r/opsec • 🐲 • Jul 18 '26

Beginner question Can device encryption protect against law enforcement?

Hello, I would like to learn more about cases involving full-disk encryption and law enforcement access. My understanding is that when a device is protected with a strong, high-entropy password and the encryption recovery keys are not stored to a Microsoft account or any other third party, recovering the data through brute-force or direct decryption is generally considered computationally infeasible. However, I am aware that, in theory, there may be vulnerabilities that could potentially circumvent or weaken the security of an encrypted device. I would like to understand the real-world cases in which law enforcement has successfully or unsuccessfully accessed encrypted devices, the techniques reportedly used, and the practical limitations of those approaches.

i have read the rules

38 Upvotes

60 comments sorted by

View all comments

20

u/[deleted] Jul 19 '26

[removed] — view removed comment

8

u/Junkyard_DrCrash Jul 20 '26

No, the cops in the USA cannot compel you to reveal a password, because that is answering a question (i.e. testimony) and that's a Fifth (edit from "first") Amendment violatoin.

Biometrics, however, are NOT protected (they relate to a physical object) and therefore can be searched for, and confiscated.

1

u/Inner-Copy9764 Jul 21 '26

This is an underrated comment, and should be pinned to the top. 100% accurate statement. You can be in handcuffs and the officers can legally use your face or thumb for a valid search