PanicStation.org
UK USA
uk Legal, police, prison & official contact

What to do if…
police ask you to consent to access your cloud backups or online accounts

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy UK guide

Short answer

Do not give voluntary consent, passwords, recovery codes, or login approvals in the moment. Calmly say you want to speak to a solicitor first, and ask whether this is a voluntary request or a formal legal power.

Do not do these things

  • Do not give passwords, passcodes, recovery codes, backup codes, or approve login prompts or one-time codes as a voluntary favour.
  • Do not unlock a phone, tablet, or laptop “just to show one thing” if it is signed in to the cloud or online accounts they want to access.
  • Do not sign a consent form you have not read, understood, and had time to discuss with a solicitor.
  • Do not agree to broad wording such as “all accounts”, “all data”, “all cloud backups”, or no date limits just because you feel rushed.
  • Do not delete, hide, reset, move, or “clean up” account data; that can create separate serious problems.
  • Do not argue about the law on the spot. Use a calm boundary: “I do not give voluntary consent without legal advice.”
  • If police say they are using a warrant, order, notice, or other formal power, do not ignore it or argue. Ask to see the paperwork and ask to speak to a solicitor immediately.

What to do now

  1. Create a pause and clarify your position. Ask: “Am I being detained, or am I free to leave?” If you are at a police station, also ask: “Am I under arrest?” Then say: “I need a moment to understand what you are asking.”

  2. Say the boundary clearly. Use plain words: “I do not consent to access to my cloud backups or online accounts.” Then add: “I want to speak to a solicitor before I answer questions, provide codes, unlock anything, or sign anything.”

  3. Ask for legal advice as early as possible. If you are in police custody or being questioned at a police station, ask for a solicitor. Free police-station legal advice is generally available, but the wording and process vary across England and Wales, Scotland, and Northern Ireland.

  4. Ask them to put the request in writing. Ask for the written request or form to state:

    • which account or service they want, such as iCloud, Google, email, messaging, photos, or social media;
    • exactly what data they want, such as backups, messages, photos, location history, login records, or account settings;
    • the date range;
    • why that data is needed;
    • whether you can refuse or limit consent;
    • whether they say they are relying on voluntary consent, a warrant, an order, a notice, or another formal power.

  5. Do not help them log in while you are waiting for advice. That includes typing a password, reading out a code, approving a two-factor prompt, scanning a QR code, opening a password manager, or unlocking a device that is already signed in to the account.

  6. Keep the requests separate. Access to online accounts or cloud backups, taking a device, extracting data from a device, and requiring a password or key can be different things. Ask: “Which of these are you asking me to agree to, specifically?”

  7. If you are a victim or witness, you can still pause and ask for limits. Say: “I do not feel able to give informed consent right now.” You can ask: “Can this be limited to this account, this type of data, and these dates?” You can also ask: “What happens if I do not consent?”

  8. If you are shown a form or paperwork, read the scope before saying anything else. Look for the account names, date range, data types, whether consent can be withdrawn, and who may receive the data. If it is vague, say: “I cannot give informed consent to something this broad without legal advice.”

  9. If anything is taken, refused, signed, or shown to you, record basics as soon as you safely can. Note the date and time, officer names or numbers, police force, what account access was requested, what you said, and whether you were shown any form, notice, warrant, or order. Ask for a copy if one is available.

What can wait

  • You do not need to decide now whether you will ever agree to account or cloud access.
  • You do not need to explain your whole account history, relationships, messages, photos, or location data in the moment.
  • You do not need to reset passwords, find old devices, contact account providers, or gather screenshots before speaking to a solicitor.
  • You do not need to solve the whole legal situation now; the immediate task is to avoid rushed, broad, voluntary access.

Important reassurance

It is normal to freeze when police ask for access to private accounts or years of cloud data. A calm refusal of voluntary consent, while asking for written scope and legal advice, is a reasonable first step.

Scope note

These are first steps only for the first minutes or hours of police contact. If you are arrested, interviewed, served paperwork, asked for a password or key, or have devices seized, later decisions may need specialist legal help.

Important note

This is general information, not legal advice. Police powers and procedures vary across the UK and by context, including terrorism, protected electronic information, warrants, notices, and device extraction powers. Ask for a solicitor as early as possible.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us