Your Fifth Amendment Right to Refuse to Provide Your iPhone Passcode in Massachusetts: What the Law Actually Says

By Attorney Joseph Serpa | Georgetown University Law Center | 30 Years Massachusetts Criminal Defense

June 2026

When Massachusetts law enforcement seizes a digital device and demands the passcode, many defendants comply — out of panic, a desire to appear cooperative, or a mistaken belief that refusing will make them appear guilty. Under both the Fifth Amendment to the United States Constitution and Article 12 of the Massachusetts Declaration of Rights, a defendant generally cannot be compelled to provide a passcode to a locked digital device. Surrendering a passcode voluntarily is treated as a testimonial act — one that waives a constitutional protection that cannot be recovered once it is given up. For related rights, see our pages on the Right to Remain Silent in Massachusetts and Illegal Searches and Seizures.

The Testimonial Act Doctrine

The Fifth Amendment privilege against self-incrimination protects a person from being compelled to make testimonial communications that are incriminating. The critical legal question in the passcode context is whether providing a passcode constitutes a “testimonial” act.

The United States Supreme Court established in Fisher v. United States (425 U.S. 391, 1976) that the act of producing evidence can itself be testimonial if it implicitly communicates a factual assertion — specifically, that the produced item exists, is in the defendant’s possession, and is authentic. Providing a passcode communicates all three of those things with respect to the contents of the locked device: it confirms the device exists, that the defendant has access to it, and that the contents are the defendant’s own.

The SJC has not yet issued a definitive ruling on all aspects of the passcode question under Article 12, but the developing body of case law in Massachusetts — and the consistent weight of federal circuit court authority — treats compelled passcode disclosure as testimonial and therefore protected by the Fifth Amendment privilege.

The “Foregone Conclusion” Exception and Its Limits

The primary exception to Fifth Amendment protection in the digital context is the “foregone conclusion” doctrine. Under this doctrine, the government can compel production of evidence — including, potentially, a passcode — if it can demonstrate with reasonable particularity that it already knows the evidence exists, knows the defendant possesses it, and knows it is authentic. In other words, if the testimonial component of the act of production adds nothing to what the government already knows, the Fifth Amendment protection does not attach.

In the passcode context, Massachusetts prosecutors have attempted to invoke the foregone conclusion exception by arguing that the government already knows the device belongs to the defendant and already knows it contains relevant evidence — and therefore compelling the passcode adds no new testimonial information.

Massachusetts defense attorneys have successfully contested this argument on the grounds that knowledge of the device’s existence is not equivalent to knowledge of its specific contents. What is on the device — the specific files, communications, photographs, and records — is not a foregone conclusion simply because the device is the defendant’s. The government must demonstrate that it knows with reasonable particularity what specific evidence it expects to find, not merely that evidence of something probably exists somewhere on the device.

Biometrics: Fingerprints, Face ID, and the Fifth Amendment

The Fifth Amendment analysis for biometric unlocking — Touch ID, Face ID, fingerprint scanners — is distinct from the passcode analysis and is currently less protective under prevailing case law.

Courts have generally held that compelling a defendant to use a fingerprint or facial scan to unlock a device is not testimonial because it does not require the defendant to disclose the contents of their mind. The act of placing a finger on a sensor or looking at a camera is treated more like a physical act — similar to providing a DNA sample or handwriting exemplar — than a testimonial communication.

This distinction has significant practical implications. A defendant who uses a biometric lock rather than a numeric or alphanumeric passcode may have less constitutional protection against compelled device unlocking than a defendant whose device requires a memorized code. The legal landscape on this question continues to develop, and Massachusetts defense attorneys should monitor SJC rulings in this area closely.

What Happens if You Refuse

Refusing to provide a passcode to law enforcement does not, by itself, constitute obstruction of justice or contempt of court. A refusal to comply with a police request — as opposed to a court order — carries no criminal penalty. For more on your right to refuse cooperation with law enforcement, see our page on the Right to Remain Silent in Massachusetts.

If a court issues an order compelling passcode disclosure and a defendant refuses to comply, the defendant may be held in civil contempt — meaning they can be confined until they comply. Whether such a court order is itself constitutional under the Fifth Amendment is a question that must be litigated through a motion challenging the order before compliance is required.

What is critical to understand is that a voluntary, unprompted disclosure of a passcode to a police officer — without a court order, without counsel present, and without invoking the privilege — is an irreversible waiver. Once the passcode is given and the device is searched, there is no motion that restores the constitutional protection that was waived.

The Massachusetts Declaration of Rights: Broader Protections

Article 12 of the Massachusetts Declaration of Rights provides: “No subject shall be… compelled to accuse or furnish evidence against himself.” The SJC has in numerous contexts interpreted Article 12 to provide broader protection than the Fifth Amendment — and there is a strong argument that the Massachusetts standard for what constitutes a “testimonial” act in the digital context should be more protective than the federal floor.

Defense attorneys litigating passcode compulsion issues in Massachusetts should assert Article 12 independently of the Fifth Amendment and brief the SJC’s broader testimonial doctrine as an alternative ground for suppression.

Practical Guidance: What to Do if Police Demand Your Passcode

Do not provide a passcode to a police officer without first consulting a defense attorney. A police request is not a court order. You have the right to decline, invoke your right to remain silent, and require law enforcement to seek judicial authorization before accessing your device.

Do not provide a passcode in exchange for a promise of leniency or a representation that it will “help your case.” These representations are not binding and do not create any legal obligation on the government.

Do not attempt to remotely wipe or delete data from a device that is in law enforcement custody or subject to a preservation order. Remote wiping after seizure can be prosecuted as Obstruction of Justice under M.G.L. c. 268 — the same statute that governs Intimidation of a Witness charges in Massachusetts — regardless of what the device contained.

If you have already provided a passcode, contact a defense attorney immediately to assess what was extracted, whether any of the resulting evidence is suppressible on other grounds, and what remedial steps are available. For a confidential case review, contact Serpa Law Office at 617.936.0201.

Key Takeaways

• Providing a passcode to a locked digital device is a testimonial act protected by the Fifth Amendment and Article 12 of the Massachusetts Declaration of Rights — law enforcement generally cannot compel passcode disclosure without a court order. See: Right to Remain Silent in Massachusetts.
• The “foregone conclusion” exception allows compelled production only when the government can demonstrate with reasonable particularity that it already knows the specific evidence exists on the device — knowledge that the device belongs to the defendant is not sufficient.
• Biometric unlocking (Touch ID, Face ID) is treated differently from passcode disclosure under prevailing case law — courts have generally held that compelling a fingerprint or facial scan is a physical act, not a testimonial communication, and may not be protected by the Fifth Amendment.
• Refusing to provide a passcode to a police officer — as opposed to a court order — carries no criminal penalty and does not constitute obstruction of justice.
• A voluntary disclosure of a passcode to a police officer is an irreversible waiver of Fifth Amendment protection — once given, no motion can restore the protection. See our overview of Illegal Searches and Seizures in Massachusetts.
• Article 12 of the Massachusetts Declaration of Rights should be asserted independently of the Fifth Amendment in passcode compulsion litigation — the SJC has a documented history of interpreting Article 12 more broadly than the federal floor.
• Do not attempt to remotely wipe a seized device — doing so can be prosecuted as Obstruction of Justice under M.G.L. c. 268 regardless of the device’s contents. See: Intimidation of a Witness in Massachusetts.