Apr 07, 2026 • Bruce Schneier
Hong Kong Police Can Force You to Reveal Your Encryption Keys
Hong Kong authorities have revised enforcement rules under the National Security Law, granting police expanded powers to compel individuals—including transit...
Executive Summary
Hong Kong authorities have revised enforcement rules under the National Security Law, granting police expanded powers to compel individuals—including transit travelers—to disclose encryption keys, passwords, and access to personal electronic devices such as cellphones and laptops. Refusal to comply is now a criminal offense. Authorities may also seize and retain devices as evidence if deemed linked to national security offenses. The U.S. Consulate General issued this security alert warning travelers of increased privacy risks. Mitigation includes minimizing sensitive data on travel devices, using encrypted containers with plausible deniability, and understanding that these powers apply regardless of citizenship status. Travelers should exercise caution and prepare contingency plans for device inspections.
Summary
According to a new law, the Hong Kong police can demand that you reveal the encryption keys protecting your computer, phone, hard drives, etc.—even if you are just transiting the airport. In a security alert dated March 26, the U.S. Consulate General said that, on March 23, 2026, Hong Kong authorities changed the rules governing enforcement of the National Security Law. Under the revised framework, police can require individuals to provide passwords or other assistance to access personal electronic devices, including cellphones and laptops. ...
Published Analysis
Hong Kong authorities have revised enforcement rules under the National Security Law, granting police expanded powers to compel individuals—including transit travelers—to disclose encryption keys, passwords, and access to personal electronic devices such as cellphones and laptops. Refusal to comply is now a criminal offense. Authorities may also seize and retain devices as evidence if deemed linked to national security offenses. The U.S. Consulate General issued this security alert warning travelers of increased privacy risks. Mitigation includes minimizing sensitive data on travel devices, using encrypted containers with plausible deniability, and understanding that these powers apply regardless of citizenship status. Travelers should exercise caution and prepare contingency plans for device inspections. According to a new law, the Hong Kong police can demand that you reveal the encryption keys protecting your computer, phone, hard drives, etc.—even if you are just transiting the airport. In a security alert dated March 26, the U.S. Consulate General said that, on March 23, 2026, Hong Kong authorities changed the rules governing enforcement of the National Security Law. Under the revised framework, police can require individuals to provide passwords or other assistance to access personal electronic devices, including cellphones and laptops. ... According to a new law, the Hong Kong police can demand that you reveal the encryption keys protecting your computer, phone, hard drives, etc.—even if you are just transiting the airport. In a security alert dated March 26, the U.S. Consulate General said that, on March 23, 2026, Hong Kong authorities changed the rules governing enforcement of the National Security Law. Under the revised framework, police can require individuals to provide passwords or other assistance to access personal electronic devices, including cellphones and laptops. The consulate warned that refusal to comply is now a criminal offense. It also said authorities have expanded powers to take and keep personal electronic devices as evidence if they claim the devices are linked to national security offenses.