I have defended Massachusetts clients in cases built on digital evidence for three decades. Contact me at 617.936.0201 for a confidential consultation.

Related Serpa Law Office Resources

• Phone, Computer, and Digital Device Searches in Massachusetts
• Massachusetts Phone and Computer Search FAQs
• The Modern Massachusetts Traffic Stop (Phones, GPS, and License Plate Readers)
• The Fifth Amendment in Civil Cases (When Silence Protects You and When It Costs You)
• Pleading the Fifth Outside the Criminal Courtroom