Your Fifth Amendment Right to Refuse to Provide Your iPhone Passcode in Massachusetts: What the Law Says

When Massachusetts law enforcement seizes a digital device and asks for the passcode, many people comply out of panic, a wish to appear cooperative, or a belief that refusing will look like guilt. That choice has consequences, and the law governing it is more precise than most summaries suggest.

Three situations are frequently run together, and they are governed by different rules. Declining to give a passcode to an officer is one thing. Refusing consent to a search is a second. Disobeying a court order compelling entry of a passcode is a third. This post separates them.

Three Situations, Three Different Rules

An officer asks for the passcode. A police request is not a court order. There is no obligation to answer, and no Massachusetts statute makes the refusal a crime. Article 12 provides a further protection: evidence of a defendant’s outright refusal to comply with a police request generally may not be admitted as consciousness of guilt, because “in so refusing a defendant furnishes evidence against himself.” Commonwealth v. Conkey, 430 Mass. 139, 142 to 143 (1999). Accord Commonwealth v. Hinckley, 422 Mass. 261, 264 (1996). The refusal is not supposed to be used against the person who made it.

An officer asks to search the device. That is a consent question under the Fourth Amendment and art. 14, not a self-incrimination question. Consent must be voluntary, and the Commonwealth bears the burden of proving it. A person may decline.

A judge orders decryption. That is where the constitutional analysis below applies, and where the consequences of refusal are real.

The Testimonial Act Doctrine

The Fifth Amendment privilege protects a person from being compelled to make testimonial communications that are incriminating. The privilege requires all three: the communication must be testimonial, incriminating, and compelled.

The United States Supreme Court established in Fisher v. United States, 425 U.S. 391 (1976), that the act of producing evidence can itself be testimonial, because production concedes that the item exists, that the person producing it possesses or controls it, and that it is authentic. Where “[t]he existence and location of the papers are a foregone conclusion and the taxpayer adds little or nothing to the sum total of the Government’s information by conceding that he in fact has the papers,” the act is not protected. 425 U.S. at 411.

The Court applied the same framework in United States v. Hubbell, 530 U.S. 27 (2000), rejecting a compelled production where the government “ha[d] not shown that it had any prior knowledge of either the existence or the whereabouts” of the documents. 530 U.S. at 45.

In Commonwealth v. Gelfgatt, 468 Mass. 512 (2014), the Supreme Judicial Court observed that entering an encryption key “would appear, at first blush, to be a testimonial communication that triggers Fifth Amendment protection,” and that the act “would be a communication of his knowledge about particular facts.” It then held that on the record before it, the facts conveyed were foregone conclusions, and “the act of decryption is not a testimonial communication that is protected by the Fifth Amendment.”

Gelfgatt is the decision that permits compelled decryption in Massachusetts. An order compelling a defendant to unlock a device is called a Gelfgatt order for that reason.

Gelfgatt also sets out what the government must already know for the exception to apply: “(1) the existence of the evidence demanded; (2) the possession or control of that evidence by the defendant; and (3) the authenticity of the evidence.” 468 Mass. at 524.

The Foregone Conclusion Standard After Jones

In Gelfgatt the exception applied because the defendant had already told investigators that the seized computers were his, that their contents were encrypted, and that he was able to decrypt them. His compelled entry of the key told the Commonwealth nothing new. The decision left open how certain the government must be.

The Supreme Judicial Court answered that in Commonwealth v. Jones, 481 Mass. 540 (2019). Where the Commonwealth seeks a Gelfgatt order, “art. 12 requires that, for the foregone conclusion to apply, the Commonwealth must prove beyond a reasonable doubt that the defendant knows the password.” That is the highest standard of proof our courts apply to a factual question.

The Court rejected the Commonwealth’s argument that clear and convincing evidence should suffice, and declined to speculate about the federal standard: “[w]hatever the standard under the Fifth Amendment may be, requiring the Commonwealth to bear this high burden is necessary to ensure that the art. 12 rights of defendants are adequately protected.”

Three points from Jones matter in practice, and one of them is routinely given away.

The fact to be proved is knowledge, not ownership. “[T]he Commonwealth is only required to establish the defendant’s knowledge of the password beyond a reasonable doubt, not his ownership or exclusive control of the LG phone . . . exclusive control of the phone is not required.” In Jones the defendant’s possession of the phone at arrest, his statement that the number was his, subscriber and cell site records, and a witness who reached him at that number together satisfied the burden even though others may also have used the device.

The order permits entry, not disclosure. This is the limitation most often lost in summaries of the case, and it favors the defense. The Court wrote: “We need not, and do not, resolve this distinction here, and our decision is therefore limited to only the physical entry of the password by the defendant, as we required in Gelfgatt. The defendant may therefore only be compelled to enter the password to the LG phone, not disclose it.” Whether the foregone conclusion doctrine would permit compelled oral or written disclosure of a passcode is an open question.

A denial is not necessarily the end for the Commonwealth. Jones also holds that “a judge acting on a renewed Gelfgatt motion may consider additional information without first finding that it was not known or not reasonably available at the time of the first filing.” Counsel should expect a second application supported by new material.

Justice Lenk wrote separately, taking the view that the government should also be required to demonstrate, beyond a reasonable doubt, “that the government already knows, with reasonable particularity, the existence and location of relevant, incriminating evidence it expects to find on that device.” That is a concurrence rather than the holding. The Court’s standard is knowledge of the passcode.

Unlocking is also only the beginning. The search that follows must comply with the warrant requirements set out in the guide to digital search warrants for phones and computers.

Biometric Unlocking

The analysis for biometric unlocking, meaning Touch ID, Face ID, and fingerprint scanners, is distinct from the passcode analysis, and it is unsettled.

No Massachusetts appellate court has decided it. The Supreme Judicial Court has not addressed whether the Fifth Amendment or art. 12 permits compelled biometric unlocking, and neither has the Appeals Court. Every reported decision on the question is federal, and no federal decision binds a Massachusetts state court on this issue.

The federal decisions reached different results on materially different facts. In United States v. Payne, 99 F.4th 495 (9th Cir. 2024), the Ninth Circuit held that “the compelled use of a biometric to unlock an electronic device was not testimonial because it required no cognitive exertion,” where an officer physically applied a parolee’s thumb to the device and the parolee was subject to a suspicionless general search condition.

The panel added a limit that is regularly omitted: “[o]ur opinion should not be read to extend to all instances where a biometric is used to unlock an electronic device. Indeed, the outcome on the testimonial prong may have been different had Officer Coddington required Payne to independently select the finger that he placed on the phone.”

In United States v. Brown, 125 F.4th 1186 (D.C. Cir. 2025), the District of Columbia Circuit held that the compelled opening of a cellphone was testimonial where an agent ordered a co-defendant to open the phone himself and he complied. The disagreement is real, but the weight of it sits in the district courts, and the facts differ in a way that may explain the outcomes.

A Massachusetts defendant should not assume that art. 12’s greater breadth will resolve this question in his favor. Article 12 protects a person from being compelled to “furnish evidence” rather than to be “a witness against” himself, and the Supreme Judicial Court has “consistently held that art. 12 requires a broader interpretation” than the Fifth Amendment. Jones, quoting Opinion of the Justices, 412 Mass. 1201, 1210 (1992), and Attorney Gen. v. Colleton, 387 Mass. 790, 796 (1982).

But Gelfgatt contains a qualifier that cuts the other way: although art. 12 demands more expansive protection, “it does not change the classification of evidence to which the privilege applies. Only that genre of evidence having a testimonial or communicative nature is protected under the privilege against self-incrimination,” quoting Commonwealth v. Burgess, 426 Mass. 206, 211 (1997).

The Supreme Judicial Court has placed fingerprints on the unprotected side of that line in other settings. “If evidence sought is real or physical evidence, such as hair and blood samples, voice exemplars, fingerprints, lineups, sobriety tests, or breathalyzer tests, art. 12 does not protect a person from having to provide such evidence.” Conkey, 430 Mass. at 142. Accord Commonwealth v. Lydon, 413 Mass. 309, 313 to 314 (1992).

A device that opens only with a memorized passcode stands on the strongest available footing. A device that opens with a face or a fingerprint may not.

What Happens if You Refuse

Refusing a police request is not a crime, and under Conkey the refusal generally may not be offered as consciousness of guilt.

A court order is different.

If a judge issues a Gelfgatt order and the defendant does not comply, the defendant may be held in civil contempt and confined until he complies. Contempt of that kind is civil because the contemnor holds “the keys of [his] prison in [his] own pocket,” and civil contempt requires “a clear and undoubted disobedience of a clear and unequivocal command.” Birchall, petitioner, 454 Mass. 837, 848, 851 (2009). A defendant who says he cannot comply bears the burden of proving it. Mahoney v. Commonwealth, 415 Mass. 278, 286 (1993).

The Appeals Court addressed the consequence of that confinement as a matter of first impression in 2026. In Commonwealth v. Theogene, No. 24-P-1395 (Mass. App. Ct. Apr. 9, 2026), a defendant ordered to input the PIN to a seized iPhone refused and was held in contempt “until such time as he complies.” He was confined for months.

The Appeals Court held that he “was not entitled to receive jail credit pursuant to G. L. c. 279, § 33A, for the time he was held in custody for civil contempt prior to sentencing,” reasoning that crediting the time “would undermine a judge’s inherent contempt power to coerce a contemnor to obey a court order.”

Time served on a coercive contempt does not count toward the eventual sentence.

The correct response to a Gelfgatt order is litigation rather than defiance. Whether the order is constitutional, and whether the Commonwealth proved knowledge of the passcode beyond a reasonable doubt as Jones requires, is challenged through motion practice before compliance.

If a Passcode Has Already Been Given

A passcode volunteered to an officer, without a court order and without compulsion, is not a compelled testimonial act at all, because the privilege applies only to communications that are compelled. What it is instead is consent, and the consequences follow the law of consent rather than the law of self-incrimination.

Consent can still be challenged: it may have been involuntary, exceeded in scope, or the product of an unlawful seizure that preceded it. In Commonwealth v. Fencher, 95 Mass. App. Ct. 618 (2019), a defendant “consented to the search of her cell phone and provided passwords to both the phone and her Snapchat account,” and the motion judge allowed suppression on taint grounds; the Appeals Court reversed only because the seizure turned out to be supported by probable cause and the consent was found free and voluntary. The motion was available and nearly succeeded.

Consent is also given item by item. In the same interview in Fencher, the defendant declined consent to search a vehicle. Agreeing to one search is not agreeing to all of them.

Anyone who has already given a passcode should have counsel assess what was extracted, whether the consent was valid and how far it went, and whether the seizure that preceded it was lawful.

Do Not Delete Anything

Do not attempt to wipe or delete data from a device that is in law enforcement custody or subject to a preservation order.

The tampering statute, M.G.L. c. 268, § 13E, applies to whoever “alters, destroys, mutilates, or conceals a record, document, or other object, or attempts to do so, with the intent to impair the record, document or object’s integrity or availability for use in an official proceeding, whether or not the proceeding is pending at that time.” The specific intent is an element.

The penalty depends on the proceeding: where the official proceeding involves a violation of a criminal statute, the maximum is a fine of up to $25,000 and up to ten years in state prison; otherwise the maximum is a fine of up to $10,000 and up to five years. Both tiers cap house of correction time at two and one half years.

Practical Guidance

Do not provide a passcode to an officer without first consulting counsel. A police request is not a court order, and there is a right to decline and to require law enforcement to seek judicial authorization.

Do not provide a passcode in exchange for a promise of leniency or a representation that it will help the case. Those representations do not bind the government.

Do not delete or remotely wipe anything.

If a passcode has already been given, contact counsel promptly to assess what was extracted and what remains challengeable.

Key Points

Compelled entry of a passcode is testimonial in nature, but Commonwealth v. Gelfgatt, 468 Mass. 512 (2014), held that the foregone conclusion doctrine permitted the compelled decryption there and authorizes the order that now bears its name.

Under Commonwealth v. Jones, 481 Mass. 540 (2019), art. 12 requires the Commonwealth to prove beyond a reasonable doubt that the defendant knows the passcode. The fact to be proved is knowledge, not ownership or exclusive control, and the order permits only entry of the passcode, not its disclosure.

No Massachusetts appellate court has decided whether compelled biometric unlocking is permitted. The federal decisions differ on materially different facts and none binds a Massachusetts court. Article 12’s greater breadth does not extend the privilege to evidence that is not testimonial, and Massachusetts treats fingerprints as physical evidence in other settings. Commonwealth v. Conkey, 430 Mass. 139 (1999).

Refusing a police request is not a crime, and the refusal generally may not be used as consciousness of guilt. Conkey.

Refusing a court order can result in coercive civil confinement, and under Commonwealth v. Theogene, No. 24-P-1395 (Mass. App. Ct. Apr. 9, 2026), that time does not count toward the eventual sentence.

A passcode volunteered without compulsion is a consent question rather than a self-incrimination question, and consent may still be challenged as involuntary, exceeded, or tainted by an unlawful seizure. Commonwealth v. Fencher, 95 Mass. App. Ct. 618 (2019).

Deleting material from a seized device can support a charge under M.G.L. c. 268, § 13E, which requires proof of intent to impair the item’s integrity or availability for use in an official proceeding.

Attorney Joe Serpa has practiced Massachusetts criminal defense since 1995 and litigates compelled decryption and device search motions. Serpa Law Office can be reached at 617.936.0201 for a free and confidential consultation. The Boston office is at 20 Park Plaza #400A. The Quincy Office is at 500 Victory Road, Suite 400A. See also phone, computer, and digital device searches in Massachusetts and your right to remain silent.