Hong Kong Police Can Now Force Phone Unlock Without Warrant Under Expanded Security Laws
Hong Kong Grants Police Warrantless Phone Unlock Powers
Hong Kong authorities have enacted sweeping amendments to the National Security Law that allow police to demand passwords and decryption methods for smartphones, laptops, and other encrypted devices — without requiring a warrant or judicial authorization.
The new rules, effective March 23, 2026, were gazetted by Chief Executive John Lee without Legislative Council oversight, significantly expanding police powers that previously required higher-level authorization.
Key Provisions
- Mandatory device unlocking: Police can demand any password or decryption method from device owners, IT administrators, or anyone with access credentials
- Criminal penalties: Refusal to unlock carries a one-year jail sentence plus HK,000 (~,700 USD) fine. Providing fake credentials results in up to three years imprisonment
- Broad scope: Covers smartphone PINs, biometric locks, enterprise encryption keys, VPN configurations, and encrypted messaging apps like Signal
Impact on Travelers and Businesses
For travelers visiting Hong Kong, the rules create significant legal risk around standard privacy tools. Encrypted messaging apps and VPNs — tools widely used by business professionals — now carry potential criminal liability if authorities deem communications threatening to national security under the deliberately vague categories of secession, subversion, terrorism, or foreign collusion.
International Reaction
Civil liberties organizations and privacy advocates have condemned the amendments, warning that they bypass traditional legal protections and could chill free expression. Technology companies with Hong Kong operations are reassessing data handling policies for employees traveling through the territory.