Your Fifth Amendment Right to Refuse to Provide Your iPhone Passcode in Massachusetts: What the Law Says

Massachusetts police who seize a digital device may ask for the passcode. Many people comply out of panic, a wish to appear cooperative, or a belief that refusing will look like guilt. The decision to give a passcode has legal consequences. The law governing that decision is precise.

Three situations are frequently confused with one another. Different rules govern each situation. In the first situation, a person declines to give a passcode to an officer. In the second situation, a person refuses consent to a search. In the third situation, a person disobeys a court order compelling entry of a passcode. This post addresses each situation separately.

Three Situations, Three Different Rules

An officer asks for the passcode. A police request is not a court order. A person has no obligation to answer the request. No Massachusetts statute makes the refusal a crime. Article 12 provides a further protection to a person who refuses a police request.

Evidence of a defendant’s outright refusal to comply with a police request generally may not be admitted as consciousness of guilt, because “in so refusing a defendant furnishes evidence against himself.” Commonwealth v. Conkey, 430 Mass. 139, 142 to 143 (1999). Accord Commonwealth v. Hinckley, 422 Mass. 261, 264 (1996). The Commonwealth is not supposed to use the refusal against the person who made it.

An officer asks to search the device. A request to search the device raises a consent question under the Fourth Amendment and art. 14, not a self-incrimination question. Consent must be voluntary. The Commonwealth bears the burden of proving that the consent was voluntary. A person may decline to consent.

A judge orders decryption. The sections below explain the constitutional rules that govern a decryption order. A person who refuses a court order to enter a passcode can be held in contempt.

The Testimonial Act Doctrine

The Fifth Amendment privilege protects a person from being compelled to make testimonial communications that are incriminating. The privilege applies only to a communication that is testimonial, incriminating, and compelled.

The United States Supreme Court established in Fisher v. United States, 425 U.S. 391 (1976), that the act of producing evidence can itself be testimonial. The act of production can be testimonial because the person who produces an item concedes the existence of the item, the person’s possession or control of the item, and the authenticity of the item.

The act of production is not protected where “[t]he existence and location of the papers are a foregone conclusion and the taxpayer adds little or nothing to the sum total of the Government’s information by conceding that he in fact has the papers,” the Court held. 425 U.S. at 411.

The Court applied the same framework in United States v. Hubbell, 530 U.S. 27 (2000). In that case, the Court rejected a compelled production where the government “ha[d] not shown that it had any prior knowledge of either the existence or the whereabouts” of the documents. 530 U.S. at 45.

In Commonwealth v. Gelfgatt, 468 Mass. 512 (2014), the Supreme Judicial Court observed that entering an encryption key “would appear, at first blush, to be a testimonial communication that triggers Fifth Amendment protection,” and that the act “would be a communication of his knowledge about particular facts.” The Supreme Judicial Court then held that, on the record before the court, the facts conveyed by the act of decryption were foregone conclusions. The court therefore held that “the act of decryption is not a testimonial communication that is protected by the Fifth Amendment.”

Gelfgatt is the decision that permits compelled decryption in Massachusetts. An order compelling a defendant to unlock a device is called a Gelfgatt order for that reason.

Under Gelfgatt, the foregone conclusion exception applies only if the government already knows “(1) the existence of the evidence demanded; (2) the possession or control of that evidence by the defendant; and (3) the authenticity of the evidence.” 468 Mass. at 524.

The Foregone Conclusion Standard After Jones

In Gelfgatt the exception applied because the defendant had already told investigators that the seized computers were his, that their contents were encrypted, and that he was able to decrypt them. The defendant’s compelled entry of the key gave the Commonwealth no new information. The Supreme Judicial Court did not decide in that case how certain the government must be of those facts.

The Supreme Judicial Court answered that question in Commonwealth v. Jones, 481 Mass. 540 (2019). The court held that, when the Commonwealth seeks a Gelfgatt order, “art. 12 requires that, for the foregone conclusion to apply, the Commonwealth must prove beyond a reasonable doubt that the defendant knows the password.” Proof beyond a reasonable doubt is the highest standard of proof that Massachusetts courts apply to a factual question.

The Court rejected the Commonwealth’s argument that clear and convincing evidence should suffice and declined to speculate about the federal standard. The Court explained that “[w]hatever the standard under the Fifth Amendment may be, requiring the Commonwealth to bear this high burden is necessary to ensure that the art. 12 rights of defendants are adequately protected.”

Three points from Jones affect the defense against a compelled decryption order. Defendants routinely give up the benefit of one of those points by talking to the police about the phone or its passcode.

The Commonwealth must prove that the defendant knows the passcode. The Commonwealth does not have to prove that the defendant owns the phone.

“[T]he Commonwealth is only required to establish the defendant’s knowledge of the password beyond a reasonable doubt, not his ownership or exclusive control of the LG phone . . . exclusive control of the phone is not required.” The evidence of knowledge in Jones was the defendant’s possession of the phone at arrest, his statement that the phone number was his, subscriber and cell site records, and a witness who contacted him at that phone number. The Supreme Judicial Court held that this evidence together satisfied the burden even though others may also have used the device.

The order requires the defendant to enter the passcode. The order does not require the defendant to tell the passcode to the police. Summaries of the case omit the limitation to physical entry more often than any other point. That limitation favors the defense.

The Court wrote, “We need not, and do not, resolve this distinction here, and our decision is therefore limited to only the physical entry of the password by the defendant, as we required in Gelfgatt. The defendant may therefore only be compelled to enter the password to the LG phone, not disclose it.” The question whether the foregone conclusion doctrine would permit compelled oral or written disclosure of a passcode remains open.

The Commonwealth may continue to seek a decryption order after a judge denies the first motion. Jones also holds that “a judge acting on a renewed Gelfgatt motion may consider additional information without first finding that it was not known or not reasonably available at the time of the first filing.” Counsel should expect a second application supported by new material.

Justice Lenk wrote separately and would also require the government to demonstrate, beyond a reasonable doubt, “that the government already knows, with reasonable particularity, the existence and location of relevant, incriminating evidence it expects to find on that device.” Justice Lenk’s separate opinion is a concurrence rather than the holding of the court. The Court’s standard is knowledge of the passcode.

The police search of the device after the unlocking must also comply with the warrant requirements set out in the guide to digital search warrants for phones and computers.

Biometric Unlocking

The analysis for biometric unlocking, meaning Touch ID, Face ID, and fingerprint scanners, is distinct from the passcode analysis. The law on biometric unlocking is unsettled.

Neither the Supreme Judicial Court nor the Appeals Court has addressed whether the Fifth Amendment or art. 12 permits compelled biometric unlocking. Every reported decision on the question is federal. No federal decision binds a Massachusetts state court on this issue.

The federal courts have decided the question differently on materially different facts. United States v. Payne, 99 F.4th 495 (9th Cir. 2024), involved a parolee who was subject to a suspicionless general search condition. The Ninth Circuit held that “the compelled use of a biometric to unlock an electronic device was not testimonial because it required no cognitive exertion,” where an officer physically applied the parolee’s thumb to the device.

The panel added a limit that summaries of the case regularly omit, stating that “[o]ur opinion should not be read to extend to all instances where a biometric is used to unlock an electronic device. Indeed, the outcome on the testimonial prong may have been different had Officer Coddington required Payne to independently select the finger that he placed on the phone.”

In United States v. Brown, 125 F.4th 1186 (D.C. Cir. 2025), the District of Columbia Circuit held that the compelled opening of a cellphone was testimonial where an agent ordered a co-defendant to open the phone himself and he complied. The federal courts genuinely disagree, but most of the conflicting decisions are from federal district courts. The facts of the cases also differ in a way that may explain the different outcomes.

A Massachusetts defendant should not assume that a Massachusetts court will decide the question of compelled biometric unlocking for the defendant on the ground that art. 12 is broader than the Fifth Amendment. Article 12 protects a person from being compelled to “furnish evidence” against himself. By contrast, the Fifth Amendment protects a person from being compelled to be “a witness against” himself.

The Supreme Judicial Court has “consistently held that art. 12 requires a broader interpretation” than the Fifth Amendment. Jones, quoting Opinion of the Justices, 412 Mass. 1201, 1210 (1992), and Attorney Gen. v. Colleton, 387 Mass. 790, 796 (1982).

In Gelfgatt, the Supreme Judicial Court also limited that broader protection. The court wrote that although art. 12 demands more expansive protection, “it does not change the classification of evidence to which the privilege applies. Only that genre of evidence having a testimonial or communicative nature is protected under the privilege against self-incrimination,” quoting Commonwealth v. Burgess, 426 Mass. 206, 211 (1997).

In other settings, the Supreme Judicial Court has treated fingerprints as real or physical evidence outside the protection of art. 12. “If evidence sought is real or physical evidence, such as hair and blood samples, voice exemplars, fingerprints, lineups, sobriety tests, or breathalyzer tests, art. 12 does not protect a person from having to provide such evidence.” Conkey, 430 Mass. at 142. Accord Commonwealth v. Lydon, 413 Mass. 309, 313 to 314 (1992).

The privilege against self-incrimination protects a memorized passcode, because entering the passcode communicates what the owner knows. The privilege may not protect a phone that opens with a face or a fingerprint, because some courts treat a biometric unlock as nontestimonial.

What Happens if a Person Refuses

Refusing a police request is not a crime. Under Conkey, the Commonwealth generally may not offer the refusal as consciousness of guilt.

Refusing a court order has different consequences.

A defendant who does not comply with a Gelfgatt order may be held in civil contempt and confined until the defendant complies. A person confined until compliance holds “the keys of [his] prison in [his] own pocket,” so contempt of that kind is civil. Civil contempt requires “a clear and undoubted disobedience of a clear and unequivocal command.” Birchall, petitioner, 454 Mass. 837, 848, 851 (2009). A defendant who claims to be unable to comply bears the burden of proving that inability. Mahoney v. Commonwealth, 415 Mass. 278, 286 (1993).

In 2026, the Appeals Court addressed for the first time whether time confined for civil contempt counts toward a later sentence. In Commonwealth v. Theogene, No. 24-P-1395 (Mass. App. Ct. Apr. 9, 2026), a defendant ordered to input the PIN to a seized iPhone refused and was held in contempt “until such time as he complies.” He was confined for months.

The Appeals Court held that he “was not entitled to receive jail credit pursuant to G. L. c. 279, § 33A, for the time he was held in custody for civil contempt prior to sentencing,” reasoning that crediting the time “would undermine a judge’s inherent contempt power to coerce a contemnor to obey a court order.”

Time served on a coercive contempt does not count toward the eventual sentence.

The correct response to a Gelfgatt order is litigation rather than defiance. Before compliance, defense counsel challenges through motion practice whether the order is constitutional and whether the Commonwealth proved beyond a reasonable doubt, as required by Jones, that the defendant knows the passcode.

A Passcode That Has Already Been Given

A passcode volunteered to an officer, without a court order and without compulsion, is not a compelled testimonial act at all, because the privilege applies only to communications that are compelled. Volunteering a passcode is instead an act of consent. The law of consent, rather than the law of self-incrimination, governs the consequences.

Defense counsel can still challenge the consent as involuntary, as exceeded in scope, or as the product of an unlawful seizure that preceded the consent. In Commonwealth v. Fencher, 95 Mass. App. Ct. 618 (2019), a defendant “consented to the search of her cell phone and provided passwords to both the phone and her Snapchat account,” the Appeals Court wrote. The motion judge allowed suppression on taint grounds. The Appeals Court reversed only because the seizure turned out to be supported by probable cause and the consent was found free and voluntary. The motion was available and nearly succeeded.

Consent is also given item by item. In Fencher, the defendant declined consent to search a vehicle in the same interview in which the defendant consented to the search of the cell phone. A person who consents to one search has not consented to any other search.

Anyone who has already given a passcode should have counsel assess what the police extracted, the validity and scope of the consent, and the lawfulness of the seizure that preceded the consent.

Deleting Data and the Tampering Statute

A person should not attempt to wipe or delete data from a device that is in law enforcement custody or subject to a preservation order.

The tampering statute, M.G.L. c. 268, § 13E, applies to whoever “alters, destroys, mutilates, or conceals a record, document, or other object, or attempts to do so, with the intent to impair the record, document or object’s integrity or availability for use in an official proceeding, whether or not the proceeding is pending at that time.” The Commonwealth must prove the specific intent to impair as an element of the offense.

The penalty depends on the kind of official proceeding. A defendant convicted under the tampering statute may receive a fine of up to $25,000 and up to ten years in state prison where the official proceeding involves a violation of a criminal statute. In any other case, a defendant convicted under the tampering statute may receive a fine of up to $10,000 and up to five years. Under either penalty provision, the maximum sentence to the house of correction is two and one half years.

Practical Guidance

A person should not provide a passcode to an officer without first consulting counsel. A police request is not a court order. A person has a right to decline the request and to require law enforcement to seek judicial authorization.

A person should not provide a passcode in exchange for a promise of leniency or a representation that giving the passcode will help the case. Those representations do not bind the government.

A person should not delete or remotely wipe anything.

A person who has already given a passcode should contact counsel promptly to assess what was extracted and what remains challengeable.

Key Points

Compelled entry of a passcode is testimonial in nature, but Commonwealth v. Gelfgatt, 468 Mass. 512 (2014), held that the foregone conclusion doctrine permitted the compelled decryption in that case and authorizes the order that bears its name.

Under Commonwealth v. Jones, 481 Mass. 540 (2019), art. 12 requires the Commonwealth to prove beyond a reasonable doubt that the defendant knows the passcode. The fact to be proved is knowledge, not ownership or exclusive control. The order permits only entry of the passcode, not its disclosure.

No Massachusetts appellate court has decided whether compelled biometric unlocking is permitted. The federal decisions differ on materially different facts. No federal decision binds a Massachusetts court. Article 12 is broader than the Fifth Amendment, but the Article 12 privilege still applies only to testimonial evidence. Massachusetts courts treat fingerprints as physical evidence in other settings. Commonwealth v. Conkey, 430 Mass. 139 (1999).

Refusing a police request is not a crime. The Commonwealth generally may not use the refusal as consciousness of guilt. Conkey.

Refusing a court order can result in coercive civil confinement. Under Commonwealth v. Theogene, No. 24-P-1395 (Mass. App. Ct. Apr. 9, 2026), time spent in that confinement does not count toward the eventual sentence.

A passcode volunteered without compulsion raises a consent question rather than a self-incrimination question. Defense counsel may still challenge the consent as involuntary, exceeded, or tainted by an unlawful seizure. Commonwealth v. Fencher, 95 Mass. App. Ct. 618 (2019).

Deleting material from a seized device can support a charge under M.G.L. c. 268, § 13E, which requires proof of intent to impair the item’s integrity or availability for use in an official proceeding.

Attorney Joe Serpa has practiced Massachusetts criminal defense since 1995 and litigates compelled decryption and device search motions. Serpa Law Office can be reached at 617.936.0201 for a free and confidential consultation. The Boston office is at 20 Park Plaza #400A. The Quincy Office is at 500 Victory Road, Suite 400A. See also phone, computer, and digital device searches in Massachusetts and your right to remain silent.