← Back to BrewedIntel
newsmediumLegal CoercionPrivacy Violation

Apr 07, 2026 • Bruce Schneier

Hong Kong Police Can Force You to Reveal Your Encryption Keys

Hong Kong authorities have revised enforcement rules under the National Security Law, granting police expanded powers to compel individuals—including transit...

Source
Schneier on Security
Category
news
Severity
medium

Executive Summary

Hong Kong authorities have revised enforcement rules under the National Security Law, granting police expanded powers to compel individuals—including transit travelers—to disclose encryption keys, passwords, and access to personal electronic devices such as cellphones and laptops. Refusal to comply is now a criminal offense. Authorities may also seize and retain devices as evidence if deemed linked to national security offenses. The U.S. Consulate General issued this security alert warning travelers of increased privacy risks. Mitigation includes minimizing sensitive data on travel devices, using encrypted containers with plausible deniability, and understanding that these powers apply regardless of citizenship status. Travelers should exercise caution and prepare contingency plans for device inspections.

Summary

According to a new law, the Hong Kong police can demand that you reveal the encryption keys protecting your computer, phone, hard drives, etc.—even if you are just transiting the airport. In a security alert dated March 26, the U.S. Consulate General said that, on March 23, 2026, Hong Kong authorities changed the rules governing enforcement of the National Security Law. Under the revised framework, police can require individuals to provide passwords or other assistance to access personal electronic devices, including cellphones and laptops. ...

Published Analysis

Hong Kong authorities have revised enforcement rules under the National Security Law, granting police expanded powers to compel individuals—including transit travelers—to disclose encryption keys, passwords, and access to personal electronic devices such as cellphones and laptops. Refusal to comply is now a criminal offense. Authorities may also seize and retain devices as evidence if deemed linked to national security offenses. The U.S. Consulate General issued this security alert warning travelers of increased privacy risks. Mitigation includes minimizing sensitive data on travel devices, using encrypted containers with plausible deniability, and understanding that these powers apply regardless of citizenship status. Travelers should exercise caution and prepare contingency plans for device inspections. According to a new law, the Hong Kong police can demand that you reveal the encryption keys protecting your computer, phone, hard drives, etc.—even if you are just transiting the airport. In a security alert dated March 26, the U.S. Consulate General said that, on March 23, 2026, Hong Kong authorities changed the rules governing enforcement of the National Security Law. Under the revised framework, police can require individuals to provide passwords or other assistance to access personal electronic devices, including cellphones and laptops. ... According to a new law, the Hong Kong police can demand that you reveal the encryption keys protecting your computer, phone, hard drives, etc.—even if you are just transiting the airport. In a security alert dated March 26, the U.S. Consulate General said that, on March 23, 2026, Hong Kong authorities changed the rules governing enforcement of the National Security Law. Under the revised framework, police can require individuals to provide passwords or other assistance to access personal electronic devices, including cellphones and laptops. The consulate warned that refusal to comply is now a criminal offense. It also said authorities have expanded powers to take and keep personal electronic devices as evidence if they claim the devices are linked to national security offenses.